$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa File: 28464964-e18a-34dc-b99b-717ba0d7c5e6.roa (raw, json) Hash identifier: 5xEPEEmztFi9OWTQyNWDNEVrCQSo/uldtSgwVBv53wo= Subject key identifier: 3D:B8:6D:D7:2E:53:0C:3B:39:C2:32:71:8C:C6:A0:9F:D9:B8:43:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBA9FEEF6E0DD37A09300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.35.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ba:9f:ee:f6:e0:dd:37:a0:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=54b5d988-601c-4eda-a58f-b4f03f3940f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:1c:1d:b8:06:29:73:67:ba:1b:02:51:84: d6:20:76:14:e2:43:85:d6:a5:17:5f:9a:65:d0:52: f2:ac:a3:f7:0e:36:7c:88:14:69:86:82:a4:c6:e8: 0f:18:eb:36:39:e1:be:5f:8c:ae:14:f6:2a:d0:ce: 32:25:93:3b:02:ac:4d:de:d3:f1:96:86:13:58:1f: 94:3b:f9:de:82:7a:11:57:04:d1:ff:91:0a:72:af: 04:49:f7:8c:bd:57:bd:a2:c3:21:34:33:74:d1:8a: cd:be:93:06:e1:7f:53:0e:c9:be:ba:06:32:97:32: 22:eb:1a:82:c9:24:90:ab:4c:2b:13:ba:00:64:68: 3e:9b:cd:9b:cd:92:f9:0a:65:20:16:8f:07:03:65: e9:6b:14:5c:ee:0f:aa:53:15:31:31:61:2a:a3:a7: bf:79:3c:e1:4c:e8:db:60:39:18:84:2b:92:f1:26: 05:0c:7e:a1:c2:4d:48:d0:35:97:44:33:7d:fa:b3: 47:42:4a:31:aa:67:41:eb:db:0d:cc:dc:e0:a0:6e: 02:ab:23:a6:ee:28:e3:49:14:c4:7d:59:bb:2a:c1: 5b:5c:34:52:d0:3b:af:28:c2:e2:93:a6:8b:e8:5d: cb:dd:9e:ba:8d:8b:7d:17:be:9b:bd:9e:06:a4:32: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B8:6D:D7:2E:53:0C:3B:39:C2:32:71:8C:C6:A0:9F:D9:B8:43:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2e:c0:b4:f7:17:c4:11:48:4d:34:dc:2e:87:d7:84:06:8e: 71:d5:10:2d:16:4e:3c:2d:b5:9e:66:cc:b5:79:da:69:0f:18: c7:5c:9c:2c:17:f5:cb:ae:2b:87:5d:c7:42:94:3c:cd:1c:e7: 59:fd:80:22:2a:f8:18:61:4a:ed:ad:63:c6:a8:2b:be:71:45: bb:55:df:8c:8e:ff:30:ee:6c:61:9b:68:bd:ff:96:17:1f:d4: 43:4d:56:f6:d6:76:17:f8:df:a6:9d:f9:04:48:7b:d3:12:61: 54:ce:e9:8f:9e:ca:91:04:03:df:08:8e:9f:5a:e9:e4:78:5f: 78:5e:6c:d6:7f:4e:44:0f:eb:a0:f8:31:70:0e:ec:19:e0:65: 08:89:49:6e:90:ee:19:e2:b9:0b:b2:e8:2c:ce:da:4d:ff:11: db:0d:46:2e:e6:ac:be:77:46:7c:13:f8:17:b6:d2:b5:2e:4e: 60:d4:ba:60:5c:60:0e:03:dd:79:2a:07:68:d4:35:c3:65:5a: 3a:41:88:48:0f:19:4e:d8:3b:d6:7c:33:13:35:14:73:d5:7c: d2:ba:27:b8:a4:b4:cf:55:c4:9d:90:cf:b3:1d:14:02:58:ec: 6e:db:4b:17:64:b9:da:a7:8f:78:4e:97:ea:65:4c:03:e9:34: 59:8c:7f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrqf7vbg3TegkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NTRiNWQ5ODgtNjAxYy00ZWRhLWE1OGYtYjRmMDNmMzk0MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQocHbgGKXNnuhsCUYTWIHYU4kOF1qUXX5pl 0FLyrKP3DjZ8iBRphoKkxugPGOs2OeG+X4yuFPYq0M4yJZM7AqxN3tPxloYTWB+U O/negnoRVwTR/5EKcq8ESfeMvVe9osMhNDN00YrNvpMG4X9TDsm+ugYylzIi6xqC ySSQq0wrE7oAZGg+m82bzZL5CmUgFo8HA2XpaxRc7g+qUxUxMWEqo6e/eTzhTOjb YDkYhCuS8SYFDH6hwk1I0DWXRDN9+rNHQkoxqmdB69sNzNzgoG4CqyOm7ijjSRTE fVm7KsFbXDRS0DuvKMLik6aL6F3L3Z66jYt9F76bvZ4GpDJ+fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD24bdcuUww7OcIycYzGoJ/ZuEPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg0NjQ5NjQtZTE4YS0z NGRjLWI5OWItNzE3YmEwZDdjNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0uwLT3F8QRSE003C6H14QGjnHVEC0WTjwttZ5mzLV52mkPGMdcnCwX 9cuuK4ddx0KUPM0c51n9gCIq+BhhSu2tY8aoK75xRbtV34yO/zDubGGbaL3/lhcf 1ENNVvbWdhf436ad+QRIe9MSYVTO6Y+eypEEA98Ijp9a6eR4X3hebNZ/TkQP66D4 MXAO7BngZQiJSW6Q7hniuQuy6CzO2k3/EdsNRi7mrL53RnwT+Be20rUuTmDUumBc YA4D3XkqB2jUNcNlWjpBiEgPGU7YO9Z8MxM1FHPVfNK6J7iktM9VxJ2Qz7MdFAJY 7G7bSxdkudqnj3hOl+plTAPpNFmMfzU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:48 2025 by rpki-client