$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa File: 1386a00d-927b-3ab9-b391-869605560c4f.roa (raw, json) Hash identifier: y/+yv7FvuFWPhMerIJU7TokQGp+nYthwZ0i5szAhp5Q= Subject key identifier: C1:21:FD:D5:D2:9D:F1:A9:CF:E5:01:0C:ED:97:6F:40:38:7A:AA:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB7E03D563B0C74DDCB34 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b7:e0:3d:56:3b:0c:74:dd:cb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=e32cb9e2-643b-4b81-ac00-d89f2520f2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:e9:73:9b:6f:b7:e8:d6:3e:6d:1d:ed:f9: 5f:75:30:93:be:97:af:59:02:34:8e:43:a8:18:e5: c5:06:68:87:a9:53:45:6e:56:2a:51:fe:10:b1:e1: 2f:93:6d:65:23:f2:83:09:fe:9e:9b:5c:ab:18:2b: 7b:22:de:7b:7a:3e:19:7e:89:a3:aa:8d:28:2d:9a: 15:58:3d:b8:6d:e6:11:b8:b3:40:1e:c6:74:6c:ce: 34:72:e2:08:16:4b:bb:80:96:c6:08:84:ef:4e:c2: 20:8c:30:a3:c9:e6:b7:27:e8:e4:7f:28:cc:b3:c9: 7b:f1:da:f5:0b:9e:13:fa:40:dd:68:c0:a9:58:8b: 22:82:9c:6b:70:d2:3a:71:7c:66:bd:1f:fc:9f:c2: d4:f9:c3:98:13:62:0a:38:62:a2:c0:65:38:77:7c: ba:c3:5c:33:b0:cb:36:b9:2c:d7:2a:48:f1:88:9a: c4:f3:52:c3:c9:3c:fd:07:ff:df:7c:52:5d:06:5e: 39:c2:77:e5:57:4c:75:75:61:b2:f7:ed:d8:2e:48: dc:93:1f:c6:8a:17:bc:56:6a:ec:b9:34:71:fa:5b: 4b:6b:65:1a:f5:f1:ed:93:17:4e:57:7b:33:0e:fb: 78:09:d0:0d:23:bc:4f:cf:64:85:b6:e1:97:6e:b7: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:21:FD:D5:D2:9D:F1:A9:CF:E5:01:0C:ED:97:6F:40:38:7A:AA:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1c:8e:7a:00:b6:fd:58:16:47:c2:5a:81:28:6e:4e:9a:e4: 04:39:30:0e:17:2c:f7:34:7b:ac:f6:57:88:89:ae:97:5b:64: 2e:ef:ec:e1:8b:83:f4:83:c1:3d:2a:6a:79:ce:46:01:0c:6b: 00:cd:a5:14:9a:5a:7b:29:db:6d:e0:2c:64:b2:b6:51:17:da: 44:38:1a:de:79:5a:e0:e3:31:81:15:01:8b:11:55:87:5b:c2: df:0e:ba:e5:28:29:19:ee:f4:c0:1a:71:ef:9e:cf:18:04:c4: 32:8f:75:3c:31:6b:8d:53:57:58:9d:2a:d8:d8:e8:ca:b5:de: ff:d9:b0:cc:1e:85:21:28:6f:08:4d:5d:f6:ad:4c:c8:a8:69: 14:25:8c:10:52:30:0f:15:95:b8:02:35:a2:6f:94:74:ec:b8: 96:c8:c4:e4:32:6c:a2:c2:df:8c:5d:a4:d5:87:3d:66:d7:78: 63:43:2c:92:03:cc:50:f2:d3:31:b9:34:af:46:12:2c:32:30: 91:d6:0d:f0:ba:16:a6:aa:0f:5c:13:77:c9:b6:f1:23:d0:16: e7:b0:24:8c:78:93:18:be:27:8b:3c:be:16:ae:91:f0:90:cd: ef:ee:04:98:14:30:71:f5:26:f9:3d:22:0b:6a:89:9f:4f:1d: 1e:62:3c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrfgPVY7DHTdyzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTMyY2I5ZTItNjQzYi00YjgxLWFjMDAtZDg5ZjI1MjBmMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRTpc5tvt+jWPm0d7flfdTCTvpevWQI0jkOo GOXFBmiHqVNFblYqUf4QseEvk21lI/KDCf6em1yrGCt7It57ej4Zfomjqo0oLZoV WD24beYRuLNAHsZ0bM40cuIIFku7gJbGCITvTsIgjDCjyea3J+jkfyjMs8l78dr1 C54T+kDdaMCpWIsigpxrcNI6cXxmvR/8n8LU+cOYE2IKOGKiwGU4d3y6w1wzsMs2 uSzXKkjxiJrE81LDyTz9B//ffFJdBl45wnflV0x1dWGy9+3YLkjckx/Gihe8Vmrs uTRx+ltLa2Ua9fHtkxdOV3szDvt4CdANI7xPz2SFtuGXbreufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEh/dXSnfGpz+UBDO2Xb0A4eqpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTM4NmEwMGQtOTI3Yi0z YWI5LWIzOTEtODY5NjA1NTYwYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFscjnoAtv1YFkfCWoEobk6a5AQ5MA4XLPc0e6z2V4iJrpdbZC7v7OGL g/SDwT0qannORgEMawDNpRSaWnsp223gLGSytlEX2kQ4Gt55WuDjMYEVAYsRVYdb wt8OuuUoKRnu9MAace+ezxgExDKPdTwxa41TV1idKtjY6Mq13v/ZsMwehSEobwhN XfatTMioaRQljBBSMA8VlbgCNaJvlHTsuJbIxOQybKLC34xdpNWHPWbXeGNDLJID zFDy0zG5NK9GEiwyMJHWDfC6FqaqD1wTd8m28SPQFuewJIx4kxi+J4s8vhaukfCQ ze/uBJgUMHH1Jvk9IgtqiZ9PHR5iPFk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:44 2025 by rpki-client