$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa File: 43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa (raw, json) Hash identifier: WflIRvLae+ICB6bZDIZwumqsQHmVI+9hY3Bwtwmr/a0= Subject key identifier: 12:86:23:14:42:CD:5B:46:50:54:EA:E1:04:CC:0F:6B:5D:3B:5F:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB8E3F332A8F440BBC680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 25019 IP address blocks: 23.34.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b8:e3:f3:32:a8:f4:40:bb:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=e3ae288e-e598-4103-91ab-032942728f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:f3:3b:ed:71:d0:99:2c:0e:7c:82:0f:2b: 5b:21:80:40:9e:bf:12:9f:82:6c:11:a2:3e:79:bc: 63:1a:0d:82:79:cb:eb:34:77:fa:7e:3c:33:ac:ee: e3:73:c8:d0:d6:f1:e9:68:5a:76:33:05:41:89:21: 6a:7b:6d:83:9e:52:d0:f1:80:38:88:25:2f:d7:50: 1b:96:04:a4:4f:27:c7:dc:6f:12:a9:be:30:e9:b8: 3d:8e:17:17:04:f6:ed:82:1a:48:6d:8e:75:8b:15: 32:71:f6:1c:df:45:8b:73:62:36:3b:f4:bd:1b:62: fc:e6:a6:0c:3c:09:db:7a:15:f0:a5:ad:2f:83:b0: d7:58:e3:08:0a:b8:a7:a3:e6:72:0a:81:59:1c:fa: b6:0a:70:e4:42:5c:fb:5f:47:e9:b5:e6:e3:d3:a5: 87:e4:9f:67:13:8e:63:9c:cf:60:af:a0:97:49:c1: 46:c2:ae:3b:8c:47:cc:3b:44:fe:61:aa:67:97:89: e3:57:9e:ae:d1:98:1e:41:4f:60:0a:8a:14:c8:7c: 5c:df:bd:10:a9:67:63:c4:35:46:bf:0d:83:56:cd: 17:05:af:36:df:2a:09:7c:41:1f:02:a4:9d:30:a1: bf:42:61:83:a4:d7:b4:c8:f8:38:7a:a4:6d:9c:5d: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:23:14:42:CD:5B:46:50:54:EA:E1:04:CC:0F:6B:5D:3B:5F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:29:94:93:a9:4a:64:e4:22:2b:04:0c:2f:5f:f5:a1:04:25: d7:d4:da:f0:ee:6b:4e:17:18:6f:57:57:71:59:c1:ab:45:40: ef:42:b3:ca:84:7b:24:08:29:1e:e7:b7:3b:96:80:f1:2a:b4: 48:c8:89:78:0a:48:33:9a:40:fc:62:4c:b1:76:c0:e3:18:47: 2c:50:04:38:2d:d4:d3:1d:7c:c7:c9:56:c5:09:86:87:9c:bc: c1:06:a6:83:46:2f:0f:cb:90:87:91:7c:b8:1a:ea:4c:f5:ee: 84:59:5d:d9:a7:de:7c:07:3f:90:ba:3d:7a:01:c2:f3:ff:c9: ec:04:cf:a5:fb:bb:74:57:2a:44:96:24:29:92:aa:d8:15:78: ae:2f:93:0d:fd:6c:0b:d3:01:0d:60:23:16:85:af:29:17:16: 53:1c:54:be:44:df:fa:c5:2d:3a:a8:19:cd:b3:a4:bf:5c:4d: de:05:e8:97:ff:d9:d3:62:d4:cf:93:26:08:d4:85:b3:67:e1: bd:dd:4d:c1:0b:c9:63:44:e9:5a:2c:ef:16:b2:e1:ff:6d:d2: aa:d7:d2:5a:fd:74:ce:d2:4f:a8:20:ed:1b:e8:a6:3b:cb:62: 8e:1e:eb:32:a6:cf:eb:01:59:ae:c8:0c:57:45:88:01:9c:49: ea:2b:01:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrjj8zKo9EC7xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTNhZTI4OGUtZTU5OC00MTAzLTkxYWItMDMyOTQyNzI4ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DDzO+1x0JksDnyCDytbIYBAnr8Sn4JsEaI+ ebxjGg2CecvrNHf6fjwzrO7jc8jQ1vHpaFp2MwVBiSFqe22DnlLQ8YA4iCUv11Ab lgSkTyfH3G8Sqb4w6bg9jhcXBPbtghpIbY51ixUycfYc30WLc2I2O/S9G2L85qYM PAnbehXwpa0vg7DXWOMICrino+ZyCoFZHPq2CnDkQlz7X0fptebj06WH5J9nE45j nM9gr6CXScFGwq47jEfMO0T+Yapnl4njV56u0ZgeQU9gCooUyHxc370QqWdjxDVG vw2DVs0XBa823yoJfEEfAqSdMKG/QmGDpNe0yPg4eqRtnF0WSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKGIxRCzVtGUFTq4QTMD2tdO1+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNhODdlZTQtMjM3Ny0z YjVmLTljNzktOGExYjZlN2EzMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIplJOpSmTkIisEDC9f9aEEJdfU2vDua04XGG9XV3FZwatFQO9Cs8qE eyQIKR7ntzuWgPEqtEjIiXgKSDOaQPxiTLF2wOMYRyxQBDgt1NMdfMfJVsUJhoec vMEGpoNGLw/LkIeRfLga6kz17oRZXdmn3nwHP5C6PXoBwvP/yewEz6X7u3RXKkSW JCmSqtgVeK4vkw39bAvTAQ1gIxaFrykXFlMcVL5E3/rFLTqoGc2zpL9cTd4F6Jf/ 2dNi1M+TJgjUhbNn4b3dTcELyWNE6Vos7xay4f9t0qrX0lr9dM7ST6gg7RvopjvL Yo4e6zKmz+sBWa7IDFdFiAGcSeorAa0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:11 2025 by rpki-client