$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a7c64a0-d436-35fd-ab34-eaa376c76814.roa File: 1a7c64a0-d436-35fd-ab34-eaa376c76814.roa (raw, json) Hash identifier: od55gT3RJbFSTZz4P+V9ZftkLO0je8gnS32Ti4NLIFc= Subject key identifier: F3:47:85:B1:F3:6F:65:DF:06:5F:A6:E9:B2:41:13:51:1E:67:10:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA196104A13888F1E03800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a7c64a0-d436-35fd-ab34-eaa376c76814.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 16625 IP address blocks: 23.63.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:19:61:04:a1:38:88:f1:e0:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=7f8d8f91-68c6-40af-b437-fe2d094d072b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:a7:47:d5:ed:91:58:8e:83:1b:1d:13:d8: 3d:f2:73:db:19:56:5d:ae:db:e5:1f:7a:28:51:c7: fc:31:a4:57:35:3b:04:d3:03:8f:4b:aa:a9:75:34: b8:b1:32:f7:19:d5:0c:cc:b0:4b:00:02:27:5c:d5: 5d:2d:1b:a8:d6:93:db:c9:ef:95:eb:e7:b9:b4:88: df:f2:e6:e7:cc:00:b6:19:36:28:13:f0:5a:be:b3: 6f:50:c8:f2:61:6e:d0:96:81:62:da:69:a9:ad:95: f4:a0:ba:5f:ec:ec:27:4c:69:e2:4b:ba:7b:4b:ef: df:59:a4:95:ce:d2:76:a2:40:05:22:4e:9e:d0:3d: b3:63:39:a9:92:47:af:71:89:d8:d8:a0:44:af:58: 85:70:a5:49:93:7d:11:af:bb:ea:0f:68:5a:9c:9a: d3:2f:7e:29:e9:4d:41:f1:cc:b3:b1:d5:6c:e4:87: 97:cf:bf:1b:d8:93:89:09:85:17:61:b9:16:08:27: c7:d0:3d:b1:97:94:dc:1e:45:83:31:70:cc:16:ff: 55:b3:4b:b3:09:14:4e:75:7d:8a:dd:96:54:45:ab: 07:28:1a:4e:f6:1b:01:66:60:60:2f:be:a5:59:63: 74:9b:df:77:f2:ec:17:46:7d:6f:da:be:22:f9:c3: 4d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:47:85:B1:F3:6F:65:DF:06:5F:A6:E9:B2:41:13:51:1E:67:10:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a7c64a0-d436-35fd-ab34-eaa376c76814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4e:92:da:82:68:c0:e9:1c:c3:5d:8b:49:9f:1a:39:e4:11: b1:67:dd:7f:33:19:6c:5f:f6:4e:eb:ea:5e:0e:a3:76:bb:d0: bf:57:f0:a9:ca:b1:be:54:e1:e2:a9:b9:59:82:9f:37:b1:02: 7c:23:0d:ff:71:02:99:f3:0b:31:e2:bc:f9:7d:ec:ec:1f:57: a4:50:0a:db:93:e1:4d:36:59:04:1c:51:0c:7e:fd:a3:69:de: 5e:ac:86:d8:8e:4d:33:3b:f5:8a:a0:cf:08:c3:53:78:3b:f9: 5c:74:e4:19:2b:17:2c:2b:83:b6:35:d3:02:fd:56:14:c6:f3: cc:b2:93:e9:e0:e9:cf:3f:02:9c:75:56:a3:f7:37:d0:2f:7d: c0:39:98:ff:40:a9:26:c5:7b:05:de:6e:f3:a7:4d:5a:e1:f4: 8e:d0:ba:7a:63:5b:a0:49:bb:54:45:1a:ea:9d:8f:d0:d0:9a: c8:47:f4:f6:64:04:eb:5b:d7:8d:99:8f:77:e1:53:78:8b:94: 01:04:0b:d8:25:28:aa:d3:4c:54:8d:6e:51:e5:7d:16:71:84: 39:cd:99:08:cb:da:1e:34:9f:30:73:4b:5d:f9:8d:2b:63:60: 4e:37:95:28:c4:6a:d7:7f:f0:5a:dc:e8:36:2d:32:f4:46:f1: b4:57:22:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92hlhBKE4iPHgOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk N2Y4ZDhmOTEtNjhjNi00MGFmLWI0MzctZmUyZDA5NGQwNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqnR9XtkViOgxsdE9g98nPbGVZdrtvlH3oo Ucf8MaRXNTsE0wOPS6qpdTS4sTL3GdUMzLBLAAInXNVdLRuo1pPbye+V6+e5tIjf 8ubnzAC2GTYoE/BavrNvUMjyYW7QloFi2mmprZX0oLpf7OwnTGniS7p7S+/fWaSV ztJ2okAFIk6e0D2zYzmpkkevcYnY2KBEr1iFcKVJk30Rr7vqD2hanJrTL34p6U1B 8cyzsdVs5IeXz78b2JOJCYUXYbkWCCfH0D2xl5TcHkWDMXDMFv9Vs0uzCRROdX2K 3ZZURasHKBpO9hsBZmBgL76lWWN0m9938uwXRn1v2r4i+cNNjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNHhbHzb2XfBl+m6bJBE1EeZxCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE3YzY0YTAtZDQzNi0z NWZkLWFiMzQtZWFhMzc2Yzc2ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlOktqCaMDpHMNdi0mfGjnkEbFn3X8zGWxf9k7r6l4Oo3a70L9X8KnK sb5U4eKpuVmCnzexAnwjDf9xApnzCzHivPl97OwfV6RQCtuT4U02WQQcUQx+/aNp 3l6shtiOTTM79YqgzwjDU3g7+Vx05BkrFywrg7Y10wL9VhTG88yyk+ng6c8/Apx1 VqP3N9AvfcA5mP9AqSbFewXebvOnTVrh9I7QunpjW6BJu1RFGuqdj9DQmshH9PZk BOtb142Zj3fhU3iLlAEEC9glKKrTTFSNblHlfRZxhDnNmQjL2h40nzBzS135jStj YE43lSjEatd/8Frc6DYtMvRG8bRXIhw= -----END CERTIFICATE-----Generated at Wed May 7 19:29:07 2025 by rpki-client