$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa File: e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa (raw, json) Hash identifier: uIlNjtRY9Y/wy76WIeddA545wUZKhn9xmLwoFIky38Y= Subject key identifier: E2:72:BA:26:50:15:12:C0:42:A0:37:E1:A6:B5:AC:E4:99:B8:A0:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB604B659379CD984B4800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.59.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:60:4b:65:93:79:cd:98:4b:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=e6669056-4ded-4fbf-88bf-2d50a9af7144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:45:b0:7e:61:a7:73:01:f9:73:1d:ae:74: 6e:9e:65:e9:88:d6:f1:79:55:75:cf:f9:53:db:c7: de:4e:b9:85:1a:3f:7a:3f:4f:80:6f:e1:1e:cc:25: c6:a7:83:ac:bc:68:28:54:2f:99:6e:d7:02:86:84: 2c:4c:08:6d:6f:83:f8:0f:e1:c2:b2:16:be:f5:0d: 5e:04:43:47:c5:9e:e8:c5:f9:b8:2a:63:08:da:f1: 74:ca:ed:88:65:2f:00:08:7f:46:8e:bc:22:1c:47: 39:39:67:ef:4a:de:0a:59:9b:99:e6:b3:07:89:0b: db:3e:0e:0a:41:56:2f:08:16:07:db:ab:96:ee:96: 44:9e:06:1a:f8:df:63:8c:0b:74:29:6a:ce:68:f0: fc:79:ce:d3:66:78:49:ee:10:81:bc:ee:65:4a:c1: ff:16:ec:cd:a9:07:32:25:f3:f0:36:03:e0:ed:b6: 3a:c9:96:c7:24:f4:f5:df:3f:0c:ee:2b:99:ea:b3: 8b:a8:72:21:b1:6e:5d:9f:3a:66:b8:df:68:fe:95: 37:b8:b3:64:fd:0f:7f:47:13:06:bc:ae:1a:bf:47: b5:15:77:ed:98:89:82:92:13:d6:d7:92:4d:07:01: b0:81:50:3c:26:fb:f9:4e:b7:8b:b6:31:52:2c:40: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:BA:26:50:15:12:C0:42:A0:37:E1:A6:B5:AC:E4:99:B8:A0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:65:88:04:61:c7:45:b7:a4:1b:58:a5:50:da:9a:77:a6:fd: 59:e1:c2:7c:37:76:21:62:35:ab:69:67:42:b9:72:d3:e3:25: 04:c3:dc:c1:55:86:d9:b1:48:28:7f:ff:f5:f5:11:db:62:7e: de:c3:30:c1:35:ee:e3:87:b7:85:d8:52:b2:da:91:ff:bc:2f: f4:21:55:44:da:b1:0f:2d:87:fa:bb:d1:5d:22:c3:50:be:1d: b4:57:56:2a:37:d2:99:53:dd:88:69:bb:ec:d9:49:c2:0d:53: f1:d2:af:59:3c:4d:9f:7d:a3:ea:f6:18:de:5d:59:6a:f9:fb: 48:36:c2:1b:9d:a9:9e:0b:13:a7:64:b1:7b:c5:33:bf:0b:fd: 8e:ae:ec:50:a5:cf:08:d9:18:ef:7b:18:47:fa:17:80:2e:b0: ad:d0:a5:f1:12:ef:3a:8a:71:27:17:1e:57:1d:07:bb:3b:c6: 00:08:72:2e:de:53:10:f9:08:6f:f5:35:aa:d7:1b:91:b9:1c: 4c:06:7c:de:3e:41:71:0f:ed:33:f1:4c:2f:fa:c2:8d:5d:28: c6:1a:59:9f:25:fe:b1:6e:74:82:dd:c2:95:fb:7d:c0:14:f7: 70:d7:70:c6:1c:a6:75:ce:68:42:8d:9c:6b:88:8f:b9:c9:f0: 31:d7:9a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2BLZZN5zZhLSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk ZTY2NjkwNTYtNGRlZC00ZmJmLTg4YmYtMmQ1MGE5YWY3MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkdFsH5hp3MB+XMdrnRunmXpiNbxeVV1z/lT 28feTrmFGj96P0+Ab+EezCXGp4OsvGgoVC+ZbtcChoQsTAhtb4P4D+HCsha+9Q1e BENHxZ7oxfm4KmMI2vF0yu2IZS8ACH9GjrwiHEc5OWfvSt4KWZuZ5rMHiQvbPg4K QVYvCBYH26uW7pZEngYa+N9jjAt0KWrOaPD8ec7TZnhJ7hCBvO5lSsH/FuzNqQcy JfPwNgPg7bY6yZbHJPT13z8M7iuZ6rOLqHIhsW5dnzpmuN9o/pU3uLNk/Q9/RxMG vK4av0e1FXftmImCkhPW15JNBwGwgVA8Jvv5TreLtjFSLEBtBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJyuiZQFRLAQqA34aa1rOSZuKA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTU1YTA2MGQtN2YwMi0z MDViLWFiYzYtNGZkZmE4OGY2YTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhliARhx0W3pBtYpVDamnem/Vnhwnw3diFiNatpZ0K5ctPjJQTD3MFV htmxSCh///X1Edtift7DMME17uOHt4XYUrLakf+8L/QhVUTasQ8th/q70V0iw1C+ HbRXVio30plT3Yhpu+zZScINU/HSr1k8TZ99o+r2GN5dWWr5+0g2whudqZ4LE6dk sXvFM78L/Y6u7FClzwjZGO97GEf6F4AusK3QpfES7zqKcScXHlcdB7s7xgAIci7e UxD5CG/1NarXG5G5HEwGfN4+QXEP7TPxTC/6wo1dKMYaWZ8l/rFudILdwpX7fcAU 93DXcMYcpnXOaEKNnGuIj7nJ8DHXmmo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:06 2025 by rpki-client