$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2187e65-079d-39e8-a5f7-8e8b8e0f8464.roa File: c2187e65-079d-39e8-a5f7-8e8b8e0f8464.roa (raw, json) Hash identifier: jc6EH5A0ifnEbKzmBRfh/UaZ129caYuGL9lQE6zqag8= Subject key identifier: C2:D1:87:1B:CA:93:40:6E:0D:13:48:EF:64:2B:29:FE:45:B7:06:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46A921EF523BDA875EEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2187e65-079d-39e8-a5f7-8e8b8e0f8464.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 35994 IP address blocks: 23.60.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6a:92:1e:f5:23:bd:a8:75:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=76e6aa1e-6d1c-4793-87a7-efd10b1b9e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:f2:ed:fa:75:bc:10:22:2f:17:ef:bd:bd: 26:88:3b:65:93:f8:8b:21:66:ab:ee:e9:1a:dd:bd: 5a:e3:a5:8c:cc:d4:e3:e5:6c:9f:5d:c6:24:c2:d8: 16:ab:62:aa:e4:1b:70:70:4f:34:12:66:79:51:bb: 1e:1b:27:f4:8e:0f:8f:c6:99:99:39:90:3f:1a:8b: e3:e0:ee:e2:05:b8:63:03:05:e6:29:a2:8a:83:28: 08:10:b9:09:16:4b:d5:54:c4:9f:57:98:e5:4c:c7: f9:a6:c5:12:ef:a5:10:bc:a8:7a:ac:e3:d8:4e:0d: b3:bb:ab:d6:30:5b:9a:98:38:96:9c:c4:6b:36:59: a3:9d:e2:bc:ee:93:58:5f:c4:45:6d:78:7e:a6:f2: bf:7a:b2:46:66:b4:c6:77:ff:45:c7:5c:44:a1:29: b7:2e:20:0f:fd:d0:e3:32:b8:9b:1b:4e:58:25:14: e1:ec:af:f7:48:a1:26:1f:a8:ba:f7:0f:8e:cf:a0: 20:4b:f1:ab:39:b6:b8:ab:83:fe:ab:a2:82:ce:36: ed:44:ae:65:42:cd:43:86:84:f4:30:99:d4:1b:8c: b8:42:51:1b:15:c8:65:02:31:74:e2:a6:24:97:3d: 6c:04:b8:5f:a2:39:22:57:30:14:8a:cb:58:76:8d: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D1:87:1B:CA:93:40:6E:0D:13:48:EF:64:2B:29:FE:45:B7:06:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2187e65-079d-39e8-a5f7-8e8b8e0f8464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6e:97:37:ca:c3:2d:a4:20:ac:21:13:bd:39:8e:36:f7:d8: de:58:ba:51:ea:c8:21:5b:a2:31:f2:b1:7b:79:fa:05:9e:b2: 88:a3:34:13:a3:6c:c8:7f:da:0d:08:43:e3:de:18:ee:81:c9: 2a:6a:76:1f:88:ca:b2:6f:e4:f6:fe:81:19:dd:f7:51:27:bd: 53:59:87:41:00:c3:4c:29:f7:53:75:92:fb:cf:96:f1:b3:65: c2:9e:ee:15:a5:9e:c6:a0:4e:62:e4:22:69:e9:d4:7f:c8:79: 0c:27:5f:75:e9:12:ab:0d:d5:5f:94:96:87:f6:c7:1d:3f:61: 88:9a:71:ec:a1:4f:c9:10:ff:4e:47:8c:61:e1:71:e0:41:d2: d6:f9:a7:44:d3:1c:87:3e:00:3f:d2:5a:f6:bb:9f:84:41:13: c9:f3:20:86:d8:f5:75:bf:7f:2e:01:34:96:80:8b:b5:f6:dd: 31:c7:72:7f:c4:81:1c:a2:34:d4:df:56:db:75:a1:2e:00:4d: 17:50:28:46:3d:e8:d2:ad:ff:8f:13:7c:88:d6:bb:e6:36:2e: 98:3e:17:35:3e:2b:3c:b0:08:ec:aa:74:4e:d8:24:01:4d:0b: d9:78:e8:b9:b9:28:d5:8f:41:e0:31:2a:d6:7f:a9:e0:72:26: 21:30:1a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GqSHvUjvah17sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NzZlNmFhMWUtNmQxYy00NzkzLTg3YTctZWZkMTBiMWI5ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxry7fp1vBAiLxfvvb0miDtlk/iLIWar7uka 3b1a46WMzNTj5WyfXcYkwtgWq2Kq5BtwcE80EmZ5UbseGyf0jg+PxpmZOZA/Govj 4O7iBbhjAwXmKaKKgygIELkJFkvVVMSfV5jlTMf5psUS76UQvKh6rOPYTg2zu6vW MFuamDiWnMRrNlmjneK87pNYX8RFbXh+pvK/erJGZrTGd/9Fx1xEoSm3LiAP/dDj MribG05YJRTh7K/3SKEmH6i69w+Oz6AgS/GrOba4q4P+q6KCzjbtRK5lQs1DhoT0 MJnUG4y4QlEbFchlAjF04qYklz1sBLhfojkiVzAUistYdo2VrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLRhxvKk0BuDRNI72QrKf5FtwatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIxODdlNjUtMDc5ZC0z OWU4LWE1ZjctOGU4YjhlMGY4NDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpulzfKwy2kIKwhE705jjb32N5YulHqyCFbojHysXt5+gWesoijNBOj bMh/2g0IQ+PeGO6BySpqdh+IyrJv5Pb+gRnd91EnvVNZh0EAw0wp91N1kvvPlvGz ZcKe7hWlnsagTmLkImnp1H/IeQwnX3XpEqsN1V+Ulof2xx0/YYiaceyhT8kQ/05H jGHhceBB0tb5p0TTHIc+AD/SWva7n4RBE8nzIIbY9XW/fy4BNJaAi7X23THHcn/E gRyiNNTfVtt1oS4ATRdQKEY96NKt/48TfIjWu+Y2Lpg+FzU+KzywCOyqdE7YJAFN C9l46Lm5KNWPQeAxKtZ/qeByJiEwGkg= -----END CERTIFICATE-----Generated at Tue May 6 12:57:34 2025 by rpki-client