$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa File: fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa (raw, json) Hash identifier: nSOucdDTIxYSVmp9v6tlqrqBAnrxXjDHa2wtSpOoUD8= Subject key identifier: F1:21:5C:53:F9:43:E6:D3:5A:F9:24:B6:DA:79:8C:47:05:C1:A1:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC3C89678FE8ECCCB3AB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.65.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3c:89:67:8f:e8:ec:cc:b3:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=39181221-debf-466f-bc93-b796f325561a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:15:6c:62:3c:b0:3e:32:54:e1:99:21:7a: c7:96:91:a8:14:c9:23:05:ee:15:fe:d5:56:78:8d: e7:9b:2a:da:58:0a:41:a8:02:39:92:25:90:96:10: 67:61:cd:e5:cd:88:92:86:48:85:0d:5a:41:37:e1: e0:ce:0c:b9:46:27:b6:8a:d6:b3:b6:f8:a4:fb:dd: 61:36:13:b5:a4:a2:81:86:f6:a1:bc:e0:c1:1a:02: 57:de:65:cc:9b:6a:2d:66:e2:51:93:23:af:67:18: 8c:40:1f:f3:fd:3c:d0:d3:c6:00:99:f8:a0:98:fc: 2a:ce:ae:0e:2b:6d:0d:74:97:0e:dc:0b:44:b0:36: d8:41:15:ee:76:67:a8:02:10:16:6a:08:80:84:eb: 2f:c5:58:8b:b0:e4:05:16:7a:d3:8a:23:f2:8c:36: bf:6f:b1:7f:d3:c5:d7:19:fd:f4:16:ea:92:5b:13: b2:7e:c2:6a:0b:df:f9:0c:80:33:7a:08:fb:eb:9e: 56:bb:dd:c9:2b:df:d0:30:a7:24:66:5e:9d:76:28: af:63:6c:0e:28:2b:62:73:81:82:ab:ba:eb:cf:93: a3:86:89:ee:68:7c:b5:2a:3f:00:1e:e8:7e:1c:e4: 8f:44:44:a7:d1:77:80:65:24:de:8e:40:45:52:d9: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:5C:53:F9:43:E6:D3:5A:F9:24:B6:DA:79:8C:47:05:C1:A1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc50c285-c1ef-33cc-bc50-4d815f9ff74f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:78:1c:62:ca:54:c9:d9:d6:c6:72:75:ed:e5:25:a3:83:56: 06:4e:4e:d5:db:11:cb:12:f6:7e:e5:f3:e6:dd:9e:d4:72:52: 89:c5:13:f2:e4:f3:dc:92:c8:b3:c7:4b:b2:53:90:9d:88:40: 8c:74:61:38:87:e2:40:c1:99:a9:26:35:e5:5f:e9:92:9b:34: 18:f0:d8:07:cc:94:4e:c7:ff:b3:31:7e:5a:01:eb:8e:02:fb: 1e:6b:81:2c:a7:04:12:eb:16:f1:47:f4:3a:8d:f0:d1:ba:2a: 80:61:69:38:8a:35:b2:34:6d:b8:52:27:97:7c:f4:a4:fb:93: 81:09:6f:87:25:f8:6b:ca:39:22:27:c9:85:c4:ba:3e:ff:85: 69:13:67:ef:63:68:66:14:b2:ee:b4:18:b2:9f:ae:01:49:20: 29:44:5d:21:55:7d:43:c7:2e:a5:9b:47:ab:c2:a1:bf:ec:6f: fd:7c:00:f0:5b:3c:96:f1:73:84:aa:95:5b:5f:a5:96:07:fd: 8b:d9:33:8e:93:1a:5a:71:f2:1e:d4:27:96:10:ff:fc:2e:86: 4a:d9:4d:21:9f:81:4b:a8:fb:d9:d3:46:e9:b9:c1:82:0f:04: 85:ef:d9:90:5c:ad:87:fd:8e:6a:bd:10:f1:1f:f2:fb:cc:ee: da:76:0b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDyJZ4/o7Myzq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MzkxODEyMjEtZGViZi00NjZmLWJjOTMtYjc5NmYzMjU1NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvQVbGI8sD4yVOGZIXrHlpGoFMkjBe4V/tVW eI3nmyraWApBqAI5kiWQlhBnYc3lzYiShkiFDVpBN+Hgzgy5Rie2itaztvik+91h NhO1pKKBhvahvODBGgJX3mXMm2otZuJRkyOvZxiMQB/z/TzQ08YAmfigmPwqzq4O K20NdJcO3AtEsDbYQRXudmeoAhAWagiAhOsvxViLsOQFFnrTiiPyjDa/b7F/08XX Gf30FuqSWxOyfsJqC9/5DIAzegj7655Wu93JK9/QMKckZl6ddiivY2wOKCtic4GC q7rrz5OjhonuaHy1Kj8AHuh+HOSPRESn0XeAZSTejkBFUtkahwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEhXFP5Q+bTWvkkttp5jEcFwaGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmM1MGMyODUtYzFlZi0z M2NjLWJjNTAtNGQ4MTVmOWZmNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd4HGLKVMnZ1sZyde3lJaODVgZOTtXbEcsS9n7l8+bdntRyUonFE/Lk 89ySyLPHS7JTkJ2IQIx0YTiH4kDBmakmNeVf6ZKbNBjw2AfMlE7H/7MxfloB644C +x5rgSynBBLrFvFH9DqN8NG6KoBhaTiKNbI0bbhSJ5d89KT7k4EJb4cl+GvKOSIn yYXEuj7/hWkTZ+9jaGYUsu60GLKfrgFJIClEXSFVfUPHLqWbR6vCob/sb/18APBb PJbxc4SqlVtfpZYH/YvZM46TGlpx8h7UJ5YQ//wuhkrZTSGfgUuo+9nTRum5wYIP BIXv2ZBcrYf9jmq9EPEf8vvM7tp2Czo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:42 2025 by rpki-client