$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa File: a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa (raw, json) Hash identifier: TqjCIBBGt9vs9qVOnVy9gtchV6cFU0LbrnAJV7tV02U= Subject key identifier: 9D:83:B5:D5:C2:24:33:4A:ED:E6:8D:D5:C1:59:C3:77:AA:B7:2E:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858485B6B04FD4462E3E408C4FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 3786 IP address blocks: 23.35.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Mar 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:04:fd:44:62:e3:e4:08:c4:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=2e1a49af-1553-4eb2-b02f-ba170afa4d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:c1:25:69:dc:06:0b:37:af:a3:a2:37:f8: b1:54:fd:e5:72:d8:a1:44:0a:75:fe:ee:75:ad:ff: 62:a0:91:b7:6c:d3:e5:37:d4:e5:a6:24:f4:cc:9c: ed:23:ec:ea:e5:56:e1:c2:aa:cf:e3:b0:87:45:49: e0:a3:36:29:36:53:cf:c5:ea:33:6a:0b:1a:e6:8a: a4:9b:96:89:37:0b:5e:1b:3c:da:fd:90:d8:8a:dc: e8:6e:25:2d:b9:9a:54:9f:a7:c0:bf:c5:4b:87:55: 0c:33:56:16:c5:d6:61:2a:fb:40:6d:63:49:66:9c: 89:c3:fe:3b:4e:36:2e:a7:a3:a8:ed:d0:2d:5b:fe: f3:41:46:c7:32:9b:44:94:86:b0:7f:39:5c:90:29: 7f:91:9f:bb:d7:0a:df:3a:d1:13:48:b9:7d:85:5c: 8f:d0:1c:46:73:96:5b:c2:9e:06:13:4d:07:09:fb: f6:a9:62:fb:82:9e:3d:0e:f5:f7:a3:af:18:57:8a: 8d:36:ac:9f:9c:62:6e:b5:4a:60:5d:aa:11:c8:c0: 75:a1:60:08:b1:d0:05:d2:a8:fd:3d:3d:3e:fc:6d: ef:aa:86:ad:e2:81:cb:44:37:ab:a7:6c:e2:b0:a5: cc:e0:3d:42:bd:7b:6f:54:53:28:0e:6c:6c:07:2f: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:B5:D5:C2:24:33:4A:ED:E6:8D:D5:C1:59:C3:77:AA:B7:2E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c7:9d:7c:86:f6:c4:0c:66:11:26:91:73:fb:40:86:97:1e: 77:bf:32:9a:da:83:88:40:76:93:08:26:31:0c:33:bf:2b:5e: 9a:09:0b:ee:06:7a:b1:eb:4d:85:4e:31:78:b2:70:df:7c:12: 72:8e:93:80:7a:21:6d:2b:3b:e1:b4:b3:44:df:ed:7e:08:78: 71:67:c8:d4:7c:45:13:31:db:d3:e1:0b:8e:9b:e4:d6:43:63: d7:90:05:8f:f4:bc:f6:e3:df:35:9a:60:2b:f5:17:80:f4:98: 3d:44:31:4f:c6:a4:43:07:c0:14:32:01:af:b3:e0:74:65:bb: e6:22:13:40:df:25:4e:a7:66:ff:0f:f4:26:96:a1:33:b8:d6: fa:b6:50:47:16:3b:47:98:e0:5b:da:77:e8:f9:36:99:a4:26: 2c:47:b7:07:90:02:68:00:1a:18:94:b6:b6:97:cb:d1:43:f3: 11:5c:5c:aa:49:d7:f3:f4:c3:c9:2a:0a:bf:30:10:39:a5:09: 1f:0a:11:6f:5a:4e:26:f8:2d:22:50:3b:e4:b8:87:1f:d6:71: b2:cb:fc:47:d0:9e:4a:8f:e7:8c:66:4b:c0:08:46:b5:a3:da: 62:a7:ab:8a:52:92:b1:f9:7b:a9:90:c3:3d:c4:4f:56:67:26: d0:b0:6f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawT9RGLj5AjE/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MmUxYTQ5YWYtMTU1My00ZWIyLWIwMmYtYmExNzBhZmE0ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O3BJWncBgs3r6OiN/ixVP3lctihRAp1/u51 rf9ioJG3bNPlN9TlpiT0zJztI+zq5VbhwqrP47CHRUngozYpNlPPxeozagsa5oqk m5aJNwteGzza/ZDYitzobiUtuZpUn6fAv8VLh1UMM1YWxdZhKvtAbWNJZpyJw/47 TjYup6Oo7dAtW/7zQUbHMptElIawfzlckCl/kZ+71wrfOtETSLl9hVyP0BxGc5Zb wp4GE00HCfv2qWL7gp49DvX3o68YV4qNNqyfnGJutUpgXaoRyMB1oWAIsdAF0qj9 PT0+/G3vqoat4oHLRDerp2zisKXM4D1CvXtvVFMoDmxsBy+jEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2DtdXCJDNK7eaN1cFZw3eqty4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBjZGYwODItYmFiZC0z NmFiLThlYTAtYWU0ZmYwZjdkMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrHnXyG9sQMZhEmkXP7QIaXHne/Mprag4hAdpMIJjEMM78rXpoJC+4G erHrTYVOMXiycN98EnKOk4B6IW0rO+G0s0Tf7X4IeHFnyNR8RRMx29PhC46b5NZD Y9eQBY/0vPbj3zWaYCv1F4D0mD1EMU/GpEMHwBQyAa+z4HRlu+YiE0DfJU6nZv8P 9CaWoTO41vq2UEcWO0eY4Fvad+j5NpmkJixHtweQAmgAGhiUtraXy9FD8xFcXKpJ 1/P0w8kqCr8wEDmlCR8KEW9aTib4LSJQO+S4hx/WcbLL/EfQnkqP54xmS8AIRrWj 2mKnq4pSkrH5e6mQwz3ET1ZnJtCwbxk= -----END CERTIFICATE-----Generated at Tue Mar 11 05:04:07 2025 by rpki-client