$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa File: 0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa (raw, json) Hash identifier: vaWXwHljmlkKbMNuleqRCAMhPaWBOkBVbLrsrr5d5iM= Subject key identifier: 92:10:A8:2C:B9:2F:06:B1:9F:17:D3:BF:66:50:B8:EC:88:D4:45:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC1EFF11CB2559CA513240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 32787 IP address blocks: 23.33.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1e:ff:11:cb:25:59:ca:51:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=600769ee-3dde-4db2-89aa-d5038925f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:4f:9d:91:c4:d3:8e:32:ed:5d:ad:16:e9: 37:05:9f:3d:f2:b8:05:8f:2c:cc:97:f5:b8:ad:23: 55:03:40:70:a1:99:4d:0b:12:1d:ba:ce:76:16:e1: 7e:2b:06:e4:7b:b1:b3:f7:89:11:8f:10:d4:ed:1a: 95:18:d3:31:b6:07:6b:b3:34:8f:7e:4f:e9:e6:6f: ac:8b:96:f8:19:80:9f:ac:e6:bf:8e:2d:bc:f2:06: e9:5a:17:6c:58:66:41:9e:2a:61:da:ed:07:62:1c: 31:50:a0:8d:5d:88:25:73:45:9a:44:ca:db:96:a7: de:2e:9c:f2:e9:04:e7:08:e0:d6:2d:0d:43:59:c7: b1:d4:82:fe:b2:ed:f4:fa:21:91:a5:03:8d:3d:70: 84:9f:b6:43:86:e9:63:c0:aa:e9:f0:83:ad:96:20: 67:8d:7d:e6:4b:14:14:2c:8c:85:53:5c:f6:bd:1b: f6:4a:10:6a:f6:26:c7:3a:e4:e2:ad:4f:c1:7c:88: 1c:bb:65:b3:ce:63:75:0d:aa:74:db:94:ed:ad:27: 75:80:c1:54:ec:c4:45:4a:42:4b:c3:5b:75:43:d9: f8:05:fb:36:33:17:c5:36:d5:fa:9b:57:f0:2d:7b: 03:fa:b7:8f:a0:07:f4:2a:1e:73:00:50:04:d3:a5: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:10:A8:2C:B9:2F:06:B1:9F:17:D3:BF:66:50:B8:EC:88:D4:45:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d4:7a:bc:8e:d2:9c:0a:c4:e8:71:1b:28:7e:10:d4:7d:0b: 04:3c:68:c0:b0:eb:98:7e:0c:5d:b3:ac:86:5f:b3:a6:ba:9c: 49:6d:21:f2:59:7d:e3:6f:e0:4f:2e:43:a7:c8:c1:3f:6d:0e: d3:1e:ed:61:e8:1b:8b:36:d4:9b:6d:cc:15:42:74:ff:11:d9: 3c:39:28:ca:ca:de:2c:5f:60:69:07:59:01:0a:2a:3d:cb:12: fb:a9:0a:45:39:6c:9d:97:e6:8e:95:4b:2c:f4:6a:fb:0e:ba: ee:18:81:8d:c2:86:d0:6b:08:3b:32:1b:e1:34:1e:91:3d:fb: d6:bd:5c:72:51:9f:fc:97:99:cc:be:16:bf:c3:80:34:bf:99: 58:80:35:90:43:bc:a0:8b:ec:9e:85:1f:87:11:8a:0e:90:42: 1f:39:28:7c:96:54:06:f8:c1:13:4d:a7:dc:33:6a:10:e8:ed: b3:0e:d7:e3:da:61:6f:60:2c:4c:24:6a:13:96:24:56:af:35: 9f:d6:13:9b:9b:9f:49:d9:f0:2d:c3:f4:df:d4:8f:75:1f:ae: bc:02:f8:ff:c3:18:83:60:b1:2d:af:27:c4:6c:b0:61:f7:ed: 49:5a:96:6d:60:fb:e1:da:18:ed:f1:ff:87:55:f9:64:f8:ae: 32:3b:a5:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB7/EcslWcpRMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NjAwNzY5ZWUtM2RkZS00ZGIyLTg5YWEtZDUwMzg5MjVmMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYtPnZHE044y7V2tFuk3BZ898rgFjyzMl/W4 rSNVA0BwoZlNCxIdus52FuF+Kwbke7Gz94kRjxDU7RqVGNMxtgdrszSPfk/p5m+s i5b4GYCfrOa/ji288gbpWhdsWGZBniph2u0HYhwxUKCNXYglc0WaRMrblqfeLpzy 6QTnCODWLQ1DWcex1IL+su30+iGRpQONPXCEn7ZDhuljwKrp8IOtliBnjX3mSxQU LIyFU1z2vRv2ShBq9ibHOuTirU/BfIgcu2WzzmN1Dap025TtrSd1gMFU7MRFSkJL w1t1Q9n4Bfs2MxfFNtX6m1fwLXsD+rePoAf0Kh5zAFAE06WOeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIQqCy5LwaxnxfTv2ZQuOyI1EUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE2NDAwMWUtZmZjOC0z NzM2LTg1ZWEtZmVkNGUzYTczMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjUeryO0pwKxOhxGyh+ENR9CwQ8aMCw65h+DF2zrIZfs6a6nEltIfJZ feNv4E8uQ6fIwT9tDtMe7WHoG4s21JttzBVCdP8R2Tw5KMrK3ixfYGkHWQEKKj3L EvupCkU5bJ2X5o6VSyz0avsOuu4YgY3ChtBrCDsyG+E0HpE9+9a9XHJRn/yXmcy+ Fr/DgDS/mViANZBDvKCL7J6FH4cRig6QQh85KHyWVAb4wRNNp9wzahDo7bMO1+Pa YW9gLEwkahOWJFavNZ/WE5ubn0nZ8C3D9N/Uj3UfrrwC+P/DGINgsS2vJ8RssGH3 7Ulalm1g++HaGO3x/4dV+WT4rjI7pSw= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:12 2025 by rpki-client