$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec34893e-8f70-3f3e-8649-27a6b0a82037.roa File: ec34893e-8f70-3f3e-8649-27a6b0a82037.roa (raw, json) Hash identifier: lOZ3cajMo4FDCj/vVC+bQp8mabqNUNxBZYK7yTxYOoU= Subject key identifier: 19:8F:F3:DD:D3:2C:42:27:59:51:8E:71:26:F6:DD:6E:1B:A5:CA:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8D16ECC5C96DB9729F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec34893e-8f70-3f3e-8649-27a6b0a82037.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.1.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8d:16:ec:c5:c9:6d:b9:72:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=d3c08ab2-caaa-4323-8168-d84ed35f0e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:e2:d7:da:bc:fc:33:59:e5:0e:e9:84:90: a6:ab:53:c9:cb:f4:5a:9f:31:3f:ca:da:aa:9d:ab: bf:00:63:83:7b:43:e7:5d:23:75:81:c8:92:a9:59: 8f:12:7d:02:d8:3e:52:d3:d7:95:4f:c7:6d:60:7a: a7:e9:4b:77:9a:7e:ed:01:c1:c7:84:50:00:69:3b: f6:f3:36:4d:76:32:99:db:e5:7e:ea:5b:83:4c:5a: 99:fb:57:e0:f3:1c:57:f9:f9:68:4b:83:52:f0:aa: 00:73:9f:f1:31:cd:bd:6d:8e:7c:4b:07:3e:ff:9e: 46:e0:7d:60:1c:ce:14:0e:d3:c5:b2:d0:82:99:6b: cc:f5:b4:5d:4c:b1:cb:0f:43:c8:a1:50:43:18:5a: 81:a1:8b:bc:e1:88:1a:30:ae:be:d1:d7:ff:d7:76: 4a:53:6d:e9:4a:b2:65:94:69:2d:1b:eb:ce:30:5e: 05:08:af:84:3d:ea:f2:e1:c1:ff:c0:b3:f7:90:ff: c7:34:59:b4:96:8f:90:92:d2:54:e0:23:17:1b:ed: 10:0a:27:16:ae:72:eb:23:46:30:fb:9a:a4:86:83: 2d:8e:7c:c5:d2:05:7e:e3:ce:7f:dc:36:7b:03:8f: a2:ec:96:b1:a7:eb:fc:08:2e:e2:1b:4c:5b:d5:64: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8F:F3:DD:D3:2C:42:27:59:51:8E:71:26:F6:DD:6E:1B:A5:CA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec34893e-8f70-3f3e-8649-27a6b0a82037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:89:22:c4:e9:79:b7:bf:04:d3:a6:09:49:73:3c:2c:a0:d0: 76:93:b8:f8:d8:ae:6a:82:cf:a4:56:ae:39:0b:59:a7:d4:d5: 4f:65:ff:d8:06:7d:4c:42:35:61:6a:c7:30:9c:86:45:38:84: 95:82:77:d8:a0:07:4e:0f:7a:54:ac:b0:a3:7e:b5:7d:71:a2: f1:13:ce:aa:8c:eb:7d:50:cb:0f:2a:3f:70:38:c1:0e:a5:b8: f6:c2:9d:00:d4:4c:2a:ae:30:aa:39:25:7f:e0:af:84:c0:0a: e8:75:76:dd:fc:db:d0:d5:0a:2f:cd:e1:83:66:44:44:ac:a0: db:60:1d:db:09:1e:53:c0:aa:f3:4a:94:76:bb:38:85:ca:95: 90:cd:8a:46:f1:0b:f2:3a:03:0e:b7:13:78:ea:89:b5:cc:7c: cf:54:9d:57:50:d1:23:ec:59:da:29:1a:08:27:8f:00:30:eb: 93:01:3c:d5:cf:ac:f6:ec:2e:e5:8c:86:95:e5:5d:9c:0c:b6: b2:c5:5e:37:1f:76:d4:54:a7:af:79:4f:4f:a5:8e:b6:d6:08: bf:35:51:b8:5c:40:d6:39:ed:c1:bc:dd:49:6c:bb:3f:07:31: 96:6e:5a:29:56:e7:41:ea:82:4e:0b:b1:c5:75:21:cb:ce:e3: d1:94:6d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo0W7MXJbblyn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZDNjMDhhYjItY2FhYS00MzIzLTgxNjgtZDg0ZWQzNWYwZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe3i19q8/DNZ5Q7phJCmq1PJy/RanzE/ytqq nau/AGODe0PnXSN1gciSqVmPEn0C2D5S09eVT8dtYHqn6Ut3mn7tAcHHhFAAaTv2 8zZNdjKZ2+V+6luDTFqZ+1fg8xxX+floS4NS8KoAc5/xMc29bY58Swc+/55G4H1g HM4UDtPFstCCmWvM9bRdTLHLD0PIoVBDGFqBoYu84YgaMK6+0df/13ZKU23pSrJl lGktG+vOMF4FCK+EPery4cH/wLP3kP/HNFm0lo+QktJU4CMXG+0QCicWrnLrI0Yw +5qkhoMtjnzF0gV+485/3DZ7A4+i7Jaxp+v8CC7iG0xb1WTdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmP893TLEInWVGOcSb23W4bpco2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWMzNDg5M2UtOGY3MC0z ZjNlLTg2NDktMjdhNmIwYTgyMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaJIsTpebe/BNOmCUlzPCyg0HaTuPjYrmqCz6RWrjkLWafU1U9l/9gG fUxCNWFqxzCchkU4hJWCd9igB04PelSssKN+tX1xovETzqqM631Qyw8qP3A4wQ6l uPbCnQDUTCquMKo5JX/gr4TACuh1dt3829DVCi/N4YNmRESsoNtgHdsJHlPAqvNK lHa7OIXKlZDNikbxC/I6Aw63E3jqibXMfM9UnVdQ0SPsWdopGggnjwAw65MBPNXP rPbsLuWMhpXlXZwMtrLFXjcfdtRUp695T0+ljrbWCL81UbhcQNY57cG83Ulsuz8H MZZuWilW50Hqgk4LscV1IcvO49GUbdU= -----END CERTIFICATE-----Generated at Sat Apr 5 14:14:14 2025 by rpki-client