$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8fa648-bf19-3cf9-b594-38ed81a2c3c3.roa File: 8a8fa648-bf19-3cf9-b594-38ed81a2c3c3.roa (raw, json) Hash identifier: tROJJ/byd6tQx1DvZvz9Yasnr0OmjjdRdifkvnGRwTw= Subject key identifier: 4D:1D:07:9C:C2:81:E8:9D:69:A0:33:F2:D0:43:F5:68:93:BF:11:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BDDA197CAA129FC0E64A3680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8fa648-bf19-3cf9-b594-38ed81a2c3c3.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 16625 IP address blocks: 23.63.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:19:7c:aa:12:9f:c0:e6:4a:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=b3b9c5d2-a4fa-498c-bd21-2c14d1c5d1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:84:8b:9f:57:61:fd:ae:89:ba:9d:46:4e: c0:bd:c0:66:22:ab:c1:94:1b:e5:05:5f:54:04:4c: 61:11:5b:77:f0:68:6f:91:49:2e:e8:e4:68:bf:a8: d3:ec:8d:3e:4b:5a:5c:dd:72:7e:af:71:d3:79:79: 52:a4:26:4d:34:f6:ad:ec:f3:91:a0:4d:f8:76:0b: e9:47:03:c7:d8:f7:73:a6:c6:03:2b:43:7b:64:41: ce:2f:4a:ae:4e:bb:0f:2b:92:54:a6:62:de:a8:f6: 48:24:91:20:2e:71:11:64:9e:0e:a5:e5:a3:35:b7: bb:b9:72:d4:26:a4:01:f4:ca:51:85:7f:1f:f1:aa: c5:38:7f:65:29:58:d0:22:56:8b:43:b3:07:2d:c8: fa:95:81:67:d2:7f:2f:48:7e:65:04:47:6d:ea:d3: 4e:39:8b:2e:61:08:93:b0:c1:18:a6:71:30:67:cb: 66:d5:c8:db:d4:70:80:05:2f:ba:33:21:08:24:8b: d6:2c:75:78:1b:81:96:3a:ad:d2:1b:11:83:ca:a6: 2f:93:f2:16:87:7e:f4:52:bd:5a:7e:9c:9b:84:09: 91:3c:b8:97:92:67:70:c0:a0:d8:0d:98:b1:28:81: 7a:e9:a8:5a:94:7b:31:49:9f:b0:8b:0d:ea:46:49: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1D:07:9C:C2:81:E8:9D:69:A0:33:F2:D0:43:F5:68:93:BF:11:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8fa648-bf19-3cf9-b594-38ed81a2c3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:dc:ae:3e:15:26:97:f8:58:68:ba:59:ca:08:07:b7:eb:e6: fc:12:3d:36:44:47:56:6e:5b:b0:72:c9:4b:c5:03:2c:3a:e1: 3c:c9:b9:43:f4:a6:34:9f:f1:77:69:25:df:ab:76:9d:9d:36: 3e:51:af:7d:72:96:e9:84:b8:3a:03:e1:d1:ac:d4:75:c6:c3: 7c:3d:e5:96:97:f1:63:ff:2e:81:b9:b6:4c:5f:78:65:fb:30: 07:9b:7d:00:d8:6f:a6:e4:27:b4:73:26:f0:58:28:7a:7a:38: d8:cd:fd:c9:20:81:ba:3d:67:8f:f9:b5:0d:a4:91:5e:c3:dd: 77:55:55:e1:8e:e7:95:9d:a0:90:b6:13:0f:c1:d2:5d:51:cb: 34:88:a8:83:b5:cf:06:47:03:4e:18:d5:41:3f:af:ee:86:1c: c4:7d:29:74:a5:45:c2:d7:9d:c8:d6:7c:68:a9:97:72:e6:fe: 4e:86:9b:48:c8:39:55:69:fb:83:b9:76:1d:64:6d:45:17:17: 0e:6a:39:43:9d:7b:14:53:04:f0:52:26:60:69:b5:e8:c1:d3: f7:7b:3c:0c:76:6c:12:00:f1:fe:ad:56:29:9e:2d:7e:73:4c: 3d:3d:bb:37:00:ce:f7:99:4b:77:11:22:c9:53:e3:c9:b7:5c: 9a:ac:10:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92hl8qhKfwOZKNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YjNiOWM1ZDItYTRmYS00OThjLWJkMjEtMmMxNGQxYzVkMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8eEi59XYf2uibqdRk7AvcBmIqvBlBvlBV9U BExhEVt38GhvkUku6ORov6jT7I0+S1pc3XJ+r3HTeXlSpCZNNPat7PORoE34dgvp RwPH2PdzpsYDK0N7ZEHOL0quTrsPK5JUpmLeqPZIJJEgLnERZJ4OpeWjNbe7uXLU JqQB9MpRhX8f8arFOH9lKVjQIlaLQ7MHLcj6lYFn0n8vSH5lBEdt6tNOOYsuYQiT sMEYpnEwZ8tm1cjb1HCABS+6MyEIJIvWLHV4G4GWOq3SGxGDyqYvk/IWh370Ur1a fpybhAmRPLiXkmdwwKDYDZixKIF66ahalHsxSZ+wiw3qRknPYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0dB5zCgeidaaAz8tBD9WiTvxEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE4ZmE2NDgtYmYxOS0z Y2Y5LWI1OTQtMzhlZDgxYTJjM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz9GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzcrj4VJpf4WGi6WcoIB7fr5vwSPTZER1ZuW7ByyUvFAyw64TzJuUP0 pjSf8XdpJd+rdp2dNj5Rr31ylumEuDoD4dGs1HXGw3w95ZaX8WP/LoG5tkxfeGX7 MAebfQDYb6bkJ7RzJvBYKHp6ONjN/ckggbo9Z4/5tQ2kkV7D3XdVVeGO55WdoJC2 Ew/B0l1RyzSIqIO1zwZHA04Y1UE/r+6GHMR9KXSlRcLXncjWfGipl3Lm/k6Gm0jI OVVp+4O5dh1kbUUXFw5qOUOdexRTBPBSJmBptejB0/d7PAx2bBIA8f6tVimeLX5z TD09uzcAzveZS3cRIslT48m3XJqsEHk= -----END CERTIFICATE-----Generated at Mon May 5 02:39:44 2025 by rpki-client