$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa File: efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa (raw, json) Hash identifier: eNoZshT9ZE3sQ82upSbviBpUlGcB8U/qQ2lIrX/k//Q= Subject key identifier: F2:03:98:3E:29:0C:9D:97:C6:EB:62:2B:12:41:7A:26:9C:EE:A9:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488F1085DA40B3F47AFF4B8100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.62.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:85:da:40:b3:f4:7a:ff:4b:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=b9101307-ea49-48dc-9ad2-ae15ea6383a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:b0:c9:22:57:78:cd:c9:6f:d6:ad:da:40: b5:10:a5:cc:2c:8e:16:7f:58:c9:3a:3d:b7:c4:6d: b0:26:dd:c0:2c:3a:2c:62:0b:48:0b:c6:37:a6:8a: a5:ef:6f:46:a6:32:b3:34:4d:fb:dd:59:1c:ea:63: 6e:26:4e:d4:d9:fa:dc:f3:32:72:17:fd:20:f4:1f: 5f:0c:19:20:ff:c2:d4:c0:0c:6f:4e:ff:40:5b:52: 28:68:08:19:2e:fe:4c:62:b2:c8:96:28:ed:aa:6d: b9:fb:22:fb:6d:1b:04:d7:ec:bd:7c:62:10:86:ba: b3:86:f7:d9:5f:54:43:48:46:82:64:7c:ec:c0:2c: 51:5d:be:4a:d1:8f:ee:a4:53:5f:9e:73:55:56:2d: 51:6c:a5:79:21:05:19:4f:84:59:55:56:66:34:09: d1:70:df:cb:86:b6:62:fd:11:1a:fe:67:99:cb:d4: e2:98:15:eb:b1:90:94:71:d7:51:9b:dc:f7:9d:80: c6:9f:dd:74:89:f9:ce:c4:f2:c8:32:c4:dd:22:9c: 01:1f:8d:a4:58:39:d2:b1:be:11:b4:32:71:1d:37: 16:fc:55:11:3e:17:34:cf:da:65:fe:01:4e:48:73: 2a:7c:1d:f1:72:fb:92:d2:00:14:c8:b4:af:26:08: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:03:98:3E:29:0C:9D:97:C6:EB:62:2B:12:41:7A:26:9C:EE:A9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efab1456-43d5-3bfe-8a0a-a44ff5176dd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:30:f8:0e:93:7e:29:6b:55:ed:98:d8:7c:b3:f2:ff:ca:46: cb:56:f2:13:78:d0:a0:30:03:0f:8e:32:80:25:87:65:15:ce: 6b:7c:e7:b8:7f:f8:9c:94:bb:06:5d:a5:c9:21:bc:82:46:47: 4b:2d:d9:33:ce:f6:98:d0:28:f4:cb:95:de:57:3d:f7:64:96: 28:95:29:ff:86:d4:a5:fc:be:52:e8:cb:74:4f:9a:83:1c:b6: c7:ce:f8:da:d1:d9:49:59:c7:3a:8c:43:59:68:77:4c:9f:1b: 8f:10:83:74:91:c8:2c:30:c4:56:7f:d0:a7:d9:be:13:1a:a1: 42:15:8c:e6:03:39:49:81:0e:88:4f:f6:61:95:cd:a6:bd:24: 5f:20:e8:9d:40:95:36:b7:c7:8b:82:07:d7:5d:a3:76:bb:55: e2:a8:be:47:4b:09:83:00:7d:ef:72:95:50:ae:01:b9:31:55: 96:9c:2d:ee:0a:ad:6a:fa:1b:c2:a4:51:e5:98:4c:8e:7a:82: d0:6e:d6:ea:8b:98:b3:e7:58:44:8f:7d:16:82:2b:d5:4a:fa: 24:1b:a0:fd:c6:eb:23:20:3c:b5:a9:52:9e:6b:d4:07:0c:7f: 80:cf:07:76:e9:65:5b:6e:fb:3c:42:99:4c:de:2f:98:e3:ee: 43:61:7f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIXaQLP0ev9LgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk YjkxMDEzMDctZWE0OS00OGRjLTlhZDItYWUxNWVhNjM4M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+qwySJXeM3Jb9at2kC1EKXMLI4Wf1jJOj23 xG2wJt3ALDosYgtIC8Y3poql729GpjKzNE373Vkc6mNuJk7U2frc8zJyF/0g9B9f DBkg/8LUwAxvTv9AW1IoaAgZLv5MYrLIlijtqm25+yL7bRsE1+y9fGIQhrqzhvfZ X1RDSEaCZHzswCxRXb5K0Y/upFNfnnNVVi1RbKV5IQUZT4RZVVZmNAnRcN/LhrZi /REa/meZy9TimBXrsZCUcddRm9z3nYDGn910ifnOxPLIMsTdIpwBH42kWDnSsb4R tDJxHTcW/FURPhc0z9pl/gFOSHMqfB3xcvuS0gAUyLSvJgg8lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIDmD4pDJ2XxutiKxJBeiac7qmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWZhYjE0NTYtNDNkNS0z YmZlLThhMGEtYTQ0ZmY1MTc2ZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAw+A6TfilrVe2Y2Hyz8v/KRstW8hN40KAwAw+OMoAlh2UVzmt857h/ +JyUuwZdpckhvIJGR0st2TPO9pjQKPTLld5XPfdkliiVKf+G1KX8vlLoy3RPmoMc tsfO+NrR2UlZxzqMQ1lod0yfG48Qg3SRyCwwxFZ/0KfZvhMaoUIVjOYDOUmBDohP 9mGVzaa9JF8g6J1AlTa3x4uCB9ddo3a7VeKovkdLCYMAfe9ylVCuAbkxVZacLe4K rWr6G8KkUeWYTI56gtBu1uqLmLPnWESPfRaCK9VK+iQboP3G6yMgPLWpUp5r1AcM f4DPB3bpZVtu+zxCmUzeL5jj7kNhf/k= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:23 2025 by rpki-client