$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/effa9bd4-b2b5-3885-b469-d14acd4fd468.roa File: effa9bd4-b2b5-3885-b469-d14acd4fd468.roa (raw, json) Hash identifier: SCYlnd2VyPYYS5xzJ73moP26e0VRBFsUfs9B44QLgxE= Subject key identifier: 1C:58:34:35:10:F6:8F:D6:60:12:81:AC:37:D5:09:D7:F4:56:DB:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDB6E595F3EE49C7BC680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/effa9bd4-b2b5-3885-b469-d14acd4fd468.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.40.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:db:6e:59:5f:3e:e4:9c:7b:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=b1b7c714-b1c3-481a-8ff8-a3071a50e167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:e0:9e:28:56:0e:98:3a:3e:89:cd:97:10: fa:1c:b0:d3:c9:72:f3:e1:9b:de:6c:9e:76:5b:8a: 7b:84:3b:e8:24:a6:12:55:f9:9a:97:08:db:18:b2: 27:19:4a:e2:f3:5e:b1:17:37:d2:fb:51:20:88:53: de:a9:5a:5b:e1:76:e3:cb:87:94:d0:43:e3:0f:b6: 1b:98:31:66:b6:ca:d7:7f:32:31:7b:7e:11:48:03: bf:33:42:f7:c5:d0:ba:9b:d6:b3:8e:f7:00:07:f1: 76:1d:33:1d:cc:1a:6f:c6:58:6e:9c:d3:54:79:35: 42:39:9c:d4:06:71:a2:b4:26:cc:b1:bd:8c:03:82: a0:72:3f:94:c6:1d:ce:ed:e9:c7:bc:82:13:1d:c3: ae:23:0e:0a:0a:e8:d1:13:52:15:fd:7c:01:e7:82: 18:83:c8:d5:98:76:3a:bf:49:52:90:30:44:ba:a1: 6d:1d:89:75:17:b5:98:08:2d:99:b0:78:91:82:31: 6b:b7:27:2b:cf:33:7e:50:e5:4e:02:ba:39:94:28: 5e:06:c7:97:97:c1:47:80:f5:7d:bf:9b:d4:04:0a: 2d:86:37:e7:e3:aa:35:26:7d:32:c9:cd:f3:24:ab: 62:d4:76:dd:38:e5:1e:71:ab:49:db:f0:66:c2:e5: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:58:34:35:10:F6:8F:D6:60:12:81:AC:37:D5:09:D7:F4:56:DB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/effa9bd4-b2b5-3885-b469-d14acd4fd468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:52:d1:c4:ba:36:84:e1:ed:af:65:8e:8d:c0:29:43:97:e8: ba:5d:f8:ca:30:57:9f:d5:f1:15:2b:1f:6b:e1:c9:d3:45:a7: 21:68:bf:f4:1b:7c:ea:b8:0f:cf:3e:19:ec:9c:64:26:64:61: 6c:28:20:55:f5:82:83:35:ac:26:89:46:d2:a5:d7:9d:ab:de: b4:9a:0d:9e:e1:19:1e:f7:88:29:34:c2:f7:c6:be:c4:9c:52: 5a:f0:06:a1:ee:92:01:04:a3:a1:2f:68:51:f9:cb:72:10:39: 76:48:2b:4b:11:0f:9b:53:f3:de:e3:39:35:a1:b2:fb:2c:85: c3:dc:2a:45:56:4a:4b:54:73:83:d7:7f:42:6c:d7:24:f3:2f: 07:5a:cc:45:cf:78:d5:da:32:18:31:56:f4:82:ce:cc:61:ff: ac:7f:be:12:a8:6c:db:09:86:b6:ad:ca:0e:cc:ba:03:5b:bb: 91:62:41:31:af:2f:df:f2:4e:3a:94:19:eb:b2:d9:84:e8:a7: 4f:87:d8:e6:41:f4:7b:93:9e:8d:6b:b0:ef:38:59:3b:78:a0: 28:b7:13:52:6e:12:65:6a:da:32:ea:3d:c7:b6:7e:5a:63:5c: fd:f2:cd:c3:8e:d2:b6:75:83:c2:ef:a6:43:02:94:eb:3a:20: 61:fa:9b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavttuWV8+5Jx7xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YjFiN2M3MTQtYjFjMy00ODFhLThmZjgtYTMwNzFhNTBlMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlALgnihWDpg6PonNlxD6HLDTyXLz4ZvebJ52 W4p7hDvoJKYSVfmalwjbGLInGUri816xFzfS+1EgiFPeqVpb4Xbjy4eU0EPjD7Yb mDFmtsrXfzIxe34RSAO/M0L3xdC6m9azjvcAB/F2HTMdzBpvxlhunNNUeTVCOZzU BnGitCbMsb2MA4Kgcj+Uxh3O7enHvIITHcOuIw4KCujRE1IV/XwB54IYg8jVmHY6 v0lSkDBEuqFtHYl1F7WYCC2ZsHiRgjFrtycrzzN+UOVOAro5lCheBseXl8FHgPV9 v5vUBAothjfn46o1Jn0yyc3zJKti1HbdOOUecatJ2/BmwuUj0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxYNDUQ9o/WYBKBrDfVCdf0VtsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWZmYTliZDQtYjJiNS0z ODg1LWI0NjktZDE0YWNkNGZkNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdS0cS6NoTh7a9ljo3AKUOX6Lpd+MowV5/V8RUrH2vhydNFpyFov/Qb fOq4D88+GeycZCZkYWwoIFX1goM1rCaJRtKl152r3rSaDZ7hGR73iCk0wvfGvsSc UlrwBqHukgEEo6EvaFH5y3IQOXZIK0sRD5tT897jOTWhsvsshcPcKkVWSktUc4PX f0Js1yTzLwdazEXPeNXaMhgxVvSCzsxh/6x/vhKobNsJhratyg7MugNbu5FiQTGv L9/yTjqUGeuy2YTop0+H2OZB9HuTno1rsO84WTt4oCi3E1JuEmVq2jLqPce2flpj XP3yzcOO0rZ1g8LvpkMClOs6IGH6m/A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:50 2025 by rpki-client