$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa File: 861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa (raw, json) Hash identifier: 0QG8OI4SlutueKDTb0oFshIzM9jDdQ9fjgetUsOmi0E= Subject key identifier: ED:3A:A2:F1:53:7B:AA:95:4C:E4:F4:A2:53:FC:88:87:58:D2:F9:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A35ABCBA648C975963360 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.43.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:35:ab:cb:a6:48:c9:75:96:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=feea5dfe-0312-47dc-89fb-0d665f75c241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:10:6b:6a:02:58:77:af:b3:03:7c:f3:30: 29:8e:58:69:7b:c1:df:19:60:7b:4f:08:6b:b5:ec: ca:d3:66:45:d4:df:99:fd:85:67:cb:50:ab:69:20: 4c:51:20:f6:86:0e:6f:e1:82:91:c9:5f:37:29:fa: e1:f9:0a:4c:a5:73:9f:34:39:57:2c:a3:db:c8:17: 18:e7:79:b5:3c:00:b4:3f:43:1f:f1:39:ff:2b:1d: ed:c4:68:8a:86:4d:a8:ba:46:3d:bb:e2:22:82:f2: 43:72:2a:76:ad:ac:6a:13:a4:e6:66:cd:e3:e0:c7: 81:6f:80:de:61:70:2d:d7:6e:bb:ef:d1:eb:79:4f: 64:9e:4d:0b:3a:23:9e:ad:8d:f8:4a:f2:47:5a:8b: 47:70:cd:e5:c5:0a:f0:b4:38:ba:39:52:63:92:9b: 04:42:ce:d7:35:09:2b:18:fd:8f:80:b1:16:00:9c: 6b:85:d5:35:bd:32:e6:02:fe:4a:82:07:e0:de:4f: 47:e0:b8:bb:e5:ae:be:b4:e0:be:34:20:1e:33:c8: 18:53:7d:43:a8:90:e2:7b:aa:6e:fe:5a:74:10:cc: d4:2e:12:35:00:4b:7d:95:c1:36:b1:dd:31:ad:1b: 55:81:ea:d9:99:3f:9a:b9:d1:f0:8e:b0:78:90:a5: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3A:A2:F1:53:7B:AA:95:4C:E4:F4:A2:53:FC:88:87:58:D2:F9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/861ccb56-bcc5-31e3-b2a3-420b4c0b32b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:cf:0e:81:97:c2:31:6b:bf:bd:39:07:3d:48:b0:46:65:19: 78:0e:4b:41:2c:75:2c:fd:19:9f:04:7f:c6:0f:d2:59:51:17: 75:db:25:03:24:e2:46:28:1e:fa:8a:42:92:22:a2:70:86:44: 82:1e:b6:32:f2:77:9f:47:a9:ab:e7:3d:8d:58:07:a7:ac:e9: 5a:1d:a9:1a:67:5c:a6:3e:10:e9:65:a9:12:f3:e0:3f:bf:23: 44:25:cc:74:ca:9a:0b:27:b9:db:72:2c:e9:58:88:4e:da:b6: 5b:b4:ea:41:9e:8a:f7:cb:af:a7:04:53:ea:58:aa:c4:e4:f2: 7c:a7:bf:79:c1:05:c8:6f:d3:d8:73:7c:d2:02:99:24:6c:6a: 04:ee:36:50:54:b7:7b:f0:f4:c3:a2:1a:09:2f:0d:19:f3:de: d5:74:da:d9:05:cc:d6:85:df:3e:78:ec:7d:86:0d:14:e3:0f: e7:54:89:a5:3f:29:74:70:da:25:c4:54:24:56:48:ad:0c:7a: 6a:53:37:5b:99:cd:c3:cb:7f:f0:fa:06:8e:67:90:4a:82:98: 15:f5:fe:2a:9a:00:26:25:c8:fd:e4:fb:78:c7:87:4d:e5:41: 3d:3e:42:75:ec:b8:73:67:0e:4c:e9:08:53:50:52:08:8c:68: 92:79:f3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjWry6ZIyXWWM2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmVlYTVkZmUtMDMxMi00N2RjLTg5ZmItMGQ2NjVmNzVjMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQEQa2oCWHevswN88zApjlhpe8HfGWB7Twhr tezK02ZF1N+Z/YVny1CraSBMUSD2hg5v4YKRyV83Kfrh+QpMpXOfNDlXLKPbyBcY 53m1PAC0P0Mf8Tn/Kx3txGiKhk2oukY9u+IigvJDcip2raxqE6TmZs3j4MeBb4De YXAt126779HreU9knk0LOiOerY34SvJHWotHcM3lxQrwtDi6OVJjkpsEQs7XNQkr GP2PgLEWAJxrhdU1vTLmAv5Kggfg3k9H4Li75a6+tOC+NCAeM8gYU31DqJDie6pu /lp0EMzULhI1AEt9lcE2sd0xrRtVgerZmT+audHwjrB4kKU0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO06ovFTe6qVTOT0olP8iIdY0vn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxY2NiNTYtYmNjNS0z MWUzLWIyYTMtNDIwYjRjMGIzMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFysAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPPDoGXwjFrv705Bz1IsEZlGXgOS0EsdSz9GZ8Ef8YP0llRF3XbJQMk 4kYoHvqKQpIionCGRIIetjLyd59HqavnPY1YB6es6VodqRpnXKY+EOllqRLz4D+/ I0QlzHTKmgsnudtyLOlYiE7atlu06kGeivfLr6cEU+pYqsTk8nynv3nBBchv09hz fNICmSRsagTuNlBUt3vw9MOiGgkvDRnz3tV02tkFzNaF3z547H2GDRTjD+dUiaU/ KXRw2iXEVCRWSK0MempTN1uZzcPLf/D6Bo5nkEqCmBX1/iqaACYlyP3k+3jHh03l QT0+QnXsuHNnDkzpCFNQUgiMaJJ58/g= -----END CERTIFICATE-----Generated at Mon May 5 20:39:05 2025 by rpki-client