$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa File: f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa (raw, json) Hash identifier: IwdnkchGebC42Ib10UVf6ZSjsUNhXot6JvlO52df1Ts= Subject key identifier: A0:D8:DE:C2:34:9E:84:32:55:1D:D4:E8:87:82:0F:48:E3:C1:E2:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEE973A3F0204BB3D38480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.42.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e9:73:a3:f0:20:4b:b3:d3:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f430274d-8955-4ad2-b760-9461b6d73320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:59:40:70:9b:cd:d9:32:d6:36:56:95:15: b4:71:2b:68:63:4d:3e:0b:b3:d5:64:7b:e6:60:34: fa:ad:93:dc:5b:f1:3b:68:ee:b3:50:8d:87:4b:74: 89:cc:1d:c4:d7:dc:12:0f:1c:81:45:fe:d6:49:ee: 4f:dd:bb:9f:6f:7c:a3:90:92:4a:86:e3:9b:8e:84: 07:ed:c2:b7:a5:21:59:64:e2:4f:d8:4d:ba:62:29: e7:be:56:10:84:e1:bc:fc:55:f8:76:9f:9e:6f:91: 96:c3:9d:60:ed:48:77:ef:e2:8c:8c:84:04:3b:18: e6:5a:29:58:8a:78:cf:09:99:b9:73:73:5f:6b:73: a1:9a:6f:1c:eb:55:44:9c:25:91:ba:34:29:49:20: f4:f9:43:83:ae:13:5b:c9:01:1e:87:97:f5:c2:47: ce:c2:79:54:90:8a:23:8b:20:de:a9:99:18:54:9d: 70:32:20:63:d8:4c:fa:97:00:22:f0:6f:e6:c4:a9: 35:01:a1:4c:b9:78:54:ef:ac:53:d5:ef:c4:cf:4d: b6:01:95:bd:b9:ed:4c:b0:15:f6:7d:2e:6b:f4:58: 67:2a:82:ee:0b:00:03:4d:bc:4e:ee:e7:2d:0b:25: b4:76:10:6c:99:d8:0a:81:60:b1:b8:10:e4:25:62: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:DE:C2:34:9E:84:32:55:1D:D4:E8:87:82:0F:48:E3:C1:E2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2d5d740-cb86-3b82-ad09-3a16c9fb06c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e5:5f:db:00:bf:c7:d7:60:14:20:9a:58:43:25:d3:47:03: 39:0a:7f:d7:48:fd:3c:e7:03:be:c8:64:85:8c:8b:d8:fd:a9: 28:93:1f:45:66:0e:0a:85:3d:d7:07:7a:71:16:d6:f7:cd:fd: 05:9a:41:7f:7c:f4:ad:73:2d:22:e4:a1:d0:e3:fd:f5:09:23: 4a:66:e0:12:85:00:0a:5a:40:24:54:98:c7:61:1c:2d:92:80: 94:84:47:66:97:39:49:24:16:59:c1:4e:c7:1e:f5:45:52:ba: b3:1e:8d:e9:86:d4:85:75:fb:88:17:99:e0:7f:bf:99:b9:5a: 5e:fb:1b:d9:85:fe:be:76:93:fc:2a:f6:ff:98:e3:ed:cb:94: ec:1b:39:fb:9b:29:f5:5c:12:23:f8:e8:15:42:c4:64:31:00: 10:c7:1f:39:e3:22:6a:70:a0:da:54:76:27:d6:ac:ce:dd:6e: 51:b4:cf:e3:69:a0:8e:e4:af:c7:fb:00:37:b3:0d:27:ce:dc: e5:4c:17:6c:01:20:7d:c1:7f:fc:49:59:f7:5e:e2:d0:d7:38: a8:d6:32:27:92:61:7b:c3:d9:99:c8:35:41:29:5b:d3:89:64: 8f:41:24:85:06:9e:a2:e0:7c:b8:7d:85:b3:44:b1:11:07:56: 93:d2:b7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavulzo/AgS7PThIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjQzMDI3NGQtODk1NS00YWQyLWI3NjAtOTQ2MWI2ZDczMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ9ZQHCbzdky1jZWlRW0cStoY00+C7PVZHvm YDT6rZPcW/E7aO6zUI2HS3SJzB3E19wSDxyBRf7WSe5P3bufb3yjkJJKhuObjoQH 7cK3pSFZZOJP2E26YinnvlYQhOG8/FX4dp+eb5GWw51g7Uh37+KMjIQEOxjmWilY injPCZm5c3Nfa3Ohmm8c61VEnCWRujQpSSD0+UODrhNbyQEeh5f1wkfOwnlUkIoj iyDeqZkYVJ1wMiBj2Ez6lwAi8G/mxKk1AaFMuXhU76xT1e/Ez022AZW9ue1MsBX2 fS5r9FhnKoLuCwADTbxO7uctCyW0dhBsmdgKgWCxuBDkJWIYEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDY3sI0noQyVR3U6IeCD0jjweLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJkNWQ3NDAtY2I4Ni0z YjgyLWFkMDktM2ExNmM5ZmIwNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyqVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/lX9sAv8fXYBQgmlhDJdNHAzkKf9dI/TznA77IZIWMi9j9qSiTH0Vm DgqFPdcHenEW1vfN/QWaQX989K1zLSLkodDj/fUJI0pm4BKFAApaQCRUmMdhHC2S gJSER2aXOUkkFlnBTsce9UVSurMejemG1IV1+4gXmeB/v5m5Wl77G9mF/r52k/wq 9v+Y4+3LlOwbOfubKfVcEiP46BVCxGQxABDHHznjImpwoNpUdifWrM7dblG0z+Np oI7kr8f7ADezDSfO3OVMF2wBIH3Bf/xJWfde4tDXOKjWMieSYXvD2ZnINUEpW9OJ ZI9BJIUGnqLgfLh9hbNEsREHVpPSt38= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:02 2025 by rpki-client