$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da70a0ee-0229-36a9-93b4-14d0a0417de3.roa File: da70a0ee-0229-36a9-93b4-14d0a0417de3.roa (raw, json) Hash identifier: RzOjIn9aq16G9oNWNeLI3O9iHbj5TOIUxvHZsVQ8hFo= Subject key identifier: C5:AA:40:6E:48:05:94:BC:75:0E:61:B6:1D:01:CE:0B:0E:1B:9A:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D21145F286BF975381477C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da70a0ee-0229-36a9-93b4-14d0a0417de3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.60.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:45:f2:86:bf:97:53:81:47:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f590ac71-8fcf-4e9d-89b8-5bf525dd6053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:3d:d9:e7:53:c3:7a:39:8a:f1:07:8a:06: eb:b1:b3:e5:e9:e9:10:e9:62:93:fe:85:56:2c:42: 9f:4d:2a:96:33:29:64:30:97:59:47:7c:96:f2:e1: 64:61:c2:2c:9f:b2:12:7b:36:5c:19:ea:3c:66:25: 9d:4b:3d:db:86:df:05:39:90:74:c9:be:e8:37:69: 60:23:c8:31:d0:53:24:be:77:67:9f:dc:f0:30:a3: 9c:60:f7:38:74:79:a0:7f:2b:04:2f:98:e2:30:25: b5:8d:95:c2:c8:ef:60:c4:5f:22:bd:34:9f:61:c2: 41:27:72:0b:f9:ba:3b:77:d4:24:a4:9a:48:f5:23: 9e:e5:bb:6a:04:96:2c:1b:28:3f:26:44:a6:73:d5: df:09:f1:07:ec:97:70:73:52:a4:6e:a3:59:95:3f: ec:11:56:71:b6:8c:cb:4e:04:f5:f5:62:8e:d5:76: fb:91:48:a6:f4:a2:dd:c5:ea:1e:4b:57:fa:83:51: fa:97:22:6f:35:92:09:fc:d7:f9:dd:f3:5c:f0:ff: 3f:8f:07:6d:0b:f6:db:74:ee:b7:e1:50:43:37:3f: 10:71:77:68:99:82:06:c8:67:2f:c1:c1:f8:08:da: 2d:7a:1e:a0:cc:03:0d:cc:a0:37:5c:59:97:8c:0e: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AA:40:6E:48:05:94:BC:75:0E:61:B6:1D:01:CE:0B:0E:1B:9A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da70a0ee-0229-36a9-93b4-14d0a0417de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:62:e2:18:f8:fd:86:9d:cb:6e:c9:69:8d:bb:1a:8b:82:2f: d6:bc:61:c1:b3:de:e5:8c:dd:c7:85:b6:15:2c:16:56:53:6f: 46:9b:b7:d6:ed:b8:67:a4:6d:af:30:7b:2b:1d:b6:69:2a:77: 7e:0e:4e:a7:a4:a3:d6:ad:ec:af:8f:14:29:ca:40:0e:06:3a: 6a:ef:73:99:c4:31:6d:5c:00:e9:b1:d4:cf:d7:43:f8:f8:6a: 35:e8:90:48:ae:b4:2d:5b:28:3d:28:c0:64:56:28:93:5f:25: bf:25:6b:64:7a:10:e3:e7:fb:56:dc:e0:72:ec:0c:f2:6b:c7: aa:ec:6a:4d:60:50:80:e4:15:24:c4:ae:30:9e:fe:d4:2d:18: 40:44:4e:69:60:18:7f:67:d0:3f:d1:b9:38:af:d6:6d:92:29: 9b:dd:8c:18:44:51:d8:4e:e8:56:ba:9a:d8:8a:aa:59:61:b2: 7a:b0:75:cc:36:c9:42:e3:0f:c1:4b:55:c5:a4:f4:2f:3e:f4: 4e:78:23:78:f5:d6:04:4f:f1:bb:d2:b0:37:81:fc:70:60:99: 1f:cd:51:75:76:84:e2:66:35:bf:47:f5:0d:ab:0d:50:62:c8: c0:15:f7:6d:45:d5:df:98:e8:5c:4c:5d:46:95:06:64:27:8a: fa:6b:fa:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUXyhr+XU4FHfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjU5MGFjNzEtOGZjZi00ZTlkLTg5YjgtNWJmNTI1ZGQ2MDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX892edTw3o5ivEHigbrsbPl6ekQ6WKT/oVW LEKfTSqWMylkMJdZR3yW8uFkYcIsn7ISezZcGeo8ZiWdSz3bht8FOZB0yb7oN2lg I8gx0FMkvndnn9zwMKOcYPc4dHmgfysEL5jiMCW1jZXCyO9gxF8ivTSfYcJBJ3IL +bo7d9QkpJpI9SOe5btqBJYsGyg/JkSmc9XfCfEH7Jdwc1KkbqNZlT/sEVZxtozL TgT19WKO1Xb7kUim9KLdxeoeS1f6g1H6lyJvNZIJ/Nf53fNc8P8/jwdtC/bbdO63 4VBDNz8QcXdomYIGyGcvwcH4CNoteh6gzAMNzKA3XFmXjA6tKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWqQG5IBZS8dQ5hth0BzgsOG5r/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE3MGEwZWUtMDIyOS0z NmE5LTkzYjQtMTRkMGEwNDE3ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBi4hj4/Yady27JaY27GouCL9a8YcGz3uWM3ceFthUsFlZTb0abt9bt uGekba8weysdtmkqd34OTqeko9at7K+PFCnKQA4GOmrvc5nEMW1cAOmx1M/XQ/j4 ajXokEiutC1bKD0owGRWKJNfJb8la2R6EOPn+1bc4HLsDPJrx6rsak1gUIDkFSTE rjCe/tQtGEBETmlgGH9n0D/RuTiv1m2SKZvdjBhEUdhO6Fa6mtiKqllhsnqwdcw2 yULjD8FLVcWk9C8+9E54I3j11gRP8bvSsDeB/HBgmR/NUXV2hOJmNb9H9Q2rDVBi yMAV921F1d+Y6FxMXUaVBmQnivpr+gw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:50 2025 by rpki-client