$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f9f8500-81c6-3a36-b080-8842943c1fa3.roa File: 0f9f8500-81c6-3a36-b080-8842943c1fa3.roa (raw, json) Hash identifier: E7XKSi4Y9CfO35c3remch9yPSFXmt+6yhqSnRba/2rU= Subject key identifier: 42:D6:58:FF:FB:F9:CC:01:C5:7B:7A:D2:DD:54:D4:98:9C:DD:93:50 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA5645BB6C749E06E3945D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f9f8500-81c6-3a36-b080-8842943c1fa3.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.208.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:45:bb:6c:74:9e:06:e3:94:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=951119eb-5ae5-41bf-a4d5-88ed33ade97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:a6:8e:b0:d4:12:b6:81:13:b9:44:ea:f6: 04:1b:7e:fc:1d:28:87:c3:d3:79:8f:05:86:7b:a5: 50:91:96:15:d2:ae:29:89:b8:c0:a6:3f:b0:2e:2a: a1:27:6f:fe:6c:23:20:61:5d:8a:85:03:3c:4f:13: 75:b5:04:61:e5:fe:33:6c:41:b6:7a:f6:ff:ff:85: 33:90:ef:d5:db:35:08:c7:c4:89:a2:db:57:34:48: a3:b1:83:b7:75:2f:33:8f:e8:4a:03:7e:93:8e:81: 56:38:99:8b:47:c1:58:3c:ea:46:ba:54:be:4b:56: f2:cf:21:83:09:7f:90:97:b5:38:93:c0:b7:73:4d: 9e:fd:96:17:ab:e3:95:c0:5f:d8:57:46:40:24:40: a1:75:f0:71:7f:78:ff:07:f4:26:66:89:f6:f1:82: 98:27:28:99:6a:72:41:27:a1:8f:27:ed:56:e5:52: 1a:72:da:b7:7e:e2:b9:85:a6:96:dc:cd:6c:dd:3b: ff:14:1f:a6:fc:65:b4:da:b3:6a:aa:13:72:f5:73: e0:74:76:11:bb:97:63:8f:ae:71:e6:96:41:a8:99: 8f:0a:a0:bf:9f:11:09:54:ce:f1:3f:97:09:75:ef: ea:c0:ef:ba:57:de:ee:f4:00:9e:68:b2:ab:c6:6b: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D6:58:FF:FB:F9:CC:01:C5:7B:7A:D2:DD:54:D4:98:9C:DD:93:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f9f8500-81c6-3a36-b080-8842943c1fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e0:a7:80:a4:a6:69:e4:3f:f5:98:8e:27:e8:e2:4f:38:74: b0:c5:8d:16:cb:7d:f1:7a:56:94:ed:41:c2:97:e6:0c:d3:39: fb:e8:2e:c7:c3:b0:b6:e7:96:31:40:86:77:26:7c:08:85:47: 30:ac:2a:08:08:1d:53:e4:c7:b7:7a:38:e3:8a:1e:14:f3:4a: 5c:bb:e9:bf:b3:5a:6d:f1:7d:57:a9:4d:5d:f1:1e:2e:1a:f2: 08:b7:11:dd:9c:71:5c:6e:4f:64:29:50:1c:1f:21:9d:52:06: 76:73:4f:7a:12:d6:15:e6:83:c4:db:e6:89:45:41:b1:ba:91: e0:dd:67:ca:c9:3e:c9:2d:01:0b:12:fb:25:45:cf:9a:c8:ea: 51:1c:75:33:d9:39:a3:3a:5c:34:21:65:7d:9f:7e:b6:ce:e4: 12:88:b6:56:92:4f:98:24:ec:36:45:16:79:5d:75:88:3a:df: 22:84:67:d9:3d:45:7f:67:18:86:2f:24:39:30:d7:3e:9c:6c: a0:4c:dc:5b:cd:6d:59:5a:60:b0:7c:21:c3:ac:24:d0:2b:43: 5f:46:5b:fe:32:a9:27:95:13:9d:dd:60:bb:df:47:ae:9d:90: 6c:91:38:e2:f6:00:fb:27:71:f2:a8:01:49:82:1b:73:3e:8e: 85:d6:5c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkW7bHSeBuOUXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk OTUxMTE5ZWItNWFlNS00MWJmLWE0ZDUtODhlZDMzYWRlOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ymjrDUEraBE7lE6vYEG378HSiHw9N5jwWG e6VQkZYV0q4pibjApj+wLiqhJ2/+bCMgYV2KhQM8TxN1tQRh5f4zbEG2evb//4Uz kO/V2zUIx8SJottXNEijsYO3dS8zj+hKA36TjoFWOJmLR8FYPOpGulS+S1byzyGD CX+Ql7U4k8C3c02e/ZYXq+OVwF/YV0ZAJEChdfBxf3j/B/QmZon28YKYJyiZanJB J6GPJ+1W5VIactq3fuK5haaW3M1s3Tv/FB+m/GW02rNqqhNy9XPgdHYRu5djj65x 5pZBqJmPCqC/nxEJVM7xP5cJde/qwO+6V97u9ACeaLKrxmsErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELWWP/7+cwBxXt60t1U1Jic3ZNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY5Zjg1MDAtODFjNi0z YTM2LWIwODAtODg0Mjk0M2MxZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ClMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAngp4CkpmnkP/WYjifo4k84dLDFjRbLffF6VpTtQcKX5gzTOfvoLsfD sLbnljFAhncmfAiFRzCsKggIHVPkx7d6OOOKHhTzSly76b+zWm3xfVepTV3xHi4a 8gi3Ed2ccVxuT2QpUBwfIZ1SBnZzT3oS1hXmg8Tb5olFQbG6keDdZ8rJPsktAQsS +yVFz5rI6lEcdTPZOaM6XDQhZX2ffrbO5BKItlaST5gk7DZFFnlddYg63yKEZ9k9 RX9nGIYvJDkw1z6cbKBM3FvNbVlaYLB8IcOsJNArQ19GW/4yqSeVE53dYLvfR66d kGyROOL2APsncfKoAUmCG3M+joXWXFA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:06 2025 by rpki-client