$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e498233d-c85d-35ff-8649-9e66740e097c.roa File: e498233d-c85d-35ff-8649-9e66740e097c.roa (raw, json) Hash identifier: wsaYxJhR5tNin6Fts12JHpiAqSpFfAGz/z1w6rRYF3A= Subject key identifier: D1:14:7F:0B:C9:D1:F8:BF:DB:E8:16:7B:BA:A8:6D:3F:4A:50:FD:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEEBAE755EBDF372278A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e498233d-c85d-35ff-8649-9e66740e097c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.42.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:eb:ae:75:5e:bd:f3:72:27:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=29b60d3c-38a7-43ad-9388-a5b3246c9722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:85:6c:2b:3b:7a:63:3f:75:d4:ce:46:df: be:4b:85:ec:4a:78:af:d7:37:66:05:e6:c6:13:3c: 53:10:e9:87:cb:08:5e:01:78:68:b7:b3:52:13:10: 52:c9:1c:07:8b:cf:6f:8f:d4:c8:15:89:88:ea:2f: 8a:d3:9e:aa:d4:34:c4:99:42:89:c1:5e:4a:9d:18: e4:19:55:33:ce:22:35:78:6f:02:59:ae:41:7f:1d: 6f:f7:da:ba:ec:08:4a:d8:b0:13:a2:fa:5e:e8:0a: d2:73:71:1b:c8:71:08:17:2a:7a:73:c6:f5:c7:83: 19:89:89:fb:4f:06:84:1b:0f:9b:3a:73:2d:2c:01: 1a:76:7a:2c:ca:1c:f3:e6:57:16:fe:03:da:ed:54: 91:1b:27:5d:0a:7f:e5:a4:06:9c:ce:18:39:ee:4e: 96:16:4d:6c:c4:f6:8e:cf:89:c0:a4:35:d4:2e:6c: e8:e1:dd:26:9c:05:bc:67:f2:f0:15:d9:6c:8f:25: 56:6c:92:86:7f:13:0a:5d:54:5d:bf:fa:91:ad:fc: 7d:2f:80:38:62:31:c3:19:ed:29:a0:e1:bf:4e:84: e6:8b:47:cb:dd:fb:96:ad:d2:5f:72:fb:16:f6:6e: e8:c4:c8:54:c4:fe:e9:ce:58:42:48:49:36:44:f7: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:14:7F:0B:C9:D1:F8:BF:DB:E8:16:7B:BA:A8:6D:3F:4A:50:FD:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e498233d-c85d-35ff-8649-9e66740e097c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e4:21:15:67:ce:d9:ce:fd:52:af:71:c9:07:ae:2b:a3:ab: a5:fb:e6:b4:d7:b0:ba:7e:52:85:27:df:ea:aa:9d:ab:61:1f: 0f:ff:ad:e3:b4:e6:88:59:36:da:ad:1e:1e:87:ad:d5:39:bc: 3d:66:2c:bc:e8:7a:90:19:8a:bb:a0:8c:96:36:b7:30:a7:c3: 3f:23:81:05:13:37:75:b0:bd:58:6a:01:9f:c9:ae:12:12:1e: 55:8f:1a:b7:1c:f1:f3:9c:2e:2d:bf:8f:a5:ee:b0:6e:ef:68: 69:5c:58:03:93:fa:e5:f9:f6:9b:20:e5:eb:02:0b:6c:55:67: 45:45:73:8a:c3:3b:4c:50:91:58:27:b3:cb:5c:fc:57:ef:d4: 88:b9:c3:e3:d2:ce:45:00:f1:59:39:e1:d0:b8:e8:ed:8f:cd: 0f:62:be:c7:d5:c3:1c:54:64:7e:cb:11:5e:ba:eb:90:e8:1d: 7e:0f:ad:2b:ab:ac:9c:fd:fe:f4:67:e8:b5:fd:bd:e9:46:fc: 30:17:9b:7f:a0:e6:7c:d6:ec:3b:c4:da:80:0b:d7:a2:26:a3: 89:d9:5c:37:34:72:be:31:51:26:db:74:34:07:45:56:da:6e: b5:e9:7b:e5:71:d6:8b:c2:fe:7b:77:8f:6a:1d:b3:c5:0a:d5: c4:c7:cb:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuuudV6983InioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MjliNjBkM2MtMzhhNy00M2FkLTkzODgtYTViMzI0NmM5NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0qFbCs7emM/ddTORt++S4XsSniv1zdmBebG EzxTEOmHywheAXhot7NSExBSyRwHi89vj9TIFYmI6i+K056q1DTEmUKJwV5KnRjk GVUzziI1eG8CWa5Bfx1v99q67AhK2LATovpe6ArSc3EbyHEIFyp6c8b1x4MZiYn7 TwaEGw+bOnMtLAEadnosyhzz5lcW/gPa7VSRGyddCn/lpAaczhg57k6WFk1sxPaO z4nApDXULmzo4d0mnAW8Z/LwFdlsjyVWbJKGfxMKXVRdv/qRrfx9L4A4YjHDGe0p oOG/ToTmi0fL3fuWrdJfcvsW9m7oxMhUxP7pzlhCSEk2RPeuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEUfwvJ0fi/2+gWe7qobT9KUP0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ5ODIzM2QtYzg1ZC0z NWZmLTg2NDktOWU2Njc0MGUwOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHkIRVnztnO/VKvcckHriujq6X75rTXsLp+UoUn3+qqnathHw//reO0 5ohZNtqtHh6HrdU5vD1mLLzoepAZirugjJY2tzCnwz8jgQUTN3WwvVhqAZ/JrhIS HlWPGrcc8fOcLi2/j6XusG7vaGlcWAOT+uX59psg5esCC2xVZ0VFc4rDO0xQkVgn s8tc/Ffv1Ii5w+PSzkUA8Vk54dC46O2PzQ9ivsfVwxxUZH7LEV6665DoHX4PrSur rJz9/vRn6LX9velG/DAXm3+g5nzW7DvE2oAL16Imo4nZXDc0cr4xUSbbdDQHRVba brXpe+Vx1ovC/nt3j2ods8UK1cTHy9w= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:13 2025 by rpki-client