$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa File: a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa (raw, json) Hash identifier: ZIJHvlgqulC01XNHASiZTQ5Zpfv8YAof+Jim5+6Y2H8= Subject key identifier: 8B:62:F6:58:16:5C:44:60:CD:00:27:B6:4A:7E:0D:93:05:93:E7:7B Certificate issuer: /CN=cf35609e-0e1f-484a-af8f-815006d97f11 Certificate serial: 010D0C9F43285848F92694B0CD170117E2D02C80 Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14694 IP address blocks: 23.136.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:94:b0:cd:17:01:17:e2:d0:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=7a36da89-7f96-4506-9c3e-dc266a9284f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:83:aa:ff:b5:df:d0:59:54:c7:a0:17:27:05: ab:f6:88:70:31:1e:1a:f4:ef:08:85:f2:58:ae:28: 03:e6:00:81:54:0c:da:1f:45:ac:a1:21:6a:0a:01: 53:3e:41:e9:37:43:02:bf:5c:f9:6e:41:1d:e3:63: 99:50:b5:96:e3:15:72:ac:d6:dd:58:4d:98:68:92: 08:a2:41:11:3f:fa:f4:bc:5f:cb:15:01:8d:6b:74: ba:01:11:f5:7c:15:17:9b:aa:4a:d8:59:99:30:8d: 76:d7:43:e8:e9:75:6e:5a:92:47:0d:5b:58:de:b3: 09:48:a8:b3:d8:5a:46:9d:e2:0b:ba:26:e6:c3:44: 6c:b2:56:f0:b9:ed:7b:80:f6:05:f2:7b:cf:32:34: 5c:d8:13:1e:9d:88:42:b7:39:64:4d:fc:a8:0f:b2: 4f:1d:f8:8c:21:e3:ee:04:62:b0:94:be:00:a8:16: 46:7a:65:26:40:57:5b:2a:b0:64:47:aa:c7:bc:d2: 43:1e:45:7d:36:e1:03:fd:3e:5b:d9:27:f1:fa:45: 1e:f2:b6:27:cc:a6:d4:55:45:24:a4:16:33:17:c2: ea:fe:4e:4a:4e:39:9c:55:86:b1:3f:2b:47:e0:19: 45:7c:5c:d3:85:13:c7:d7:dc:75:3c:90:49:09:a4: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:62:F6:58:16:5C:44:60:CD:00:27:B6:4A:7E:0D:93:05:93:E7:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl X509v3 Authority Key Identifier: keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer sbgp-ipAddrBlock: critical IPv4: 23.136.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:67:67:98:d3:54:3b:63:b1:de:18:93:5c:43:f1:5d:72:53: 15:8d:cd:74:aa:ee:89:5e:25:6e:75:08:7b:ba:63:18:9c:dd: 6d:aa:1d:ba:f7:31:0b:9a:de:12:2f:c1:ea:74:52:c0:b5:50: 72:2a:b2:d7:75:1f:c2:03:3f:0a:2f:4b:73:9c:18:94:45:66: cd:8f:d5:bd:4f:c8:b0:e7:20:3f:52:ae:a9:3d:fe:a2:af:34: b1:17:52:fe:31:d0:8c:90:ba:19:89:62:65:ac:11:e7:f0:ba: aa:26:1b:d3:51:44:85:86:fd:1b:ff:c4:51:09:65:d3:e2:71: 26:8a:66:82:86:f3:fb:a3:b5:0a:a0:bc:14:19:5b:6b:15:7a: 55:80:91:47:09:53:1f:0b:aa:14:e7:2c:cf:99:64:01:8f:d1: 2c:93:33:e0:94:f3:b3:ae:e4:60:24:7c:b2:36:5e:80:ab:7b: 4c:ef:0c:16:11:af:aa:9b:67:ae:1e:93:36:e6:ce:4d:b4:e2: 18:a0:87:3c:67:89:66:c8:82:59:d3:d3:6f:7e:2c:a0:ce:70: 87:53:49:d2:ca:79:11:84:d6:fe:cb:91:ae:83:ca:59:2a:78: 81:d5:07:89:55:b1:f0:dd:33:eb:20:41:48:ee:28:5c:04:0a: 73:64:a7:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpSwzRcBF+LQLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzNTYwOWUtMGUxZi00ODRhLWFmOGYtODE1MDA2ZDk3 ZjExMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk N2EzNmRhODktN2Y5Ni00NTA2LTljM2UtZGMyNjZhOTI4NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IOq/7Xf0FlUx6AXJwWr9ohwMR4a9O8IhfJY rigD5gCBVAzaH0WsoSFqCgFTPkHpN0MCv1z5bkEd42OZULWW4xVyrNbdWE2YaJII okERP/r0vF/LFQGNa3S6ARH1fBUXm6pK2FmZMI1210Po6XVuWpJHDVtY3rMJSKiz 2FpGneILuibmw0Rsslbwue17gPYF8nvPMjRc2BMenYhCtzlkTfyoD7JPHfiMIePu BGKwlL4AqBZGemUmQFdbKrBkR6rHvNJDHkV9NuED/T5b2Sfx+kUe8rYnzKbUVUUk pBYzF8Lq/k5KTjmcVYaxPytH4BlFfFzThRPH19x1PJBJCaTdAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIti9lgWXERgzQAntkp+DZMFk+d7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZjM1 NjA5ZS0wZTFmLTQ4NGEtYWY4Zi04MTUwMDZkOTdmMTEvYTlhYjAzYTUtZmNiMi0z NGY2LWI3OTItNTM5ZGU4ZjNiZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2YzNTYwOWUtMGUxZi00ODRhLWFm OGYtODE1MDA2ZDk3ZjExL2NmMzU2MDllLTBlMWYtNDg0YS1hZjhmLTgxNTAwNmQ5 N2YxMS5jcmwwHwYDVR0jBBgwFoAUzpoIfCEGnAg9xnm627IoNHEbL2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZjM1NjA5ZS0wZTFmLTQ4NGEtYWY4Zi04MTUw MDZkOTdmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtnZ5jTVDtjsd4Yk1xD8V1yUxWNzXSq7oleJW51CHu6Yxic3W2qHbr3 MQua3hIvwep0UsC1UHIqstd1H8IDPwovS3OcGJRFZs2P1b1PyLDnID9Srqk9/qKv NLEXUv4x0IyQuhmJYmWsEefwuqomG9NRRIWG/Rv/xFEJZdPicSaKZoKG8/ujtQqg vBQZW2sVelWAkUcJUx8LqhTnLM+ZZAGP0SyTM+CU87Ou5GAkfLI2XoCre0zvDBYR r6qbZ64ekzbmzk204highzxniWbIglnT029+LKDOcIdTSdLKeRGE1v7Lka6Dylkq eIHVB4lVsfDdM+sgQUjuKFwECnNkp2Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:33 2025 by rpki-client