$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa File: 606a4411-5047-3e42-9ccf-b65d55d53a12.roa (raw, json) Hash identifier: DsLDQeHAW2h/rzInRYwGg6MVdPTxNPU23yyQ7FOI3aY= Subject key identifier: 11:C1:E3:C6:A5:D7:B1:53:EC:C1:36:FF:2C:A0:AC:49:CC:06:F7:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC3E71D59AE34F44B56780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 55644 IP address blocks: 23.40.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3e:71:d5:9a:e3:4f:44:b5:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=1ad8f75c-fe41-40d6-aee8-967f2ed0661c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:ed:67:50:b6:3d:87:57:b9:5f:80:ce:83: 20:b2:dd:de:5c:54:e4:68:3a:f4:b6:15:09:ce:ed: a5:89:eb:e7:b8:21:27:68:de:5f:38:6c:9f:e8:a7: 69:ca:29:5d:c6:15:87:e6:36:5b:f7:ee:cc:04:3a: 5d:37:1d:96:87:cc:9e:22:ab:a6:d5:22:88:f3:05: 97:0c:8c:69:ad:18:de:b0:b6:72:01:59:95:1e:62: 76:7e:83:73:38:fa:8f:b0:58:3b:a8:77:5c:0f:49: 88:e2:73:e4:ad:24:c9:80:39:88:b4:dd:60:4b:b3: 02:5d:64:94:b8:a6:22:4c:21:c9:97:17:59:18:cd: 2b:25:9a:b8:ec:6f:88:60:6d:1e:87:f4:9c:dd:3a: 64:61:5c:12:61:58:04:bf:08:24:9f:d7:5a:d8:47: 68:8f:85:9b:25:51:c6:23:a7:29:56:aa:40:ed:82: 75:95:43:f7:ec:7c:e0:23:93:35:df:aa:1c:df:f7: ea:63:fe:90:f2:bd:3a:6b:ec:db:d3:b0:02:f0:90: 80:e3:27:80:8c:8b:9c:73:20:49:54:32:3a:46:c4: 04:e0:2c:8c:af:ad:bf:1b:8a:f0:cf:92:ea:d4:8b: ef:b9:70:57:4f:90:4e:59:9a:95:ec:d2:5e:bf:f4: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C1:E3:C6:A5:D7:B1:53:EC:C1:36:FF:2C:A0:AC:49:CC:06:F7:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:51:e9:27:fc:b2:f6:7e:96:db:d9:ed:5e:69:73:f2:7c:01: 0d:60:54:17:7c:e3:00:e1:71:33:3c:9e:af:12:2d:23:b9:c1: 3e:73:0b:65:32:dc:0c:28:ef:94:2e:52:4d:59:b5:0d:26:79: bb:ed:6b:2f:0e:7f:de:8d:16:7f:a6:85:23:25:f6:c6:74:98: 4e:0e:12:bb:36:3a:c5:0f:1b:ba:3a:e9:c1:51:f0:6c:df:ec: e5:16:7f:36:51:98:d4:8c:b7:e3:9a:40:7a:3b:68:15:24:16: 58:7e:17:a8:86:aa:6a:89:6f:84:d8:5a:3b:8e:39:c2:3f:a2: b9:2e:c6:48:87:d3:2c:3c:a5:d1:7a:ed:b1:d8:d7:12:b7:a4: a3:1f:62:e8:e4:4e:19:9c:fc:51:7c:cd:bf:49:23:e5:1f:7b: ad:4f:ef:8b:d1:6c:3e:6e:2f:de:72:7f:ac:21:0e:27:b0:74: 87:f1:2a:d3:e0:32:58:76:4d:91:f7:fb:03:06:10:57:66:55: ea:b9:44:e2:6e:fc:a1:c7:9e:e8:8a:48:6a:87:29:90:0a:cf: 0d:5e:f7:79:88:d2:af:e4:5a:d5:0b:0f:5e:5b:c1:8f:00:ca: 7f:71:d5:0c:c7:ac:2c:c1:af:79:ae:90:3a:c1:5f:56:c8:af: d9:28:fe:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrD5x1ZrjT0S1Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MWFkOGY3NWMtZmU0MS00MGQ2LWFlZTgtOTY3ZjJlZDA2NjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysntZ1C2PYdXuV+AzoMgst3eXFTkaDr0thUJ zu2lievnuCEnaN5fOGyf6KdpyildxhWH5jZb9+7MBDpdNx2Wh8yeIqum1SKI8wWX DIxprRjesLZyAVmVHmJ2foNzOPqPsFg7qHdcD0mI4nPkrSTJgDmItN1gS7MCXWSU uKYiTCHJlxdZGM0rJZq47G+IYG0eh/Sc3TpkYVwSYVgEvwgkn9da2Edoj4WbJVHG I6cpVqpA7YJ1lUP37HzgI5M136oc3/fqY/6Q8r06a+zb07AC8JCA4yeAjIuccyBJ VDI6RsQE4CyMr62/G4rwz5Lq1IvvuXBXT5BOWZqV7NJev/RikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHB48al17FT7ME2/yygrEnMBveRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA2YTQ0MTEtNTA0Ny0z ZTQyLTljY2YtYjY1ZDU1ZDUzYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBR6Sf8svZ+ltvZ7V5pc/J8AQ1gVBd84wDhcTM8nq8SLSO5wT5zC2Uy 3Awo75QuUk1ZtQ0mebvtay8Of96NFn+mhSMl9sZ0mE4OErs2OsUPG7o66cFR8Gzf 7OUWfzZRmNSMt+OaQHo7aBUkFlh+F6iGqmqJb4TYWjuOOcI/orkuxkiH0yw8pdF6 7bHY1xK3pKMfYujkThmc/FF8zb9JI+Ufe61P74vRbD5uL95yf6whDiewdIfxKtPg Mlh2TZH3+wMGEFdmVeq5ROJu/KHHnuiKSGqHKZAKzw1e93mI0q/kWtULD15bwY8A yn9x1QzHrCzBr3mukDrBX1bIr9ko/j8= -----END CERTIFICATE-----Generated at Mon May 5 07:15:26 2025 by rpki-client