$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa File: 23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa (raw, json) Hash identifier: ChRzgOK4W/XpqYVl10VjRAuKHgA00TPVt6fDolW161A= Subject key identifier: A4:9E:22:78:62:22:8D:A6:33:21:AD:B4:D9:97:79:39:37:D0:96:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0D607FEE3441F651AADE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.205.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d6:07:fe:e3:44:1f:65:1a:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=1e2f05e0-59e9-4bf9-9046-431148b84e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:96:55:ff:9f:c8:60:a2:f4:46:1c:33:bd: 00:77:f3:e2:21:44:8a:fa:8a:43:36:4c:d0:67:3e: 1c:65:7a:47:8f:3b:7e:30:8d:a1:20:7d:8a:3a:6d: 76:b8:74:25:1a:82:09:0d:c5:fc:a4:ab:34:01:6b: df:92:1b:3e:90:b6:79:cc:78:9f:1d:8c:4a:88:af: 00:dc:e7:0a:fd:68:31:f2:8b:d5:80:d7:ab:08:6f: a4:22:07:a1:02:51:28:54:17:eb:97:c6:93:b0:b7: 52:ac:ae:ad:0a:0a:bb:2a:07:fb:d8:d9:7b:c6:cd: 02:d8:63:9a:59:33:ad:ec:a4:2f:1c:14:4f:b7:9d: 61:9c:93:b0:e3:74:6e:84:a6:94:40:2f:98:72:85: 65:23:3a:71:0e:0e:ad:ed:1e:5c:22:4f:5e:ef:c0: b3:61:95:a0:af:06:11:f8:8f:1f:b2:c4:ef:2b:e9: bc:f5:1d:2e:5f:41:70:fb:0c:05:66:de:57:aa:2a: 75:74:2c:82:6b:f7:06:23:7b:62:0f:15:d8:f9:c4: a6:8d:5c:22:77:4c:30:97:a4:28:5d:ad:a3:2d:3c: 10:cd:86:89:23:a7:7a:02:19:b0:bf:3b:6b:a8:03: d1:98:4f:53:3a:68:49:59:d7:00:65:6a:d5:db:52: e9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9E:22:78:62:22:8D:A6:33:21:AD:B4:D9:97:79:39:37:D0:96:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:78:ae:47:b1:6b:8b:6b:fb:71:bd:ed:9a:d3:8d:98:e8:90: 27:75:ef:8d:52:81:a9:64:78:94:f5:3d:79:c7:3c:cf:d7:2e: 33:7e:5f:2f:ad:8a:a9:87:2f:dd:ec:98:4d:4c:9f:46:a9:09: 27:43:56:e9:87:cf:4a:05:ec:1c:5d:bf:05:e3:0f:09:72:4a: d1:8c:07:f8:1e:89:b6:66:26:fd:17:d4:cc:15:ee:ce:32:bd: 6b:d6:fd:0f:2f:0c:bf:48:bc:d0:40:48:0b:0a:4f:2a:5b:63: d3:02:e7:63:d5:df:01:eb:18:37:04:97:1f:22:2e:70:e9:2a: 27:75:25:1f:86:00:11:07:eb:f0:88:f4:bb:94:0d:a0:c2:7e: 4e:10:5d:5a:ec:29:57:a8:60:22:fc:d6:da:a2:9f:83:14:a9: 18:99:bb:d1:ca:cb:0a:72:52:e1:d0:fc:f7:18:2e:0c:b8:9a: c8:71:6c:ec:19:98:4e:ec:66:07:dc:21:cf:63:3f:7f:aa:bf: 1d:2f:32:35:02:05:f8:bf:cb:b8:7a:ba:a0:4a:3d:ed:e3:4e: 21:97:35:e5:6f:56:c0:4e:1f:4b:44:b3:40:0a:92:e7:99:39: ac:e3:6f:f5:f6:5c:22:3f:05:bc:93:60:27:7e:0d:13:dc:99: fe:b2:ee:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NYH/uNEH2UareAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MWUyZjA1ZTAtNTllOS00YmY5LTkwNDYtNDMxMTQ4Yjg0ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHmWVf+fyGCi9EYcM70Ad/PiIUSK+opDNkzQ Zz4cZXpHjzt+MI2hIH2KOm12uHQlGoIJDcX8pKs0AWvfkhs+kLZ5zHifHYxKiK8A 3OcK/Wgx8ovVgNerCG+kIgehAlEoVBfrl8aTsLdSrK6tCgq7Kgf72Nl7xs0C2GOa WTOt7KQvHBRPt51hnJOw43RuhKaUQC+YcoVlIzpxDg6t7R5cIk9e78CzYZWgrwYR +I8fssTvK+m89R0uX0Fw+wwFZt5Xqip1dCyCa/cGI3tiDxXY+cSmjVwid0wwl6Qo Xa2jLTwQzYaJI6d6AhmwvztrqAPRmE9TOmhJWdcAZWrV21LpqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSeInhiIo2mMyGttNmXeTk30JZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlYWU3ZGMtNzcyNS0z MGUzLWEzMzEtYmZkZDY3YjBkMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF838MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl4rkexa4tr+3G97ZrTjZjokCd1741SgalkeJT1PXnHPM/XLjN+Xy+t iqmHL93smE1Mn0apCSdDVumHz0oF7BxdvwXjDwlyStGMB/geibZmJv0X1MwV7s4y vWvW/Q8vDL9IvNBASAsKTypbY9MC52PV3wHrGDcElx8iLnDpKid1JR+GABEH6/CI 9LuUDaDCfk4QXVrsKVeoYCL81tqin4MUqRiZu9HKywpyUuHQ/PcYLgy4mshxbOwZ mE7sZgfcIc9jP3+qvx0vMjUCBfi/y7h6uqBKPe3jTiGXNeVvVsBOH0tEs0AKkueZ Oazjb/X2XCI/BbyTYCd+DRPcmf6y7mg= -----END CERTIFICATE-----Generated at Tue Apr 8 18:14:59 2025 by rpki-client