$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa File: f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa (raw, json) Hash identifier: 4Kp6r4qAcYYNBSWN/ExkazXLOu+jO/gJ/takPYZ/gLs= Subject key identifier: DA:FE:21:5A:78:77:A8:47:D9:17:9E:D5:37:DE:46:0E:A2:CC:72:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494B642D4BD5D90C080D413A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.63.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2d:4b:d5:d9:0c:08:0d:41:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=01fd0ded-c0ae-46bb-8858-5a00185bb8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:23:56:b5:3b:07:8d:43:c9:ef:85:a4:9f: b1:b2:b4:62:9b:bb:88:19:2a:65:43:a0:76:71:a3: fd:71:a5:e7:8b:45:f1:e7:df:0e:71:53:41:57:93: 7c:bb:6a:cf:8f:82:bb:78:1f:e7:fa:33:1d:bb:b5: 9e:1d:65:f5:97:28:1c:10:b8:77:cb:45:09:a0:20: 8d:09:2c:84:b5:4a:db:cc:d4:52:0d:64:99:80:ee: f1:84:63:69:61:4d:e5:33:53:b3:de:cd:99:c9:dd: c5:99:48:cb:52:0f:68:65:3d:9e:16:ce:de:80:e2: c4:a0:7a:ff:9a:3d:49:4e:cb:67:69:d5:29:d5:d7: 86:92:ea:08:ad:24:dd:08:8c:44:76:2e:22:7f:f8: f9:58:2e:a8:9b:ce:9b:2f:62:85:3b:a1:56:9a:58: b5:0a:0a:62:d8:43:bc:bc:28:bc:73:cd:ae:53:b5: bc:86:39:e4:3c:36:a6:bc:90:8d:fa:d9:f1:a1:76: 25:29:c9:34:34:20:48:d3:32:5b:03:e0:69:d5:22: 1f:00:3d:87:d5:9d:c7:30:cd:ea:16:f1:2c:3e:3b: 21:b8:10:3a:62:49:0e:7d:86:3e:25:bb:63:81:9a: 9e:8b:d7:10:44:7b:28:b0:79:3e:a0:af:e1:c6:59: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FE:21:5A:78:77:A8:47:D9:17:9E:D5:37:DE:46:0E:A2:CC:72:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0828ba4-f6ef-3383-afdc-ca95dbeb1905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bb:0b:df:92:47:d2:b9:a8:b2:72:11:90:17:0c:a7:04:91: e2:0d:3d:80:13:4f:ab:3e:5c:50:1f:58:1b:ca:dd:b3:a8:0c: f4:60:1c:77:72:42:4c:fa:3c:42:08:00:73:52:c5:6d:f6:4c: 55:8f:3f:52:5b:a4:18:61:51:60:0a:36:3f:56:67:21:45:8d: 81:af:18:83:58:58:86:25:e3:b5:d8:b7:b7:55:69:f6:f9:75: 01:c9:ae:71:47:ca:f2:e7:47:a8:36:95:2c:f2:44:e8:94:24: 44:01:b2:28:b1:a6:fb:42:74:c1:c3:92:24:13:e4:0e:77:57: 29:c8:bb:4c:4f:1c:4c:f9:4b:ed:d0:83:3f:29:bb:27:53:8c: fd:71:ef:83:fa:32:2d:44:3d:eb:c8:42:ab:d1:ea:39:41:f9: 7d:c1:dd:4e:bf:07:c9:40:6d:cd:81:f0:90:bc:8d:f8:42:ec: 43:c0:fb:9e:12:f2:93:94:70:85:e6:44:68:ee:fb:44:4f:12: da:77:83:78:db:65:9b:90:19:e1:c7:32:26:dd:5b:d6:ac:cb: 88:82:6a:92:fa:a0:1e:53:2a:3a:d0:de:9a:f6:7e:7c:e1:32: 7d:06:66:48:a5:7e:63:74:ff:ef:ed:b8:8e:a1:14:4e:f3:a7: 1d:5d:27:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC1L1dkMCA1BOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDFmZDBkZWQtYzBhZS00NmJiLTg4NTgtNWEwMDE4NWJiOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIYjVrU7B41Dye+FpJ+xsrRim7uIGSplQ6B2 caP9caXni0Xx598OcVNBV5N8u2rPj4K7eB/n+jMdu7WeHWX1lygcELh3y0UJoCCN CSyEtUrbzNRSDWSZgO7xhGNpYU3lM1Oz3s2Zyd3FmUjLUg9oZT2eFs7egOLEoHr/ mj1JTstnadUp1deGkuoIrSTdCIxEdi4if/j5WC6om86bL2KFO6FWmli1Cgpi2EO8 vCi8c82uU7W8hjnkPDamvJCN+tnxoXYlKck0NCBI0zJbA+Bp1SIfAD2H1Z3HMM3q FvEsPjshuBA6YkkOfYY+JbtjgZqei9cQRHsosHk+oK/hxlk3QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr+IVp4d6hH2Ree1TfeRg6izHKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjA4MjhiYTQtZjZlZi0z MzgzLWFmZGMtY2E5NWRiZWIxOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG7C9+SR9K5qLJyEZAXDKcEkeINPYATT6s+XFAfWBvK3bOoDPRgHHdy Qkz6PEIIAHNSxW32TFWPP1JbpBhhUWAKNj9WZyFFjYGvGINYWIYl47XYt7dVafb5 dQHJrnFHyvLnR6g2lSzyROiUJEQBsiixpvtCdMHDkiQT5A53VynIu0xPHEz5S+3Q gz8puydTjP1x74P6Mi1EPevIQqvR6jlB+X3B3U6/B8lAbc2B8JC8jfhC7EPA+54S 8pOUcIXmRGju+0RPEtp3g3jbZZuQGeHHMibdW9asy4iCapL6oB5TKjrQ3pr2fnzh Mn0GZkilfmN0/+/tuI6hFE7zpx1dJ88= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:22 2025 by rpki-client