$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe98cb5a-e989-3e55-8072-bee97422c9b5.roa File: fe98cb5a-e989-3e55-8072-bee97422c9b5.roa (raw, json) Hash identifier: U2geuhUhi/OaJD2P6wBAbbD6yqkw8PyKPflqe0jx6pM= Subject key identifier: BE:64:76:99:E5:08:B8:E1:C4:CB:20:F0:F2:46:94:39:39:37:50:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E9B5A85E1AEA258785C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe98cb5a-e989-3e55-8072-bee97422c9b5.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.3.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:9b:5a:85:e1:ae:a2:58:78:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=dcd2eff1-47a0-4cf6-b292-ebb553a780de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:92:51:04:38:cb:c5:f2:16:9a:5c:a5:83: 10:e4:0b:a6:28:c5:db:f6:57:f4:b7:d9:80:bb:0d: 76:33:eb:2f:fb:7a:3a:1c:4c:45:c3:21:58:ab:2f: 47:ff:64:e7:14:99:b2:9a:6a:72:f2:2d:95:ec:ca: 5f:9f:df:1a:13:0a:fa:14:aa:91:9f:48:dc:f6:67: de:c3:20:06:75:9c:75:a8:6b:ec:6f:a1:e6:5b:92: 7d:f5:43:28:86:ba:09:37:1e:45:eb:71:ff:69:f8: d2:57:50:ab:84:28:37:e4:71:0f:5f:19:7a:0f:63: 56:d6:db:03:3f:01:c2:50:a1:6d:d7:96:5e:1a:20: 87:4c:40:0d:50:64:af:dc:8f:6a:91:11:93:77:d2: 08:7a:b6:81:b6:5b:6c:e7:6b:8c:d7:be:a8:75:7b: 0b:98:c8:3a:e3:f8:9b:19:da:0b:30:a2:8c:72:95: 1f:21:aa:13:27:bc:63:1c:f1:66:1f:4c:c9:fb:57: 31:92:e7:9a:13:d0:84:44:65:93:06:ec:06:ff:8c: cc:e8:14:01:49:8d:be:5b:8d:01:ab:85:06:af:ba: 50:b0:7d:c1:92:2f:d0:50:41:dd:ac:6c:96:40:63: d1:70:3a:93:94:73:d1:76:53:15:28:99:be:e4:af: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:64:76:99:E5:08:B8:E1:C4:CB:20:F0:F2:46:94:39:39:37:50:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe98cb5a-e989-3e55-8072-bee97422c9b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4b:32:9d:a0:6a:76:4e:bd:ce:95:90:9f:d2:a5:d7:fa:fe: 1c:4c:13:be:be:dd:2b:39:28:16:8c:3c:ef:7b:fd:8f:f5:df: 64:ab:55:1b:24:46:20:3a:fe:74:e5:c6:31:88:8c:20:35:32: ec:80:94:9a:71:61:70:d6:d7:8e:9a:44:47:7c:a8:66:f0:9b: a1:f9:e0:97:39:ae:38:ba:2d:19:c7:66:2b:b8:64:8d:3c:72: 6e:4f:49:1c:79:a8:38:53:56:aa:6d:96:a0:c4:d8:74:3a:77: eb:53:f3:c9:9e:54:71:eb:dd:f3:05:f9:1d:dd:74:cb:5a:2b: af:fb:4f:60:ec:cb:0e:0a:77:a7:97:c7:fc:b0:03:34:23:98: 86:ba:77:ce:09:cc:9d:65:de:9b:43:1d:72:a3:6d:3f:9d:c9: ca:ee:ad:56:8f:a8:70:2b:67:f9:1d:07:40:16:de:23:04:57: 1a:5a:30:df:df:62:4c:7b:b1:29:9a:98:f8:6a:a3:ce:d4:fe: 95:a4:71:59:ff:0e:63:3f:de:46:e8:a7:fb:f9:64:5a:7d:20: c9:cf:c2:f1:9c:9f:4c:f4:7b:e4:21:23:9c:93:1e:93:5c:51: 01:4c:15:1d:5b:9c:76:1a:16:66:57:c8:93:d7:d7:52:66:f4: 6e:dc:50:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTptaheGuolh4XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZGNkMmVmZjEtNDdhMC00Y2Y2LWIyOTItZWJiNTUzYTc4MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojSSUQQ4y8XyFppcpYMQ5AumKMXb9lf0t9mA uw12M+sv+3o6HExFwyFYqy9H/2TnFJmymmpy8i2V7Mpfn98aEwr6FKqRn0jc9mfe wyAGdZx1qGvsb6HmW5J99UMohroJNx5F63H/afjSV1CrhCg35HEPXxl6D2NW1tsD PwHCUKFt15ZeGiCHTEANUGSv3I9qkRGTd9IIeraBtlts52uM176odXsLmMg64/ib GdoLMKKMcpUfIaoTJ7xjHPFmH0zJ+1cxkueaE9CERGWTBuwG/4zM6BQBSY2+W40B q4UGr7pQsH3Bki/QUEHdrGyWQGPRcDqTlHPRdlMVKJm+5K/ZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5kdpnlCLjhxMsg8PJGlDk5N1DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmU5OGNiNWEtZTk4OS0z ZTU1LTgwNzItYmVlOTc0MjJjOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApLMp2ganZOvc6VkJ/Spdf6/hxME76+3Ss5KBaMPO97/Y/132SrVRsk RiA6/nTlxjGIjCA1MuyAlJpxYXDW146aREd8qGbwm6H54Jc5rji6LRnHZiu4ZI08 cm5PSRx5qDhTVqptlqDE2HQ6d+tT88meVHHr3fMF+R3ddMtaK6/7T2Dsyw4Kd6eX x/ywAzQjmIa6d84JzJ1l3ptDHXKjbT+dycrurVaPqHArZ/kdB0AW3iMEVxpaMN/f Ykx7sSmamPhqo87U/pWkcVn/DmM/3kbop/v5ZFp9IMnPwvGcn0z0e+QhI5yTHpNc UQFMFR1bnHYaFmZXyJPX11Jm9G7cUDE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:03 2025 by rpki-client