$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f63ba1c1-0070-3b94-87df-f10456c69496.roa File: f63ba1c1-0070-3b94-87df-f10456c69496.roa (raw, json) Hash identifier: 05IwxSi+oRgdmZuBrNpAwNKLdiH57+b5+rQCz1bvtkE= Subject key identifier: F0:6F:76:F9:59:6D:9C:B9:70:CD:26:91:CF:3B:56:41:70:A8:19:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB68EE1081A431B79B0762 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f63ba1c1-0070-3b94-87df-f10456c69496.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.55.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:68:ee:10:81:a4:31:b7:9b:07:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=955e984b-24ef-41c8-bde7-385f85aadd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:f8:c2:d9:79:78:05:72:2d:d5:77:5f:14: fc:1c:cd:8e:01:b8:9e:59:a2:42:b1:6a:67:44:8b: 54:0a:f7:0d:a4:5c:f3:37:50:11:ab:d2:ca:cd:96: 47:d4:d8:92:cc:8e:c1:98:b0:4e:df:c7:49:fb:4d: 40:50:57:54:63:36:2f:5e:0b:60:0c:0f:41:f1:64: a0:1c:7c:3b:3a:fb:c0:24:a7:16:77:be:f9:b5:1b: 50:7e:95:07:cc:28:29:b3:d4:65:16:0d:5d:0d:92: ae:e8:41:57:a6:2e:79:fe:60:ea:76:c5:f6:f9:89: 21:3c:b8:03:d9:a8:d3:93:44:7d:ac:6f:79:e3:3c: 11:ee:8a:63:88:33:53:22:47:8c:af:f1:01:28:6d: 67:92:d2:0b:d1:0e:d8:6b:ea:aa:91:bc:62:92:45: f2:7c:db:78:e4:8e:4e:6a:7c:ea:03:3e:db:19:27: 65:ed:9a:cc:11:2b:4c:c2:ae:48:4f:9d:90:71:5a: 40:62:d8:d6:3e:83:70:f2:4e:88:bd:c6:94:f5:f8: d8:61:7a:98:74:dd:8a:33:12:59:2c:72:ac:1f:b7: 49:93:7f:ba:99:a4:03:40:73:8a:6f:be:13:79:59: bb:31:95:37:14:91:5d:91:cc:a7:0f:47:1e:41:24: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:76:F9:59:6D:9C:B9:70:CD:26:91:CF:3B:56:41:70:A8:19:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f63ba1c1-0070-3b94-87df-f10456c69496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a9:0b:47:b5:f6:2b:57:b3:07:b9:9d:41:81:a4:a2:53:49: 03:84:ae:8a:73:5b:d4:1b:20:cd:cd:65:96:b4:f0:56:77:bd: 8c:01:6c:e9:79:4f:84:7b:7f:70:b7:89:ea:13:c0:98:90:65: 96:27:24:6d:ed:d7:34:3f:22:18:3e:03:57:d9:7c:a2:a0:63: 93:4f:5b:05:43:0a:f2:97:ea:24:d1:29:10:89:fd:9f:3b:0f: 5c:27:4f:5d:ad:72:6e:4c:d5:f6:6c:e6:5c:2f:19:43:fc:5e: 4d:22:40:a1:fe:75:4b:07:d1:b6:2c:24:b7:ee:67:c1:50:3d: b1:d6:3a:09:06:a1:41:a5:96:2a:01:5a:dc:97:a5:ed:65:81: 21:29:54:c6:d5:c3:91:ec:d7:d4:2c:e3:82:ed:1c:ec:95:21: ad:13:d9:dd:62:79:82:e3:48:e4:91:73:62:ed:01:a3:45:27: 63:e5:6f:7e:06:e8:1c:c0:e6:7a:cf:a5:dd:34:56:fa:dc:91: ee:9b:77:9d:6b:29:40:02:31:5d:41:ff:11:69:a9:24:06:db: e6:0b:e9:bb:be:70:2c:ca:fe:3f:66:8f:23:e7:50:00:ab:aa: fe:7f:33:cd:4c:bc:b7:ff:46:31:60:55:ae:be:b7:db:29:6f: 63:d4:90:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2juEIGkMbebB2IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk OTU1ZTk4NGItMjRlZi00MWM4LWJkZTctMzg1Zjg1YWFkZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSX4wtl5eAVyLdV3XxT8HM2OAbieWaJCsWpn RItUCvcNpFzzN1ARq9LKzZZH1NiSzI7BmLBO38dJ+01AUFdUYzYvXgtgDA9B8WSg HHw7OvvAJKcWd775tRtQfpUHzCgps9RlFg1dDZKu6EFXpi55/mDqdsX2+YkhPLgD 2ajTk0R9rG954zwR7opjiDNTIkeMr/EBKG1nktIL0Q7Ya+qqkbxikkXyfNt45I5O anzqAz7bGSdl7ZrMEStMwq5IT52QcVpAYtjWPoNw8k6IvcaU9fjYYXqYdN2KMxJZ LHKsH7dJk3+6maQDQHOKb74TeVm7MZU3FJFdkcynD0ceQSR2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBvdvlZbZy5cM0mkc87VkFwqBksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjYzYmExYzEtMDA3MC0z Yjk0LTg3ZGYtZjEwNDU2YzY5NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEepC0e19itXswe5nUGBpKJTSQOEropzW9QbIM3NZZa08FZ3vYwBbOl5 T4R7f3C3ieoTwJiQZZYnJG3t1zQ/Ihg+A1fZfKKgY5NPWwVDCvKX6iTRKRCJ/Z87 D1wnT12tcm5M1fZs5lwvGUP8Xk0iQKH+dUsH0bYsJLfuZ8FQPbHWOgkGoUGllioB WtyXpe1lgSEpVMbVw5Hs19Qs44LtHOyVIa0T2d1ieYLjSOSRc2LtAaNFJ2Plb34G 6BzA5nrPpd00Vvrcke6bd51rKUACMV1B/xFpqSQG2+YL6bu+cCzK/j9mjyPnUACr qv5/M81MvLf/RjFgVa6+t9spb2PUkBE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:32 2025 by rpki-client