$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa File: aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa (raw, json) Hash identifier: ulKX7wyZAvSAYxuB99Hezonsnkm409kuaHQUwubjF58= Subject key identifier: BA:04:62:44:DD:1F:7A:3E:C4:F7:05:E2:FF:E6:C4:FB:6B:53:7B:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C0933D7CFEEBFC7256D46F8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 35994 IP address blocks: 23.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:33:d7:cf:ee:bf:c7:25:6d:46:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=c0592562-a3b4-47a1-9aab-15753e8d4abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:f9:60:d7:d8:42:4b:64:63:07:20:13:83: 43:31:b9:80:2f:30:a7:23:38:d2:6e:fb:24:15:38: 70:9a:b2:8b:98:a8:cd:b3:d2:1a:96:5c:db:0b:67: 30:df:62:94:31:da:88:59:8c:78:9f:4c:1e:a2:d0: c8:a5:7d:3c:ab:da:a3:92:b8:cf:65:a4:bf:83:9a: fd:67:b3:04:51:7a:eb:78:ea:ff:50:5a:18:a3:ed: 35:04:5b:05:16:29:ab:66:ed:41:3f:9c:c1:20:55: 03:a6:de:10:f2:ec:a0:78:da:a1:25:68:6e:0d:21: 5f:50:5b:fd:33:f8:28:96:41:35:12:8a:84:88:a0: a7:5f:1f:2d:b3:71:a8:86:5a:8f:fc:4a:9c:71:61: 70:e0:d5:56:bd:99:13:4f:ad:f0:76:98:66:6d:9b: 84:d4:0e:11:b2:4e:54:84:61:6d:74:79:dd:19:e7: 69:89:af:50:24:0c:56:29:f5:0a:35:5d:e2:bc:c5: b3:6f:5b:1f:32:dc:0f:16:75:bb:d8:92:52:52:1e: f9:6d:2c:7b:4d:95:c2:e5:14:94:3a:66:78:c3:93: ec:41:ec:f8:a1:3f:7b:d9:8c:54:96:94:6b:96:b6: d7:c3:86:4f:f3:eb:e3:e5:d1:09:4a:19:ac:f7:7f: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:04:62:44:DD:1F:7A:3E:C4:F7:05:E2:FF:E6:C4:FB:6B:53:7B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:81:33:da:9f:6e:92:1b:29:8a:fa:ac:55:84:21:d9:6b:1a: 8b:3d:19:b4:19:2b:d5:eb:2f:23:0b:4b:ba:ca:99:f0:aa:2a: aa:70:9c:2d:c7:d4:3d:00:bf:db:83:83:6d:52:4b:d8:0d:53: b3:69:00:77:b5:18:60:db:39:d8:2d:da:ec:38:fa:ff:61:db: 94:83:e5:eb:51:86:59:cc:c3:95:b6:ee:ce:43:ef:3f:77:77: 27:1d:09:50:d1:32:45:8b:d4:aa:58:92:f1:46:6a:7b:f3:5f: 12:34:97:89:ed:c8:4a:f5:e5:21:85:2f:df:e2:66:5a:7c:f4: af:2e:d4:d8:73:5a:39:36:26:c7:9f:70:19:a2:80:dd:dc:f4: 91:d3:7d:3f:75:26:a5:31:72:3f:f3:f6:86:1f:a9:a8:b3:1b: 17:50:ff:db:b4:2f:cc:71:b3:32:89:29:6f:3d:f3:04:d2:f1: 93:fe:d6:7a:ee:b3:7f:ed:fe:99:57:42:53:18:c0:ff:d1:37: 03:83:e8:1a:f9:5e:df:6c:47:ff:d7:f8:2f:ad:68:a5:00:4f: a0:5c:b6:f5:c6:8f:12:61:ff:42:9d:26:8b:00:2f:08:a3:5f: 15:cb:39:b0:cf:ba:ed:0b:9e:5e:5e:c9:9d:d1:1f:b4:04:9f: 18:e1:6e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTPXz+6/xyVtRvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YzA1OTI1NjItYTNiNC00N2ExLTlhYWItMTU3NTNlOGQ0YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhH5YNfYQktkYwcgE4NDMbmALzCnIzjSbvsk FThwmrKLmKjNs9IallzbC2cw32KUMdqIWYx4n0weotDIpX08q9qjkrjPZaS/g5r9 Z7MEUXrreOr/UFoYo+01BFsFFimrZu1BP5zBIFUDpt4Q8uygeNqhJWhuDSFfUFv9 M/golkE1EoqEiKCnXx8ts3GohlqP/EqccWFw4NVWvZkTT63wdphmbZuE1A4Rsk5U hGFtdHndGedpia9QJAxWKfUKNV3ivMWzb1sfMtwPFnW72JJSUh75bSx7TZXC5RSU OmZ4w5PsQez4oT972YxUlpRrlrbXw4ZP8+vj5dEJShms938+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoEYkTdH3o+xPcF4v/mxPtrU3vDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFjODEyZmUtMzY1NS0z OWJkLTg2ZmYtMmM4NWExY2I5Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyBM9qfbpIbKYr6rFWEIdlrGos9GbQZK9XrLyMLS7rKmfCqKqpwnC3H 1D0Av9uDg21SS9gNU7NpAHe1GGDbOdgt2uw4+v9h25SD5etRhlnMw5W27s5D7z93 dycdCVDRMkWL1KpYkvFGanvzXxI0l4ntyEr15SGFL9/iZlp89K8u1NhzWjk2Jsef cBmigN3c9JHTfT91JqUxcj/z9oYfqaizGxdQ/9u0L8xxszKJKW898wTS8ZP+1nru s3/t/plXQlMYwP/RNwOD6Br5Xt9sR//X+C+taKUAT6BctvXGjxJh/0KdJosALwij XxXLObDPuu0Lnl5eyZ3RH7QEnxjhbnY= -----END CERTIFICATE-----Generated at Wed May 7 16:38:11 2025 by rpki-client