$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa File: f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa (raw, json) Hash identifier: NAjqM7YcUjqGQ9buVt/IR2gC4zlh2rur/7Gv9rMOpkw= Subject key identifier: CC:54:47:9E:C5:C8:77:BA:49:5D:66:E9:7C:CB:18:74:CB:F3:BF:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584968B42C7266D6847B1BC35080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.11.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:2c:72:66:d6:84:7b:1b:c3:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=46f8f9ad-777a-4671-8cc9-a2362778780d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:92:a5:99:3a:4f:c8:88:6e:16:35:a3:88: b1:4c:43:8e:ce:3d:57:d4:bc:24:75:cb:6c:37:45: ae:64:95:76:0e:78:50:dd:45:db:92:35:45:18:fd: 1e:4d:e5:9c:de:8f:4d:c6:75:35:d8:b1:96:90:8a: 81:77:9e:d4:4f:da:be:03:30:6c:68:a6:d7:b6:fa: dc:f4:e5:59:70:03:5d:27:53:0e:35:8a:bc:05:1f: 5e:75:8e:84:0b:5f:ca:32:1b:55:3d:3f:e1:ad:26: 80:cc:10:05:da:5f:71:60:02:b9:d7:ef:0a:dd:f4: 62:88:c1:4e:95:f2:f1:e9:b6:60:60:56:6e:18:97: 9c:58:d8:15:2e:25:ab:48:26:e2:ff:ef:6e:76:ca: f6:f2:34:67:e5:49:d3:bd:9e:de:b6:4a:a6:1f:17: fe:ff:68:93:4c:fa:1d:99:aa:21:33:43:71:83:f6: c5:41:37:61:4b:83:ea:42:f6:cb:3e:ea:b1:f8:0b: 2d:8f:c8:4a:9a:70:15:04:20:18:99:75:5d:82:e0: 72:7b:32:41:aa:a6:03:04:ca:74:ec:2b:ee:92:7a: 45:6c:1a:0d:d8:0f:60:c9:f4:08:20:85:1d:cc:cb: 09:87:8a:de:f2:82:a2:4e:d0:94:0b:20:a6:7e:49: 5c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:54:47:9E:C5:C8:77:BA:49:5D:66:E9:7C:CB:18:74:CB:F3:BF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f01c5c95-0e8e-3bd9-8960-ac6c7f8887d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:69:76:4c:86:f5:1c:11:6d:43:45:f5:e6:41:79:7d:9f:74: 4c:91:1e:af:20:88:58:dc:23:af:17:c7:42:96:b6:dc:31:8d: 5e:c5:22:4c:d5:ad:ca:b8:ba:b9:6b:de:5a:b6:31:15:6e:75: fe:02:0f:32:4b:61:57:19:f7:5e:b8:94:0c:5c:28:00:8b:24: cd:63:e4:e0:0d:fd:29:50:83:72:75:0a:24:eb:76:14:52:a6: f2:50:ac:c0:dc:44:24:1c:d1:24:53:a5:6a:12:1e:43:f1:36: 6d:fe:ce:3b:c8:90:45:7a:c1:c9:5c:01:98:d0:53:e4:ad:66: 9c:22:74:ec:e7:a4:d6:0f:92:e7:99:25:3e:36:1e:68:99:6f: 40:46:fc:fa:c6:0e:ba:61:67:37:68:b7:e5:3c:03:b1:d7:63: 0a:b8:a4:c9:3f:8e:5c:ec:3b:01:f4:dc:c5:56:7f:7c:d7:78: 33:88:74:44:46:d3:14:db:78:7f:5a:64:38:cc:f4:6c:76:7c: 7b:e8:2a:51:d3:ed:9b:0e:61:a9:fe:19:83:1b:e3:f4:0c:37: 5f:82:52:1b:63:3a:ae:51:14:39:74:44:0f:67:f6:3b:2d:cc: 5d:87:99:91:3a:32:70:af:c3:e6:03:82:1f:91:13:2a:fa:7d: 0a:c9:f5:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCxyZtaEexvDUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NDZmOGY5YWQtNzc3YS00NjcxLThjYzktYTIzNjI3Nzg3ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO2SpZk6T8iIbhY1o4ixTEOOzj1X1Lwkdcts N0WuZJV2DnhQ3UXbkjVFGP0eTeWc3o9NxnU12LGWkIqBd57UT9q+AzBsaKbXtvrc 9OVZcANdJ1MONYq8BR9edY6EC1/KMhtVPT/hrSaAzBAF2l9xYAK51+8K3fRiiMFO lfLx6bZgYFZuGJecWNgVLiWrSCbi/+9udsr28jRn5UnTvZ7etkqmHxf+/2iTTPod maohM0Nxg/bFQTdhS4PqQvbLPuqx+Astj8hKmnAVBCAYmXVdguByezJBqqYDBMp0 7CvuknpFbBoN2A9gyfQIIIUdzMsJh4re8oKiTtCUCyCmfklcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxUR57FyHe6SV1m6XzLGHTL879RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAxYzVjOTUtMGU4ZS0z YmQ5LTg5NjAtYWM2YzdmODg4N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9pdkyG9RwRbUNF9eZBeX2fdEyRHq8giFjcI68Xx0KWttwxjV7FIkzV rcq4urlr3lq2MRVudf4CDzJLYVcZ9164lAxcKACLJM1j5OAN/SlQg3J1CiTrdhRS pvJQrMDcRCQc0SRTpWoSHkPxNm3+zjvIkEV6wclcAZjQU+StZpwidOznpNYPkueZ JT42HmiZb0BG/PrGDrphZzdot+U8A7HXYwq4pMk/jlzsOwH03MVWf3zXeDOIdERG 0xTbeH9aZDjM9Gx2fHvoKlHT7ZsOYan+GYMb4/QMN1+CUhtjOq5RFDl0RA9n9jst zF2HmZE6MnCvw+YDgh+REyr6fQrJ9bc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:46 2025 by rpki-client