$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541236f6-a9d7-3663-9c11-216ac3c64097.roa File: 541236f6-a9d7-3663-9c11-216ac3c64097.roa (raw, json) Hash identifier: tmDz0kM51eaGFnGYn3cDNKhsBolLTCg9XPtB3HbHJQM= Subject key identifier: 98:74:21:C3:CD:88:5D:60:3E:42:68:65:2D:54:5A:11:33:B3:1B:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A4DBCD04905F64F4CED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541236f6-a9d7-3663-9c11-216ac3c64097.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.39.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4d:bc:d0:49:05:f6:4f:4c:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=3c8a6bc4-bf78-4cde-b33e-20ac67c3d373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:07:95:94:32:a5:c2:09:30:e5:b9:04:73: 2f:2d:ea:e7:d8:9e:eb:86:65:94:c5:2a:bc:3d:f9: 1f:67:df:14:e9:c4:21:af:fb:1e:53:76:31:c7:85: 32:ee:4e:a1:a2:2c:63:c0:98:1f:28:1f:47:3d:a3: 06:30:97:60:7f:3f:e0:4a:da:c9:fb:c3:75:ad:91: 0a:91:37:a3:50:67:07:f5:ad:83:0c:e9:97:5c:de: ed:d9:ce:bb:1b:a1:20:f9:c5:80:87:16:12:5e:5b: 23:33:a8:0b:b5:0b:a7:b8:6f:d6:72:79:e2:1b:d7: 1c:bf:66:6e:f6:4b:4b:d9:c5:00:62:bc:94:46:08: 88:45:6b:e7:68:f9:2f:00:14:d0:6d:39:19:8c:b2: d7:9e:8f:92:5d:89:f4:6c:f0:17:17:04:71:9f:b4: a0:ce:67:75:59:f7:27:56:ae:aa:e1:ad:3a:00:41: a1:ea:92:b0:86:1e:52:e8:b8:b6:92:a3:c8:bc:56: 3a:45:8c:01:36:4d:cf:bd:20:ee:b4:df:f0:ad:53: 2a:f1:a5:29:c9:6c:59:df:70:18:7f:6f:a9:ad:07: b3:62:61:2e:30:c2:bd:ac:bf:af:34:d9:09:a7:78: 8d:e9:f5:d7:85:de:f7:59:c0:04:c7:d2:a1:23:62: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:21:C3:CD:88:5D:60:3E:42:68:65:2D:54:5A:11:33:B3:1B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541236f6-a9d7-3663-9c11-216ac3c64097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6d:0c:a8:0d:66:7a:3b:93:e3:13:9b:c2:4c:70:19:34:0a: 82:ae:3d:92:86:13:40:af:b2:e5:83:41:d4:63:96:a1:ad:fd: 5f:1b:22:9a:7d:80:78:00:f0:98:a3:70:7a:75:6d:06:4d:47: d9:60:1e:f2:7f:b7:16:42:bd:9a:a4:ca:62:ec:a9:f2:eb:d7: 49:ff:38:7e:3a:00:4c:4c:c1:58:e7:d3:b9:cc:66:24:dd:f9: 30:e0:31:ab:d9:c6:c0:d4:71:e8:a8:7d:44:b7:da:d8:3c:4e: 3d:c5:6b:51:59:21:07:4b:c1:3b:25:55:c8:c0:32:98:da:7e: 0b:f6:81:07:05:3b:34:19:2a:a3:7f:99:45:2e:12:04:11:bf: 0b:e9:4f:a1:a3:f7:35:a5:8c:e9:82:9f:8c:18:c0:a0:28:33: e8:5d:64:0a:f7:05:23:ab:ee:05:de:72:78:78:d8:ae:70:87: 53:d5:86:2e:ee:b4:0b:7a:9f:d1:77:18:63:2d:d4:00:e9:16: 80:84:a1:5a:be:3f:da:21:2d:f4:c2:f8:f1:bc:85:d8:76:03: 21:c6:52:fe:2b:a4:68:5c:3f:d4:78:56:f7:00:de:f0:e5:16: 63:0f:c0:5d:4e:23:b4:ea:86:b6:e4:7d:84:d3:a2:51:78:d0: 56:ea:44:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSk280EkF9k9M7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk M2M4YTZiYzQtYmY3OC00Y2RlLWIzM2UtMjBhYzY3YzNkMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL8HlZQypcIJMOW5BHMvLern2J7rhmWUxSq8 PfkfZ98U6cQhr/seU3Yxx4Uy7k6hoixjwJgfKB9HPaMGMJdgfz/gStrJ+8N1rZEK kTejUGcH9a2DDOmXXN7t2c67G6Eg+cWAhxYSXlsjM6gLtQunuG/WcnniG9ccv2Zu 9ktL2cUAYryURgiIRWvnaPkvABTQbTkZjLLXno+SXYn0bPAXFwRxn7Sgzmd1Wfcn Vq6q4a06AEGh6pKwhh5S6Li2kqPIvFY6RYwBNk3PvSDutN/wrVMq8aUpyWxZ33AY f2+prQezYmEuMMK9rL+vNNkJp3iN6fXXhd73WcAEx9KhI2KxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh0IcPNiF1gPkJoZS1UWhEzsxvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQxMjM2ZjYtYTlkNy0z NjYzLTljMTEtMjE2YWMzYzY0MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFydvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFtDKgNZno7k+MTm8JMcBk0CoKuPZKGE0CvsuWDQdRjlqGt/V8bIpp9 gHgA8JijcHp1bQZNR9lgHvJ/txZCvZqkymLsqfLr10n/OH46AExMwVjn07nMZiTd +TDgMavZxsDUceiofUS32tg8Tj3Fa1FZIQdLwTslVcjAMpjafgv2gQcFOzQZKqN/ mUUuEgQRvwvpT6Gj9zWljOmCn4wYwKAoM+hdZAr3BSOr7gXecnh42K5wh1PVhi7u tAt6n9F3GGMt1ADpFoCEoVq+P9ohLfTC+PG8hdh2AyHGUv4rpGhcP9R4VvcA3vDl FmMPwF1OI7TqhrbkfYTTolF40FbqRBY= -----END CERTIFICATE-----Generated at Fri May 9 08:05:08 2025 by rpki-client