$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa File: 0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa (raw, json) Hash identifier: ug0AZIUSEqI55M6YpxGVqk4KnMVJsrWNxDTkOkA3ZU4= Subject key identifier: 4A:FA:53:FF:A2:F6:06:EA:CE:33:FE:76:39:BA:28:A2:99:FF:D3:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBB9356CFE88D5BABC380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bb:93:56:cf:e8:8d:5b:ab:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=d1312dca-0f07-4b5d-84b1-29f2c8b72e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:a7:b8:ff:06:83:a4:a0:1a:ef:e7:76:de: f9:8b:f7:b6:85:b7:88:09:27:39:b6:c2:9e:9f:78: c8:cf:75:c4:34:51:93:8e:04:5b:e8:5a:ed:9a:e3: e5:75:8e:e3:98:2a:a6:04:f5:2f:80:96:3d:91:e7: 32:30:5a:3f:1c:28:17:56:45:e0:0d:fd:31:cd:00: c7:46:bc:76:06:18:44:9e:d0:6a:f8:38:c3:11:c5: 33:46:ba:1e:cd:e4:32:32:0c:78:2c:02:a8:1b:8f: 9c:c0:b7:dc:6d:17:74:45:56:a3:ba:10:66:48:86: 7c:33:66:04:b8:7a:cf:e4:9b:74:0c:ac:2a:8b:20: 5f:e6:77:eb:ab:b1:b8:07:f5:cf:3d:e4:18:fd:f4: 96:19:71:39:c1:b4:25:95:6e:d6:ec:78:91:9b:86: c0:cc:ec:3d:b4:e0:67:52:26:66:ec:bb:e7:4d:68: de:f3:98:95:58:8e:53:39:09:bf:14:3f:3d:bb:20: 3d:66:9a:70:46:dd:af:5d:75:fd:9e:ad:fc:c9:a5: 21:34:92:48:dc:d4:6a:d7:e3:bc:d9:a9:cc:bd:e6: f4:4e:f1:ab:1d:6c:11:e2:56:ed:ee:dd:e3:fc:43: 7c:63:3a:14:da:94:4c:cd:a4:c1:34:f1:ba:81:91: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FA:53:FF:A2:F6:06:EA:CE:33:FE:76:39:BA:28:A2:99:FF:D3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:35:70:ea:93:97:29:a9:c3:ea:f4:6d:e0:35:c0:6d:37:2e: de:9d:81:61:05:97:26:09:42:0b:d4:42:db:f0:3d:0f:c9:68: 03:32:9f:f0:2d:e5:3a:5e:75:62:0a:64:ce:ba:2b:5a:d5:1f: c2:d7:67:a5:9b:80:74:29:23:bb:17:d6:dc:6a:17:0b:ee:9a: 4c:8d:7f:0f:cd:77:11:1f:05:d2:91:29:4e:78:08:3b:0b:fd: cd:62:b2:ab:6d:9f:7f:aa:2f:ea:e9:be:e3:c8:fa:a9:d6:5f: 6e:83:c6:d4:d4:ed:ed:43:99:2e:c3:9b:06:c6:7f:0e:ef:e7: e3:bd:99:08:15:7f:cb:12:1f:a1:a2:cb:88:d9:37:98:7f:f2: 05:c4:ea:7b:56:ff:f8:7d:2c:e0:6c:45:fa:08:49:55:68:3a: d7:8b:71:ef:83:10:f1:4b:e2:c6:7c:4b:7d:43:28:cf:b7:7d: c3:84:46:e5:6f:15:8b:f6:62:39:1c:98:61:35:a1:1e:7f:06: b1:0d:cf:52:ed:71:87:8c:87:88:b9:77:ce:e2:d9:fa:aa:ff: 1f:86:db:9d:db:af:47:1d:6f:25:46:45:22:c0:8e:fd:2c:d5: 35:a7:5e:bf:6c:97:bc:73:30:a7:c3:58:ce:bd:49:fb:fb:3f: 14:4b:be:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLruTVs/ojVurw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDEzMTJkY2EtMGYwNy00YjVkLTg0YjEtMjlmMmM4YjcyZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sKnuP8Gg6SgGu/ndt75i/e2hbeICSc5tsKe n3jIz3XENFGTjgRb6FrtmuPldY7jmCqmBPUvgJY9kecyMFo/HCgXVkXgDf0xzQDH Rrx2BhhEntBq+DjDEcUzRroezeQyMgx4LAKoG4+cwLfcbRd0RVajuhBmSIZ8M2YE uHrP5Jt0DKwqiyBf5nfrq7G4B/XPPeQY/fSWGXE5wbQllW7W7HiRm4bAzOw9tOBn UiZm7LvnTWje85iVWI5TOQm/FD89uyA9ZppwRt2vXXX9nq38yaUhNJJI3NRq1+O8 2anMveb0TvGrHWwR4lbt7t3j/EN8YzoU2pRMzaTBNPG6gZGOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr6U/+i9gbqzjP+djm6KKKZ/9NvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGEwOTI0MGItYWRiMS0z N2JhLTljZDUtY2RjMWQzZDJhNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg1cOqTlympw+r0beA1wG03Lt6dgWEFlyYJQgvUQtvwPQ/JaAMyn/At 5TpedWIKZM66K1rVH8LXZ6WbgHQpI7sX1txqFwvumkyNfw/NdxEfBdKRKU54CDsL /c1isqttn3+qL+rpvuPI+qnWX26DxtTU7e1DmS7DmwbGfw7v5+O9mQgVf8sSH6Gi y4jZN5h/8gXE6ntW//h9LOBsRfoISVVoOteLce+DEPFL4sZ8S31DKM+3fcOERuVv FYv2YjkcmGE1oR5/BrENz1LtcYeMh4i5d87i2fqq/x+G253br0cdbyVGRSLAjv0s 1TWnXr9sl7xzMKfDWM69Sfv7PxRLvoE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:24 2025 by rpki-client