$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca599066-649c-3a33-9a21-52a70acad756.roa File: ca599066-649c-3a33-9a21-52a70acad756.roa (raw, json) Hash identifier: IgWJ6NdwuKEp5ZZda7urBVzHC40dkdnLPF4MgbRozek= Subject key identifier: 2E:AE:AD:B7:0A:4B:09:27:4B:0A:BB:2F:9C:46:5E:48:56:D3:12:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A4E256715803109E0A700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca599066-649c-3a33-9a21-52a70acad756.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.43.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4e:25:67:15:80:31:09:e0:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b18bedca-cafc-4e58-accf-21d1309121c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:39:43:5a:01:59:f3:b9:72:51:c6:a7:a4: 52:45:7e:27:fc:88:87:05:84:54:71:f9:6e:d3:d3: 6a:28:59:d3:da:02:37:a2:fc:33:18:07:81:bc:b6: 9e:0a:08:ee:c8:ee:a9:7b:1f:cb:12:ea:7d:4b:ad: d4:4a:c0:52:dd:55:2b:7a:81:36:f1:58:52:d6:ae: 94:f4:f4:fa:b6:8e:70:fa:5a:f7:24:a0:52:03:06: 1a:f6:33:de:6e:4b:22:c9:33:01:de:19:cd:94:20: 02:1b:a4:72:e7:15:e5:ea:a3:42:d4:31:e3:32:98: 74:73:86:9d:6f:e4:54:2f:4a:cc:a3:7b:03:3b:d8: ef:29:bc:60:40:27:e7:a8:7b:b3:e0:cf:05:ba:e3: 7a:33:f9:04:80:8a:42:ea:ae:6e:46:87:72:92:dc: 9f:ec:cd:36:59:65:d6:37:e7:2a:b8:b7:09:81:1b: c5:01:61:6e:f9:2f:b9:7b:2c:b4:12:7c:ec:d1:84: 59:e9:16:e3:fe:45:e2:c8:d9:14:22:ef:08:d8:79: 0b:9d:ab:d9:e6:7b:c6:87:5e:b4:dc:2a:59:04:e0: 46:5c:d4:e2:96:7e:24:9b:a5:fd:ae:e7:ee:c0:02: 2e:1d:50:98:95:c8:ce:d7:87:0a:f9:14:db:04:18: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AE:AD:B7:0A:4B:09:27:4B:0A:BB:2F:9C:46:5E:48:56:D3:12:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca599066-649c-3a33-9a21-52a70acad756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1c:a2:44:fd:e2:10:fe:9e:2d:c6:e8:20:c5:93:65:b6:5e: ed:dc:c5:71:75:66:cc:7d:83:41:07:73:b3:66:ad:b7:c4:83: 65:16:74:e8:84:da:10:1a:73:bc:76:a4:b5:1f:61:4b:6b:e6: 8d:c0:bb:ec:15:52:c4:9d:f9:a5:d3:fa:9e:98:59:bb:5e:48: 8e:51:af:b8:66:52:a5:21:92:2b:20:e6:d1:13:d9:30:ca:a7: 74:20:dd:75:d5:fe:bf:4d:cc:e0:ba:5f:d8:1f:f8:2e:f5:2a: 09:57:24:a3:67:81:f3:30:c4:e8:04:cf:8a:b7:5c:9f:d6:aa: 4e:bf:a8:21:c2:99:af:16:c8:c4:d6:b2:2b:a6:aa:31:ef:fc: ab:88:7f:85:2e:01:2c:86:2c:f3:78:0f:58:16:42:30:35:51: 87:a3:79:a0:3b:94:58:98:b8:f9:e7:73:59:3a:60:a3:56:81: 51:79:10:c0:18:45:c1:3b:5f:dd:fb:9f:bb:68:5b:a0:51:29: 8c:58:dd:72:00:12:3e:a0:2f:50:74:ca:50:07:1b:7c:fd:12: 2e:9b:2f:33:d9:80:1c:3c:36:69:f8:28:73:1d:33:2a:d8:ca: 72:27:5c:9e:8b:40:39:e7:c0:28:e1:a5:9e:c0:bc:92:df:19: 14:a7:e7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSk4lZxWAMQngpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjE4YmVkY2EtY2FmYy00ZTU4LWFjY2YtMjFkMTMwOTEyMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkg5Q1oBWfO5clHGp6RSRX4n/IiHBYRUcflu 09NqKFnT2gI3ovwzGAeBvLaeCgjuyO6pex/LEup9S63USsBS3VUreoE28VhS1q6U 9PT6to5w+lr3JKBSAwYa9jPebksiyTMB3hnNlCACG6Ry5xXl6qNC1DHjMph0c4ad b+RUL0rMo3sDO9jvKbxgQCfnqHuz4M8FuuN6M/kEgIpC6q5uRodyktyf7M02WWXW N+cquLcJgRvFAWFu+S+5eyy0Enzs0YRZ6Rbj/kXiyNkUIu8I2HkLnavZ5nvGh160 3CpZBOBGXNTiln4km6X9rufuwAIuHVCYlcjO14cK+RTbBBigIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6urbcKSwknSwq7L5xGXkhW0xKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E1OTkwNjYtNjQ5Yy0z YTMzLTlhMjEtNTJhNzBhY2FkNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFysQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGocokT94hD+ni3G6CDFk2W2Xu3cxXF1Zsx9g0EHc7NmrbfEg2UWdOiE 2hAac7x2pLUfYUtr5o3Au+wVUsSd+aXT+p6YWbteSI5Rr7hmUqUhkisg5tET2TDK p3Qg3XXV/r9NzOC6X9gf+C71KglXJKNngfMwxOgEz4q3XJ/Wqk6/qCHCma8WyMTW siumqjHv/KuIf4UuASyGLPN4D1gWQjA1UYejeaA7lFiYuPnnc1k6YKNWgVF5EMAY RcE7X937n7toW6BRKYxY3XIAEj6gL1B0ylAHG3z9Ei6bLzPZgBw8Nmn4KHMdMyrY ynInXJ6LQDnnwCjhpZ7AvJLfGRSn5zo= -----END CERTIFICATE-----Generated at Wed May 7 21:35:02 2025 by rpki-client