$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051a3e28-2cc4-362b-bccd-c164deaf53a8.roa File: 051a3e28-2cc4-362b-bccd-c164deaf53a8.roa (raw, json) Hash identifier: s4ntCqOgI4D3FVLli6t8ah5bEAAiSpx10zhM1NoY+tU= Subject key identifier: 2C:87:B7:3A:EA:42:8D:2A:75:87:B6:79:B4:15:77:19:0F:49:1A:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC958BE3B9559D904A7ECC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051a3e28-2cc4-362b-bccd-c164deaf53a8.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 20940 IP address blocks: 23.32.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:58:be:3b:95:59:d9:04:a7:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=b7f29745-768a-4727-9709-de1d85461adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:1f:f1:94:96:c9:23:4a:d6:79:ec:52:d2: 27:8a:8a:6b:9b:c7:37:a6:d1:94:77:ed:0d:36:34: 43:ea:e5:1d:8f:4e:16:6e:f2:b5:68:f1:b9:de:04: 13:fa:b3:bb:63:49:95:24:00:ae:f9:0d:a2:f8:c4: e5:90:b5:b4:69:2f:99:de:ed:19:c6:96:d1:59:9a: 06:18:39:d3:8f:83:bc:bc:a1:85:78:8c:de:d5:30: e2:b9:9e:01:bf:57:5b:6e:b7:de:0e:8d:12:84:14: e4:be:d0:29:6a:b9:30:62:b6:70:2e:ce:f1:95:1c: d0:b0:3f:1f:06:21:4b:2f:c1:4d:5f:a4:d7:4e:f8: 44:76:f4:cd:51:13:cc:de:d5:4d:25:eb:e1:00:14: 54:be:53:ed:c6:a1:1a:08:bc:06:33:dc:0a:60:19: 99:1c:82:9d:f2:4d:e2:f6:32:c2:94:2d:92:4d:73: 61:bf:b1:c7:32:76:d5:62:37:a0:19:32:aa:ab:fa: 0d:6e:f1:90:d9:33:68:9c:74:46:1d:24:cc:c1:f4: 68:aa:3f:6c:eb:21:80:1c:47:78:5f:3f:ba:fe:3e: 6c:7b:89:ae:f7:51:4e:8d:f9:eb:06:b4:ff:c9:8c: f4:d2:81:0d:c2:f5:d3:ca:71:83:b6:c6:5d:4a:9c: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:B7:3A:EA:42:8D:2A:75:87:B6:79:B4:15:77:19:0F:49:1A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051a3e28-2cc4-362b-bccd-c164deaf53a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fd:73:5e:76:bc:47:75:76:01:66:5f:de:78:c7:96:cc:56: e0:fc:0c:46:85:17:7f:70:00:dc:0a:5e:7b:fe:92:64:26:20: 84:e7:5f:73:72:99:2b:74:9b:55:89:90:12:28:2f:3f:2c:23: 29:ec:99:12:d5:8c:ca:f5:f7:39:6b:40:b4:34:ab:27:72:1a: 85:6a:c9:a8:be:37:51:ac:ba:db:00:bf:42:57:b1:9c:89:c8: 53:9c:64:5e:08:ff:45:f4:6c:ed:7e:97:05:63:4b:5e:94:06: d2:40:4d:12:c9:89:c7:9a:b9:cc:b6:ae:46:91:fe:49:d1:ff: 50:c8:74:33:da:be:62:7e:1d:b4:d2:72:0b:09:97:22:c1:11: 0b:1f:f5:8c:27:76:de:62:61:b2:7c:42:38:ec:f9:d2:6f:b8: 38:f4:cb:06:b0:69:74:58:24:47:3a:da:04:69:1c:df:74:f9: 6d:d0:c2:1b:49:98:99:fc:dc:2a:58:3d:96:9b:53:f2:18:cf: e5:62:ee:d6:3e:86:2b:ce:cc:65:0e:09:c0:72:6a:58:6f:5b: e6:1c:b1:fe:33:2b:80:80:6c:32:a9:62:bc:0b:ed:9d:42:64: 99:fd:f0:02:2d:82:a9:80:e1:20:4f:7d:da:66:6a:c7:7d:88: f9:ea:c5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVi+O5VZ2QSn7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjdmMjk3NDUtNzY4YS00NzI3LTk3MDktZGUxZDg1NDYxYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusIf8ZSWySNK1nnsUtInioprm8c3ptGUd+0N NjRD6uUdj04WbvK1aPG53gQT+rO7Y0mVJACu+Q2i+MTlkLW0aS+Z3u0ZxpbRWZoG GDnTj4O8vKGFeIze1TDiuZ4Bv1dbbrfeDo0ShBTkvtAparkwYrZwLs7xlRzQsD8f BiFLL8FNX6TXTvhEdvTNURPM3tVNJevhABRUvlPtxqEaCLwGM9wKYBmZHIKd8k3i 9jLClC2STXNhv7HHMnbVYjegGTKqq/oNbvGQ2TNonHRGHSTMwfRoqj9s6yGAHEd4 Xz+6/j5se4mu91FOjfnrBrT/yYz00oENwvXTynGDtsZdSpyBnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyHtzrqQo0qdYe2ebQVdxkPSRo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUxYTNlMjgtMmNjNC0z NjJiLWJjY2QtYzE2NGRlYWY1M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr9c152vEd1dgFmX954x5bMVuD8DEaFF39wANwKXnv+kmQmIITnX3Ny mSt0m1WJkBIoLz8sIynsmRLVjMr19zlrQLQ0qydyGoVqyai+N1GsutsAv0JXsZyJ yFOcZF4I/0X0bO1+lwVjS16UBtJATRLJiceaucy2rkaR/knR/1DIdDPavmJ+HbTS cgsJlyLBEQsf9Ywndt5iYbJ8Qjjs+dJvuDj0ywawaXRYJEc62gRpHN90+W3QwhtJ mJn83CpYPZabU/IYz+Vi7tY+hivOzGUOCcByalhvW+Ycsf4zK4CAbDKpYrwL7Z1C ZJn98AItgqmA4SBPfdpmasd9iPnqxcA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:08 2025 by rpki-client