$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ffdf4b6-cd86-34b9-b935-01c2672f32f0.roa File: 1ffdf4b6-cd86-34b9-b935-01c2672f32f0.roa (raw, json) Hash identifier: x6P2GQrLM6F9u8K84RS+05NdkjWvhFVZTc80pYbkLsU= Subject key identifier: 28:94:F1:8C:7C:C9:3B:64:DF:31:39:FB:B6:49:90:2C:9B:48:D8:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBD8F4A9B69030DB4BA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ffdf4b6-cd86-34b9-b935-01c2672f32f0.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.34.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bd:8f:4a:9b:69:03:0d:b4:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=e315c082-7e38-4764-a33c-22f32b3bd095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:26:99:ef:ec:5b:cd:65:8d:51:a0:8d:bc: 26:53:24:4f:fc:20:4d:7c:9f:a9:59:35:6a:e8:90: 21:6e:f1:64:ea:fd:92:f9:af:d7:43:f8:7a:ef:a8: 79:8c:4a:ed:df:11:ea:4c:8e:0c:1c:b2:d5:69:88: d0:9c:9d:84:84:d9:61:5e:34:48:69:24:5b:28:fb: 9b:81:33:a7:fc:0c:de:ca:02:d3:b8:5a:e7:5c:fd: b5:42:24:39:64:66:b4:99:ec:61:36:76:1d:e8:60: 8d:5e:b8:89:cb:28:04:13:36:d5:f7:d7:c0:aa:b2: 43:07:bd:61:43:7e:c9:d7:5e:a7:b4:dc:a5:3e:5c: 3a:e2:92:61:75:01:cd:6b:2a:a4:06:44:99:0e:5f: 40:3e:09:6c:11:7a:74:87:a9:5b:b2:dc:60:d7:01: 19:25:45:cd:b6:5e:01:d8:05:1c:71:99:09:68:fb: b5:69:f9:f1:03:35:08:8d:2c:67:53:a1:05:18:0c: 06:ca:6a:ff:bf:64:87:c0:06:e8:eb:dc:cc:ea:1a: f9:28:23:76:ac:a1:5a:4e:54:9d:44:3f:7d:cd:b6: 81:83:d9:3e:3c:99:b4:6e:cf:b2:db:90:3b:3e:3a: dd:aa:d7:33:f3:43:86:ed:fe:50:1d:e8:77:5d:01: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:F1:8C:7C:C9:3B:64:DF:31:39:FB:B6:49:90:2C:9B:48:D8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ffdf4b6-cd86-34b9-b935-01c2672f32f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:de:5b:5a:7b:fc:1f:55:8b:a2:28:03:72:a7:39:a9:c9:b0: 50:4e:5f:76:fc:ea:e4:bf:91:0f:7a:9c:63:59:e1:44:78:73: da:d2:86:21:a0:ed:0c:9b:19:d1:1e:4c:67:21:09:e9:6b:ec: b7:7b:67:14:2a:f9:25:d7:34:1c:85:d3:2d:37:ac:a9:b9:00: 3c:4c:85:e0:ed:71:47:d9:a8:cf:8b:f6:a1:aa:20:38:e2:77: 64:d3:4a:4f:c3:8b:45:59:5a:2b:f1:40:b7:c1:8c:14:53:07: d5:b2:83:bc:2b:c4:bf:41:50:54:2f:85:9c:e7:1b:b3:3e:9c: ec:55:f3:3b:5f:be:e6:0a:6c:20:d2:fb:c2:43:4e:d6:e4:17: c8:2b:0f:8b:c8:5e:76:e1:46:8e:ce:2d:75:b1:f2:22:54:24: 71:66:97:a5:83:60:31:bc:7d:10:93:8c:83:62:35:da:28:94: 52:c5:ba:0c:99:ac:94:67:bf:8c:54:09:71:b1:8d:e7:d2:63: d0:47:4e:8b:89:8f:30:5f:04:32:7c:0b:69:7e:0c:b8:9f:b2: 31:e9:e4:03:fb:54:2c:ff:89:32:85:44:98:43:73:9e:17:88: b5:90:4d:bd:11:a1:ff:5d:90:d6:b2:7e:27:89:36:89:cf:a6: ed:24:5c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLr2PSptpAw20uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTMxNWMwODItN2UzOC00NzY0LWEzM2MtMjJmMzJiM2JkMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGMmme/sW81ljVGgjbwmUyRP/CBNfJ+pWTVq 6JAhbvFk6v2S+a/XQ/h676h5jErt3xHqTI4MHLLVaYjQnJ2EhNlhXjRIaSRbKPub gTOn/AzeygLTuFrnXP21QiQ5ZGa0mexhNnYd6GCNXriJyygEEzbV99fAqrJDB71h Q37J116ntNylPlw64pJhdQHNayqkBkSZDl9APglsEXp0h6lbstxg1wEZJUXNtl4B 2AUccZkJaPu1afnxAzUIjSxnU6EFGAwGymr/v2SHwAbo69zM6hr5KCN2rKFaTlSd RD99zbaBg9k+PJm0bs+y25A7Pjrdqtcz80OG7f5QHeh3XQE5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiU8Yx8yTtk3zE5+7ZJkCybSNhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZmZGY0YjYtY2Q4Ni0z NGI5LWI5MzUtMDFjMjY3MmYzMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjeW1p7/B9Vi6IoA3KnOanJsFBOX3b86uS/kQ96nGNZ4UR4c9rShiGg 7QybGdEeTGchCelr7Ld7ZxQq+SXXNByF0y03rKm5ADxMheDtcUfZqM+L9qGqIDji d2TTSk/Di0VZWivxQLfBjBRTB9Wyg7wrxL9BUFQvhZznG7M+nOxV8ztfvuYKbCDS +8JDTtbkF8grD4vIXnbhRo7OLXWx8iJUJHFml6WDYDG8fRCTjINiNdoolFLFugyZ rJRnv4xUCXGxjefSY9BHTouJjzBfBDJ8C2l+DLifsjHp5AP7VCz/iTKFRJhDc54X iLWQTb0Rof9dkNayfieJNonPpu0kXGg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:32 2025 by rpki-client