$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31c06319-228b-30e0-9cb3-2cb25fb1ea76.roa File: 31c06319-228b-30e0-9cb3-2cb25fb1ea76.roa (raw, json) Hash identifier: B7YOOvFEM338X4XXMn7Vn1FMUMGzr8BICyjI2WG5Y30= Subject key identifier: BE:3A:12:F0:9C:A1:11:01:A3:12:02:23:D4:B1:2C:33:0D:9F:8D:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D8DD2FC063A1D4A366903400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31c06319-228b-30e0-9cb3-2cb25fb1ea76.roa Signing time: Tue 11 Feb 2025 12:27:09 +0000 ROA not before: Tue 11 Feb 2025 12:27:09 +0000 ROA not after: Mon 12 May 2025 11:27:09 +0000 asID: 20940 IP address blocks: 23.216.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d8:dd:2f:c0:63:a1:d4:a3:66:90:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 11 12:27:09 2025 GMT Not After : May 12 11:27:09 2025 GMT Subject: CN=568979e7-e49e-4dc6-b162-52222bed942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c8:a6:39:eb:de:f8:8f:5f:78:2f:c4:2d:97: 8e:71:26:28:61:82:bd:5b:9b:d3:9e:69:19:b9:75: b8:da:3e:3a:86:e7:d2:01:28:cd:55:c8:1d:ef:b6: d2:01:af:6c:1a:74:20:82:ee:13:55:85:5e:f1:91: 2a:b0:60:54:9c:e1:7e:f1:77:99:f4:67:cd:34:e7: 30:50:30:6b:df:c5:e6:75:4c:be:95:4c:54:22:68: bf:a1:1b:ff:c8:50:c7:f1:39:7e:8a:58:3d:fc:37: 27:41:1a:b2:38:26:9b:84:d9:cc:a0:c2:23:8a:6c: fd:27:79:f6:55:e3:31:da:e2:36:46:5a:f2:f5:28: 56:3e:96:5b:6f:3e:f8:64:e7:5b:e2:08:a7:28:6d: 3c:b7:76:9a:5a:58:4d:eb:3a:fb:2c:08:01:9d:0d: c7:59:c0:a7:97:ca:79:0d:a5:8c:1e:00:46:5b:56: 3e:fe:ae:93:54:34:1c:cf:c6:86:07:85:77:c4:c8: 1b:b1:55:c7:88:63:2b:8b:08:d6:bb:e8:81:61:31: 81:3d:ae:3d:d7:6a:cd:09:b1:12:e0:94:23:01:9b: 26:b5:4c:cb:dc:9a:0e:25:47:1a:2c:2e:bd:de:cb: 62:ce:83:87:14:ca:4f:18:e3:fe:58:8c:c8:a4:f5: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:12:F0:9C:A1:11:01:A3:12:02:23:D4:B1:2C:33:0D:9F:8D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31c06319-228b-30e0-9cb3-2cb25fb1ea76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:25:e3:7a:6d:77:2f:0f:93:a3:90:20:99:44:d7:ae:22:3e: aa:e4:85:8c:d0:59:8a:5b:34:b4:45:01:40:b6:f0:49:c9:6d: 12:23:b1:4c:03:fe:be:b9:18:4c:e7:6c:f9:66:f3:0b:51:4a: b6:88:da:3a:7c:19:df:d7:76:be:7f:8d:b3:25:dc:e5:e0:12: 99:e8:78:2c:2f:59:d7:e5:aa:47:70:85:d8:44:87:a4:2a:0c: 07:40:d7:26:fe:ae:47:a6:21:50:a1:35:77:00:02:99:61:95: ed:43:82:35:7d:a3:54:40:7e:bf:ae:77:9a:63:b0:9e:cc:1b: cb:7f:19:32:6a:9e:fb:72:51:38:3a:92:1a:b1:ca:55:56:4e: 48:30:09:83:c2:c5:f5:eb:4b:92:e3:60:27:37:aa:b6:56:d7: 47:99:e5:78:58:1a:d5:76:bf:96:98:d8:41:29:4a:20:d4:a0: 0e:ad:9f:77:b5:69:40:61:55:2e:df:34:7b:26:24:7d:61:17: a9:55:41:6c:80:6d:1a:3c:c4:e0:f4:b4:71:3f:ed:4c:79:72: f6:d3:7f:26:a8:6b:4f:23:25:1b:94:86:fa:86:00:5b:d3:6b: 5c:f4:a4:af:72:4e:9f:cd:80:92:a0:1f:6e:ae:0c:71:72:24: 4d:58:ee:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjY3S/AY6HUo2aQNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMTEyMjcwOVoXDTI1MDUxMjExMjcwOVowLzEtMCsGA1UEAxMk NTY4OTc5ZTctZTQ5ZS00ZGM2LWIxNjItNTIyMjJiZWQ5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7simOeve+I9feC/ELZeOcSYoYYK9W5vTnmkZ uXW42j46hufSASjNVcgd77bSAa9sGnQggu4TVYVe8ZEqsGBUnOF+8XeZ9GfNNOcw UDBr38XmdUy+lUxUImi/oRv/yFDH8Tl+ilg9/DcnQRqyOCabhNnMoMIjimz9J3n2 VeMx2uI2Rlry9ShWPpZbbz74ZOdb4ginKG08t3aaWlhN6zr7LAgBnQ3HWcCnl8p5 DaWMHgBGW1Y+/q6TVDQcz8aGB4V3xMgbsVXHiGMriwjWu+iBYTGBPa4912rNCbES 4JQjAZsmtUzL3JoOJUcaLC693stizoOHFMpPGOP+WIzIpPXJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL46EvCcoREBoxICI9SxLDMNn408MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFjMDYzMTktMjI4Yi0z MGUwLTljYjMtMmNiMjVmYjFlYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcl43ptdy8Pk6OQIJlE164iPqrkhYzQWYpbNLRFAUC28EnJbRIjsUwD /r65GEznbPlm8wtRSraI2jp8Gd/Xdr5/jbMl3OXgEpnoeCwvWdflqkdwhdhEh6Qq DAdA1yb+rkemIVChNXcAAplhle1DgjV9o1RAfr+ud5pjsJ7MG8t/GTJqnvtyUTg6 khqxylVWTkgwCYPCxfXrS5LjYCc3qrZW10eZ5XhYGtV2v5aY2EEpSiDUoA6tn3e1 aUBhVS7fNHsmJH1hF6lVQWyAbRo8xOD0tHE/7Ux5cvbTfyaoa08jJRuUhvqGAFvT a1z0pK9yTp/NgJKgH26uDHFyJE1Y7uk= -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:47 2025 by rpki-client