$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c27bf91-116a-3537-8f74-7161afc7a834.roa File: 3c27bf91-116a-3537-8f74-7161afc7a834.roa (raw, json) Hash identifier: mUFUK1kUMo7uM0p2vVUCm6Pe13mpJ9DlU10bzlv9d7o= Subject key identifier: 2F:05:50:EE:0C:EB:7E:1F:1C:48:42:B0:AD:58:51:2D:D6:29:F0:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA5644DF53BDFCCA4C7A36E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c27bf91-116a-3537-8f74-7161afc7a834.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.208.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:44:df:53:bd:fc:ca:4c:7a:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=e6d342c3-02c6-4e42-bc39-78252eefc1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:26:82:af:a0:d6:a1:17:8d:2a:66:48:35: ae:36:26:93:6a:8e:0c:8b:e0:03:47:61:c4:af:25: 75:a9:c8:a0:aa:76:8d:93:26:a1:91:11:4f:bd:51: 59:b8:82:ef:78:64:94:c8:fa:0c:66:04:51:90:53: ea:15:4b:44:9c:ca:5c:c7:b5:23:66:03:6f:2a:ba: c5:5e:52:d4:66:c9:bd:75:08:81:6f:e9:7c:d5:a2: fa:d9:97:6f:79:96:60:06:71:06:42:61:86:fe:0e: 31:77:bc:d2:fb:d5:25:14:80:d4:9a:a1:3d:47:16: 28:7f:9b:20:90:82:df:b0:6f:17:28:fa:be:5d:27: df:6a:82:0e:d8:16:d1:20:3d:62:16:a6:28:1b:f6: 14:bc:9b:e7:2c:b3:45:fe:af:43:1d:49:a2:92:68: 7c:55:d5:28:b6:71:06:be:98:d8:84:9a:b4:b2:ea: 87:4e:96:45:7e:cc:6d:6b:98:7a:5a:ea:4b:77:4c: 01:58:77:46:86:6f:cf:1c:1b:e8:f5:7f:0b:fa:ae: 51:66:41:27:5b:7d:fb:5d:f6:a7:f7:82:d2:67:f9: 81:a7:c8:ab:c2:0b:89:db:71:e5:04:3d:5e:29:a7: f7:70:04:e0:77:ae:15:c6:dd:29:0f:71:52:5c:b6: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:50:EE:0C:EB:7E:1F:1C:48:42:B0:AD:58:51:2D:D6:29:F0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c27bf91-116a-3537-8f74-7161afc7a834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a8:bd:fb:fc:2c:14:bf:3d:99:74:ab:22:de:f8:6b:3f:52: 8e:fc:12:d0:a4:b9:d4:f6:61:9b:c1:c3:71:27:e2:2e:6e:04: 0d:a6:a4:5a:c2:1a:74:95:d1:96:95:f6:8d:4e:2a:4f:f3:3a: 5b:c9:51:64:e9:81:d4:a2:34:90:3c:38:8a:ec:fd:6d:f9:3c: 24:b0:2d:04:3e:4d:0c:f6:03:d7:aa:1b:b7:c7:48:47:16:31: 6b:51:20:3f:34:f6:3f:e8:f0:5a:bc:18:5e:18:d5:62:61:fc: 69:d2:0c:7b:69:ef:fc:97:2f:7e:0a:dc:02:87:f9:42:ee:1a: aa:73:f4:9b:8c:a3:29:cc:4c:0b:85:1f:31:98:9d:07:45:3b: ce:c7:db:ae:32:59:37:cc:57:e5:57:c4:3b:df:e2:8f:cc:32: e6:74:7f:c1:b7:a9:44:a0:1b:6f:d5:f7:ce:c8:c0:6d:15:ce: 46:f2:49:fa:4b:33:04:23:c0:11:14:eb:96:0b:84:09:5a:a6: e7:53:62:20:51:07:3c:42:57:63:93:b1:9e:32:84:91:f0:30: 08:22:e9:2c:39:4a:21:65:53:e6:b9:f6:0c:8a:f8:1c:48:ea: 31:64:a7:08:16:13:1f:13:8c:da:f9:a2:5c:5a:11:b4:ee:62: b2:34:20:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkTfU738ykx6NuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ZTZkMzQyYzMtMDJjNi00ZTQyLWJjMzktNzgyNTJlZWZjMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8cmgq+g1qEXjSpmSDWuNiaTao4Mi+ADR2HE ryV1qcigqnaNkyahkRFPvVFZuILveGSUyPoMZgRRkFPqFUtEnMpcx7UjZgNvKrrF XlLUZsm9dQiBb+l81aL62ZdveZZgBnEGQmGG/g4xd7zS+9UlFIDUmqE9RxYof5sg kILfsG8XKPq+XSffaoIO2BbRID1iFqYoG/YUvJvnLLNF/q9DHUmikmh8VdUotnEG vpjYhJq0suqHTpZFfsxta5h6WupLd0wBWHdGhm/PHBvo9X8L+q5RZkEnW337Xfan 94LSZ/mBp8irwguJ23HlBD1eKaf3cATgd64Vxt0pD3FSXLYZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8FUO4M634fHEhCsK1YUS3WKfDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MyN2JmOTEtMTE2YS0z NTM3LThmNzQtNzE2MWFmYzdhODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ovfv8LBS/PZl0qyLe+Gs/Uo78EtCkudT2YZvBw3En4i5uBA2mpFrC GnSV0ZaV9o1OKk/zOlvJUWTpgdSiNJA8OIrs/W35PCSwLQQ+TQz2A9eqG7fHSEcW MWtRID809j/o8Fq8GF4Y1WJh/GnSDHtp7/yXL34K3AKH+ULuGqpz9JuMoynMTAuF HzGYnQdFO87H264yWTfMV+VXxDvf4o/MMuZ0f8G3qUSgG2/V987IwG0VzkbySfpL MwQjwBEU65YLhAlapudTYiBRBzxCV2OTsZ4yhJHwMAgi6Sw5SiFlU+a59gyK+BxI 6jFkpwgWEx8TjNr5olxaEbTuYrI0IKQ= -----END CERTIFICATE-----Generated at Sat Apr 5 13:17:47 2025 by rpki-client