$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0b1cefd-d8c7-3b92-bc4c-0f9f4e80baa8.roa File: e0b1cefd-d8c7-3b92-bc4c-0f9f4e80baa8.roa (raw, json) Hash identifier: bolE1MvaY9DqwTRYiN8TgLUU+MmbZ/zIjnuPoDylKN0= Subject key identifier: F3:FF:96:60:60:53:AA:61:55:9A:E1:FB:38:04:0B:FA:49:F1:EF:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDA87714FA1080535D580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0b1cefd-d8c7-3b92-bc4c-0f9f4e80baa8.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.39.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:da:87:71:4f:a1:08:05:35:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=001afb28-5c10-4372-a5db-27b2de094ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:61:22:90:3b:a4:4c:6e:ea:b5:c4:16:b4: c4:2c:9e:1f:be:3f:82:aa:f6:77:73:fd:a8:17:ed: 3a:77:75:a4:33:4b:98:c3:b9:1c:67:e8:d5:c4:98: a0:94:03:9c:9f:7f:cf:65:3a:c5:9d:f5:f8:db:5b: 06:8d:a0:81:ec:ef:65:37:18:b5:3c:a3:22:ee:88: 36:00:fc:05:cd:1f:84:9d:ea:08:c7:92:28:68:c4: 50:ff:48:c4:7d:2a:86:f3:79:0c:66:f9:23:11:d6: 25:8e:2f:41:d7:28:5b:3a:55:2d:23:b7:99:36:3e: 61:1c:d8:19:f4:25:34:de:a8:10:43:a5:04:04:eb: 10:c9:c6:d3:82:dc:6b:8d:1a:06:9a:3b:5a:45:cf: 42:03:38:ab:51:5f:53:4d:30:cd:98:2d:1d:fe:55: 23:fe:12:d5:45:6c:67:c0:99:dc:5a:c2:12:4d:ba: 00:49:9d:02:17:bb:22:b4:cc:36:ee:f4:9b:91:7c: 75:af:cd:7d:52:5d:53:5d:11:6b:fe:4e:96:42:17: 5a:b5:32:07:38:cc:c0:b3:2f:1e:63:3f:b1:7d:9f: e5:c1:98:a2:7e:e3:bc:39:e2:cb:15:c6:07:78:82: 8e:7a:1b:c2:d6:4e:d6:96:c3:60:8e:9c:7d:ee:0c: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:96:60:60:53:AA:61:55:9A:E1:FB:38:04:0B:FA:49:F1:EF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0b1cefd-d8c7-3b92-bc4c-0f9f4e80baa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ff:f5:d2:09:7b:d6:09:75:47:5a:61:f5:fe:c7:35:27:95: 45:4a:14:8d:d0:02:11:6c:af:fb:d1:5e:aa:b8:81:e1:cb:f8: f8:e8:f9:bb:c5:29:19:9b:c3:8f:0b:66:0b:a0:4c:3b:0b:84: be:a5:49:bc:82:90:fa:9a:b6:22:1b:f3:e4:8a:ef:84:a9:8f: 4d:85:ca:7e:08:b0:9a:ab:49:cd:ab:eb:0e:47:0e:37:4d:cc: 1b:01:14:31:87:dc:e8:6a:74:a8:4b:39:6e:f7:a6:2c:ab:37: 8e:47:76:d5:db:cf:67:d4:a2:fb:30:c9:bc:20:7b:9c:43:65: aa:f7:c2:cc:e5:27:fd:56:de:2f:68:31:e6:e0:37:d2:6c:6b: e4:e3:c0:96:48:dc:81:32:73:ed:1c:fd:05:a9:86:41:dc:57: 0a:f3:31:fd:ea:af:cb:57:7a:95:e8:8b:36:17:05:4f:ec:6a: 48:18:03:57:ba:18:cb:6c:6d:ef:67:2c:47:b7:93:f0:29:3f: 05:c1:e0:b2:40:b1:21:e2:09:a4:4f:b8:2d:64:fc:a2:f3:d6: 10:34:1b:f1:cc:1f:26:d9:44:dc:a2:d2:c8:f5:72:9c:42:e7: 49:8f:78:92:56:69:3d:72:0f:28:dc:56:cd:7b:6f:9f:84:e2: f8:83:7a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtqHcU+hCAU11YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MDAxYWZiMjgtNWMxMC00MzcyLWE1ZGItMjdiMmRlMDk0ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCJhIpA7pExu6rXEFrTELJ4fvj+CqvZ3c/2o F+06d3WkM0uYw7kcZ+jVxJiglAOcn3/PZTrFnfX421sGjaCB7O9lNxi1PKMi7og2 APwFzR+EneoIx5IoaMRQ/0jEfSqG83kMZvkjEdYlji9B1yhbOlUtI7eZNj5hHNgZ 9CU03qgQQ6UEBOsQycbTgtxrjRoGmjtaRc9CAzirUV9TTTDNmC0d/lUj/hLVRWxn wJncWsISTboASZ0CF7sitMw27vSbkXx1r819Ul1TXRFr/k6WQhdatTIHOMzAsy8e Yz+xfZ/lwZiifuO8OeLLFcYHeIKOehvC1k7WlsNgjpx97gx9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP/lmBgU6phVZrh+zgEC/pJ8e+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTBiMWNlZmQtZDhjNy0z YjkyLWJjNGMtMGY5ZjRlODBiYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv/9dIJe9YJdUdaYfX+xzUnlUVKFI3QAhFsr/vRXqq4geHL+Pjo+bvF KRmbw48LZgugTDsLhL6lSbyCkPqatiIb8+SK74Spj02Fyn4IsJqrSc2r6w5HDjdN zBsBFDGH3OhqdKhLOW73piyrN45HdtXbz2fUovswybwge5xDZar3wszlJ/1W3i9o MebgN9Jsa+TjwJZI3IEyc+0c/QWphkHcVwrzMf3qr8tXepXoizYXBU/sakgYA1e6 GMtsbe9nLEe3k/ApPwXB4LJAsSHiCaRPuC1k/KLz1hA0G/HMHybZRNyi0sj1cpxC 50mPeJJWaT1yDyjcVs17b5+E4viDelY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:27 2025 by rpki-client