$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef140530-eae9-3d54-b1aa-d775f11a6fad.roa File: ef140530-eae9-3d54-b1aa-d775f11a6fad.roa (raw, json) Hash identifier: anUilufBs8snwU0H+TEkt6dFfPAhoRSf2zjjBrWIEao= Subject key identifier: A7:1F:C2:F5:E8:B4:2A:EA:C1:6E:F5:84:FA:25:CC:04:58:08:72:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDBA1DCEB283FD4C6D5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef140530-eae9-3d54-b1aa-d775f11a6fad.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.40.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:db:a1:dc:eb:28:3f:d4:c6:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f37a8f98-f334-4937-ba1d-0221da3f6ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:62:c2:9d:42:28:0a:96:ab:1f:8d:5e:35: 87:d2:cb:2b:d1:6f:d5:a6:72:90:43:69:59:b3:69: 64:57:7b:0b:bc:3e:08:76:f9:3d:18:64:5f:b0:d0: b4:b7:dd:0b:65:63:e2:1c:d6:ef:c9:d5:a6:ef:ba: f4:61:a2:26:f1:90:ae:18:db:50:97:eb:c4:30:d6: b3:8e:3f:71:65:87:73:4d:53:36:3f:00:9b:08:f9: cc:55:1c:1c:53:df:9f:da:c0:8e:84:f7:bf:c8:5d: c4:76:5a:3a:93:a0:88:c5:ec:b4:9c:f8:cc:7d:46: e3:07:b6:4f:96:c2:52:b0:53:8f:80:f4:6d:c9:ed: 08:33:eb:8c:c4:32:4e:48:e1:57:9c:4d:7d:1f:8c: 51:ef:72:09:4c:d4:f4:b0:a4:68:bf:4b:07:d7:d4: 26:ec:6a:c4:91:60:17:15:6e:24:14:60:ca:e1:eb: 8e:8f:95:cb:05:5e:c0:4d:eb:d3:1b:01:ba:9a:91: 74:9e:50:76:78:5b:12:bf:28:70:7c:fd:78:ea:7e: fe:55:5c:35:35:5f:32:fe:2e:c9:9c:37:fa:ce:80: 4b:47:ca:83:8b:f2:cd:44:b7:53:fb:05:a1:45:11: 74:4c:60:52:91:88:14:db:3e:1c:33:29:e5:a7:09: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1F:C2:F5:E8:B4:2A:EA:C1:6E:F5:84:FA:25:CC:04:58:08:72:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef140530-eae9-3d54-b1aa-d775f11a6fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:94:f7:2a:f3:f1:8c:35:57:3a:43:8d:32:3f:09:40:b3:55: 5f:c4:6c:ea:55:62:9b:be:e0:29:c0:1d:bd:43:03:f4:78:c1: 88:d5:37:6c:a8:fb:d2:79:f6:6d:59:9f:57:82:b8:bd:ec:12: c3:bc:78:f3:77:e3:df:a7:bd:1a:19:8a:29:00:b2:ea:e2:90: af:91:41:3e:71:68:d2:2e:15:50:aa:4e:d0:a5:fc:61:fc:50: 45:17:25:b5:93:8e:c9:ef:45:aa:0a:f4:a0:62:5e:3d:aa:75: 9f:9a:b1:b7:3e:15:ff:e2:2e:c3:c2:6e:79:96:c2:0c:9d:52: e5:53:dd:66:47:b2:86:96:0d:73:37:9f:e3:26:e1:1f:77:3b: 77:92:30:ca:76:45:cd:80:95:72:11:25:78:27:77:10:1a:96: 82:62:8d:b0:2b:bb:52:7e:8f:6e:2b:59:07:65:91:6e:19:12: 62:48:d4:ed:cc:1b:fe:41:68:39:0c:bc:fb:07:fe:1c:16:64: 04:91:e0:fa:70:0c:cb:9a:13:8d:84:dd:e4:1d:f9:37:bb:fd: 8e:b8:04:50:ab:32:16:25:a9:0c:6a:2b:b0:f4:4f:e5:69:20: 32:97:35:65:43:39:51:3b:bc:77:37:aa:ec:c3:59:43:21:eb: fe:6d:4f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtuh3OsoP9TG1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjM3YThmOTgtZjMzNC00OTM3LWJhMWQtMDIyMWRhM2Y2Y2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBNiwp1CKAqWqx+NXjWH0ssr0W/VpnKQQ2lZ s2lkV3sLvD4Idvk9GGRfsNC0t90LZWPiHNbvydWm77r0YaIm8ZCuGNtQl+vEMNaz jj9xZYdzTVM2PwCbCPnMVRwcU9+f2sCOhPe/yF3Edlo6k6CIxey0nPjMfUbjB7ZP lsJSsFOPgPRtye0IM+uMxDJOSOFXnE19H4xR73IJTNT0sKRov0sH19Qm7GrEkWAX FW4kFGDK4euOj5XLBV7ATevTGwG6mpF0nlB2eFsSvyhwfP146n7+VVw1NV8y/i7J nDf6zoBLR8qDi/LNRLdT+wWhRRF0TGBSkYgU2z4cMynlpwl9nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcfwvXotCrqwW71hPolzARYCHKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWYxNDA1MzAtZWFlOS0z ZDU0LWIxYWEtZDc3NWYxMWE2ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFygqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICU9yrz8Yw1VzpDjTI/CUCzVV/EbOpVYpu+4CnAHb1DA/R4wYjVN2yo +9J59m1Zn1eCuL3sEsO8ePN349+nvRoZiikAsurikK+RQT5xaNIuFVCqTtCl/GH8 UEUXJbWTjsnvRaoK9KBiXj2qdZ+asbc+Ff/iLsPCbnmWwgydUuVT3WZHsoaWDXM3 n+Mm4R93O3eSMMp2Rc2AlXIRJXgndxAaloJijbAru1J+j24rWQdlkW4ZEmJI1O3M G/5BaDkMvPsH/hwWZASR4PpwDMuaE42E3eQd+Te7/Y64BFCrMhYlqQxqK7D0T+Vp IDKXNWVDOVE7vHc3quzDWUMh6/5tTxc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:16 2025 by rpki-client