$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa File: 405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa (raw, json) Hash identifier: GmiSAsocqoFHJzkx3mDUo7DNInK57n+k6XimnwrEFlQ= Subject key identifier: 7E:61:EB:22:E4:0B:A9:8D:68:BF:54:0A:69:B9:25:02:F5:09:23:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C0935AF70F66A83D1D7E6A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 24319 IP address blocks: 23.32.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:35:af:70:f6:6a:83:d1:d7:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=68997c7c-3ac2-41a2-8b41-87528ea41d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:14:95:16:8e:27:e5:d9:42:8c:38:6c:2b: c2:8a:0d:23:f8:2b:b2:2a:64:eb:52:25:b8:d5:18: be:ae:54:ea:d8:e7:c3:75:de:71:f7:0c:24:6c:cf: 83:d5:8a:b5:be:9d:08:34:c8:a8:a4:17:52:8c:bd: f3:57:34:19:dc:ec:58:c1:df:9a:f7:18:a3:5a:e7: 23:d0:96:a3:b1:d0:2b:d6:f2:fc:e2:27:1d:b7:19: c4:c0:a9:f2:90:1d:8b:5c:5d:01:5b:2d:86:04:d6: 24:39:5d:eb:c6:fc:cc:ac:57:d4:e1:ff:97:61:17: a0:4f:dd:c7:89:08:39:0f:21:4f:d6:e8:6c:a4:d1: af:03:94:a4:82:69:1d:e1:28:81:d2:06:b7:59:9e: 41:68:5b:bc:52:d9:f1:4e:f1:c7:ad:6f:0a:c5:23: 64:1d:24:71:3e:7f:20:21:ad:ff:f1:86:7d:fb:f2: 27:bf:62:b9:4e:78:7c:92:47:28:62:32:72:e2:a4: d0:3a:79:9d:d2:2c:6b:eb:29:68:bf:74:00:35:bc: 28:df:2c:83:ae:ce:7c:0a:fb:f7:b2:a6:5c:02:bb: b3:d7:d3:10:65:b4:7e:f0:c2:c8:42:de:c2:cc:a8: 21:9f:f4:ee:3d:85:0e:df:13:97:c8:50:f0:ad:81: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:61:EB:22:E4:0B:A9:8D:68:BF:54:0A:69:B9:25:02:F5:09:23:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ca:35:a1:79:a2:7b:b4:68:3b:e9:9a:04:f2:cd:aa:f9:49: 93:28:ce:a7:0b:42:bb:7b:ea:bb:8b:8b:0c:a3:d4:41:bf:f6: f6:73:86:f4:3d:4f:4e:84:1c:02:06:d4:fd:7b:7b:61:2d:41: 74:04:82:35:2e:21:da:b5:06:e2:cb:8c:df:15:86:0e:db:21: c3:01:f4:19:fa:55:77:d4:c1:c2:61:8a:a4:8e:bd:05:c9:13: 07:1f:e8:0b:7a:65:14:4e:2f:3b:bb:0a:06:55:b2:5b:62:23: bf:ab:db:e7:c0:13:5c:52:30:69:6c:f1:a2:dc:7c:17:57:17: de:66:95:ff:32:5e:7f:27:63:87:28:f6:9c:84:36:b4:a6:4d: fe:3a:e7:62:18:60:f9:7e:81:91:50:76:63:97:95:64:49:5b: 13:91:b9:8d:c1:66:12:b5:56:92:9f:14:ff:b8:98:33:8e:bf: 90:30:4d:0e:36:73:9d:6f:8a:ec:40:97:0a:0c:33:47:b1:58: 4c:c2:fb:db:21:76:21:48:ca:82:12:4e:a4:1c:53:13:3c:13: 5d:bf:7a:06:3f:32:77:70:af:67:ae:76:b2:78:48:0f:d8:2a: 55:4e:58:aa:ac:7e:70:29:9d:d7:73:e9:31:85:7c:01:af:28: 05:d3:d1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTWvcPZqg9HX5qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk Njg5OTdjN2MtM2FjMi00MWEyLThiNDEtODc1MjhlYTQxZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzUUlRaOJ+XZQow4bCvCig0j+CuyKmTrUiW4 1Ri+rlTq2OfDdd5x9wwkbM+D1Yq1vp0INMiopBdSjL3zVzQZ3OxYwd+a9xijWucj 0JajsdAr1vL84icdtxnEwKnykB2LXF0BWy2GBNYkOV3rxvzMrFfU4f+XYRegT93H iQg5DyFP1uhspNGvA5Skgmkd4SiB0ga3WZ5BaFu8UtnxTvHHrW8KxSNkHSRxPn8g Ia3/8YZ9+/Inv2K5Tnh8kkcoYjJy4qTQOnmd0ixr6ylov3QANbwo3yyDrs58Cvv3 sqZcAruz19MQZbR+8MLIQt7CzKghn/TuPYUO3xOXyFDwrYFiwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5h6yLkC6mNaL9UCmm5JQL1CSP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA1YThhZTItMmZkYi0z ZTVkLWE3NTktNDMwYTgzMTllMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTKNaF5onu0aDvpmgTyzar5SZMozqcLQrt76ruLiwyj1EG/9vZzhvQ9 T06EHAIG1P17e2EtQXQEgjUuIdq1BuLLjN8Vhg7bIcMB9Bn6VXfUwcJhiqSOvQXJ Ewcf6At6ZRROLzu7CgZVsltiI7+r2+fAE1xSMGls8aLcfBdXF95mlf8yXn8nY4co 9pyENrSmTf4652IYYPl+gZFQdmOXlWRJWxORuY3BZhK1VpKfFP+4mDOOv5AwTQ42 c51viuxAlwoMM0exWEzC+9shdiFIyoISTqQcUxM8E12/egY/Mndwr2eudrJ4SA/Y KlVOWKqsfnApnddz6TGFfAGvKAXT0cw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:05 2025 by rpki-client