$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21617855-79a9-3eda-81aa-7fd610193051.roa File: 21617855-79a9-3eda-81aa-7fd610193051.roa (raw, json) Hash identifier: QyYKXxVrp/w9cafT243OkfNuc+xru5umbn3yhkwBxgo= Subject key identifier: CB:BA:D4:B3:85:83:39:FD:80:42:2B:F9:4A:30:99:AC:F4:EF:D6:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BE3D5E18F178F10ADB400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21617855-79a9-3eda-81aa-7fd610193051.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 21342 IP address blocks: 23.36.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e3:d5:e1:8f:17:8f:10:ad:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=ca83bd11-0f08-41a6-be45-4f51cecbec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:8e:76:05:df:99:70:19:40:be:42:2d:0f: 59:6c:40:69:59:d9:3d:6e:5c:60:d2:2f:8a:96:44: e8:0f:88:6b:aa:bc:c7:6b:bf:4a:f0:85:27:aa:4f: 07:53:45:ca:7b:4d:53:7c:f6:97:be:d5:89:10:fe: 5a:0e:7a:8f:08:7d:a6:8e:41:42:b4:60:a9:3d:b1: d8:13:9c:a0:97:38:a6:c6:b7:f1:0c:32:be:34:40: ae:97:f8:c0:14:75:56:78:1f:02:6a:40:03:3c:59: c4:bd:c8:ec:2d:bd:06:96:a9:3d:2a:3f:5c:f0:eb: 1b:c0:3c:a7:f4:c5:ff:a5:4e:17:80:f8:3f:93:60: bd:ff:23:d8:93:71:0d:f4:2c:26:bf:40:36:67:d9: 86:4b:cb:9a:83:13:5f:5f:89:e5:b2:27:fd:c7:93: 73:f5:50:08:3d:78:0e:ad:ae:d4:44:cd:f4:a1:7e: 7c:d9:e1:37:2a:da:df:90:46:40:18:74:de:b7:39: 84:28:83:b4:5c:cf:5c:ca:37:55:be:c8:22:85:e5: a3:95:02:98:0e:cb:71:93:25:a1:a0:7b:95:fa:40: cc:fb:d1:f2:9a:42:e6:5f:4b:00:60:2b:18:83:88: c4:85:8a:23:5b:1f:94:3d:df:6a:85:ad:c3:8c:1f: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:D4:B3:85:83:39:FD:80:42:2B:F9:4A:30:99:AC:F4:EF:D6:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21617855-79a9-3eda-81aa-7fd610193051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fb:4c:a6:d7:aa:0b:1c:0d:d0:a0:ac:6f:1b:30:86:97:a0: 5e:a3:7e:ea:c3:75:6c:17:8c:f3:a8:e4:d4:2d:0a:2c:71:72: 0d:9a:4c:f9:6e:59:94:4e:2f:7c:c8:cd:7c:3a:90:b8:cf:ab: d0:f0:28:d2:c5:79:b7:3d:83:fd:a6:89:07:78:9a:2b:19:9c: fb:e7:5a:a9:16:e3:03:3a:ab:04:7f:3c:80:9a:dd:0b:10:af: d5:c6:2e:22:d1:8f:27:ca:73:1f:0e:eb:87:a9:21:fa:07:d1: 05:93:87:d3:a3:95:0e:07:c5:e6:f1:3a:f5:cb:86:5b:d7:b9: c8:8a:d2:55:f3:7b:43:6f:cc:fb:02:ab:04:83:5a:fd:5c:b9: 8c:7d:fb:1a:7e:33:28:9b:11:99:8c:67:d9:76:90:ec:0f:e2: 47:4f:d3:ab:fa:0d:e0:9c:56:99:79:1f:fc:67:0e:96:05:d1: 21:b4:ab:30:76:9b:c2:4c:35:6f:48:09:2a:d6:11:c6:86:90: 92:e8:ed:a1:31:91:17:89:ad:bb:c0:ed:60:01:52:c8:8c:d1: cf:10:d1:a5:73:10:0e:26:bd:d5:db:df:09:fe:cf:e4:f7:8f: 0c:97:95:15:c4:f5:f9:ad:ff:6a:d8:fa:dc:db:61:ae:64:b8: 16:32:c7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+PV4Y8XjxCttAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Y2E4M2JkMTEtMGYwOC00MWE2LWJlNDUtNGY1MWNlY2JlYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21uOdgXfmXAZQL5CLQ9ZbEBpWdk9blxg0i+K lkToD4hrqrzHa79K8IUnqk8HU0XKe01TfPaXvtWJEP5aDnqPCH2mjkFCtGCpPbHY E5yglzimxrfxDDK+NECul/jAFHVWeB8CakADPFnEvcjsLb0Glqk9Kj9c8OsbwDyn 9MX/pU4XgPg/k2C9/yPYk3EN9Cwmv0A2Z9mGS8uagxNfX4nlsif9x5Nz9VAIPXgO ra7URM30oX582eE3KtrfkEZAGHTetzmEKIO0XM9cyjdVvsgiheWjlQKYDstxkyWh oHuV+kDM+9HymkLmX0sAYCsYg4jEhYojWx+UPd9qha3DjB/BBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu61LOFgzn9gEIr+Uowmaz079bWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE2MTc4NTUtNzlhOS0z ZWRhLTgxYWEtN2ZkNjEwMTkzMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyRBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr7TKbXqgscDdCgrG8bMIaXoF6jfurDdWwXjPOo5NQtCixxcg2aTPlu WZROL3zIzXw6kLjPq9DwKNLFebc9g/2miQd4misZnPvnWqkW4wM6qwR/PICa3QsQ r9XGLiLRjyfKcx8O64epIfoH0QWTh9OjlQ4HxebxOvXLhlvXuciK0lXze0NvzPsC qwSDWv1cuYx9+xp+MyibEZmMZ9l2kOwP4kdP06v6DeCcVpl5H/xnDpYF0SG0qzB2 m8JMNW9ICSrWEcaGkJLo7aExkReJrbvA7WABUsiM0c8Q0aVzEA4mvdXb3wn+z+T3 jwyXlRXE9fmt/2rY+tzbYa5kuBYyx9M= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:24 2025 by rpki-client