$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa File: 36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa (raw, json) Hash identifier: 2dyijXlDB/xGry85NDIX0i0hhvu2xV0iX00NIhADXxQ= Subject key identifier: 45:00:A2:07:8C:AA:39:AD:78:79:0C:25:26:CD:EE:F1:58:19:A2:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC2B98CE8F5C0DA0B87F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.202.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2b:98:ce:8f:5c:0d:a0:b8:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=2512a2f1-4d1e-4013-b5d7-c1e6e3efa86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:bb:57:3c:a0:4a:4f:e0:5f:b2:0b:46:e5: db:c7:fd:27:17:5a:ad:d3:5a:ee:cd:24:7a:c5:d9: f0:c8:c9:c5:9e:4c:e5:f5:06:ad:15:b2:ff:6a:a0: bc:f3:cf:99:3a:c1:cf:fa:d4:44:dc:aa:60:4e:44: 44:6c:a5:4c:e2:2c:16:c9:53:12:12:cb:66:2c:df: cd:3b:76:57:04:6c:f1:14:a5:25:6d:2d:ea:4a:f7: e7:2e:6a:89:64:8f:f8:87:b4:67:bd:40:17:49:bc: 76:87:d0:12:7d:fd:4d:25:06:5a:e1:55:ac:84:60: d7:53:67:c5:96:98:17:7d:41:7f:67:7e:1e:f4:af: 01:4f:3f:db:76:f2:23:4b:16:bc:9d:89:49:69:13: a3:08:56:c6:60:c4:e6:f6:8e:4b:c8:dc:a0:9d:99: e8:82:52:cd:2f:97:1a:96:46:8b:a7:18:6c:63:ab: 19:c2:f2:b0:a3:14:c2:28:13:bf:65:26:f6:97:f7: 30:1a:9c:8f:bc:0f:81:cf:bb:cd:ab:fc:f3:36:fc: 3b:e0:97:13:63:19:54:76:58:01:01:38:2a:15:ad: 42:96:e7:e1:49:af:05:3c:17:5f:2b:03:c0:7f:98: b5:a2:8b:89:56:a9:f9:ff:44:eb:31:c9:df:66:2d: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:00:A2:07:8C:AA:39:AD:78:79:0C:25:26:CD:EE:F1:58:19:A2:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36f3a17e-49b5-3cc0-b862-8eaaff9f54b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:56:c3:e5:09:bf:15:fc:cb:d0:be:a8:36:cf:78:e9:aa:76: ad:55:36:5a:fd:c6:86:47:66:1e:e0:24:05:8c:62:b2:b0:54: 38:69:50:a3:57:bd:6e:c6:69:15:55:7c:6a:e4:e2:5b:36:3f: 4e:c7:06:bf:14:72:85:89:f3:28:0d:1b:c1:ab:4a:d7:b0:f8: 6b:33:40:76:78:54:7d:12:fb:0b:b2:91:c5:ff:8a:d2:e7:da: 6b:e8:ea:e3:47:6c:12:e6:4b:d0:6b:89:cb:da:0f:bc:4d:a8: 5e:78:bc:b0:99:30:5a:a4:7c:1e:96:d0:a3:fd:71:90:89:76: 1e:f9:cd:6d:49:c5:6c:ec:f5:d0:f0:a0:69:82:a3:96:35:75: d9:99:05:ea:d5:dc:32:01:7f:2f:23:93:47:72:17:69:e0:41: 4f:55:9e:97:1c:de:64:55:ac:b5:a9:a9:51:74:52:36:51:94: 5d:1f:2e:8f:6c:ff:3d:86:d1:ae:08:78:eb:ca:47:a6:27:af: b8:f9:b0:ad:76:78:e7:9b:f7:1b:b5:d3:71:d4:30:2c:bc:a8: 56:29:c3:5b:b2:67:2a:c1:02:1f:13:92:c2:73:84:67:04:25: ec:e9:62:36:42:ef:d6:35:94:35:db:de:2b:f7:6b:cd:8f:4f: a0:56:54:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CuYzo9cDaC4f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MjUxMmEyZjEtNGQxZS00MDEzLWI1ZDctYzFlNmUzZWZhODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyem7VzygSk/gX7ILRuXbx/0nF1qt01ruzSR6 xdnwyMnFnkzl9QatFbL/aqC888+ZOsHP+tRE3KpgTkREbKVM4iwWyVMSEstmLN/N O3ZXBGzxFKUlbS3qSvfnLmqJZI/4h7RnvUAXSbx2h9ASff1NJQZa4VWshGDXU2fF lpgXfUF/Z34e9K8BTz/bdvIjSxa8nYlJaROjCFbGYMTm9o5LyNygnZnoglLNL5ca lkaLpxhsY6sZwvKwoxTCKBO/ZSb2l/cwGpyPvA+Bz7vNq/zzNvw74JcTYxlUdlgB ATgqFa1ClufhSa8FPBdfKwPAf5i1oouJVqn5/0TrMcnfZi2b2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUAogeMqjmteHkMJSbN7vFYGaJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZmM2ExN2UtNDliNS0z Y2MwLWI4NjItOGVhYWZmOWY1NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8rkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZWw+UJvxX8y9C+qDbPeOmqdq1VNlr9xoZHZh7gJAWMYrKwVDhpUKNX vW7GaRVVfGrk4ls2P07HBr8UcoWJ8ygNG8GrStew+GszQHZ4VH0S+wuykcX/itLn 2mvo6uNHbBLmS9BricvaD7xNqF54vLCZMFqkfB6W0KP9cZCJdh75zW1JxWzs9dDw oGmCo5Y1ddmZBerV3DIBfy8jk0dyF2ngQU9Vnpcc3mRVrLWpqVF0UjZRlF0fLo9s /z2G0a4IeOvKR6Ynr7j5sK12eOeb9xu103HUMCy8qFYpw1uyZyrBAh8TksJzhGcE JezpYjZC79Y1lDXb3iv3a82PT6BWVBw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:40 2025 by rpki-client