$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa File: 43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa (raw, json) Hash identifier: GO0IEo330E9uo0SdtSr2nfL5KnvADd0UeQM9araN9s8= Subject key identifier: 6D:26:67:A2:8C:B4:1F:15:AC:67:01:7C:C0:6A:1D:7E:E3:35:FC:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6EE63C478A32F74F9F840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.72.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ee:63:c4:78:a3:2f:74:f9:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=a9fba3b8-0361-4306-a76c-5ec24ecacfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:62:1e:d8:75:86:ce:ba:16:c7:aa:66:af: 79:d2:81:81:2b:6b:8e:79:bf:58:e6:41:80:c7:0d: 27:1c:8f:a1:d8:8e:79:c8:ee:ec:61:e5:fb:c8:e2: 41:35:af:e1:7e:a1:01:f5:c2:ac:a9:32:70:f2:8c: a9:dc:f3:02:9c:04:8d:e4:40:8a:6f:b6:fe:cc:7b: 56:80:f9:88:bf:58:06:00:85:0e:b5:36:f3:e0:6b: 25:a9:e4:8e:77:7e:bd:8a:3c:3c:77:93:c6:fa:bd: 04:95:52:64:a0:bb:c7:97:90:fa:8e:c6:dd:8b:06: 2f:18:b7:0a:82:43:6a:4d:7e:98:07:c7:3b:0e:b0: c1:6e:30:29:b0:43:4f:10:74:99:6d:4d:25:93:f4: 55:8e:d0:ff:a9:15:80:f5:7b:9e:20:a9:ef:cf:e6: 36:09:0d:b6:66:4d:5d:c3:19:68:a6:2c:a2:46:bb: f8:f8:ba:66:1c:ff:e3:9f:fe:c5:1a:c4:18:3f:9b: 41:67:59:ce:03:89:1b:34:90:d6:f1:29:e8:73:ac: f0:47:85:38:88:22:72:3a:b9:17:df:6d:13:68:ee: 2e:de:ef:20:09:3a:31:fb:1f:0b:d9:09:3f:3f:65: b2:42:f3:88:cd:47:5c:0b:2d:5b:5b:31:e4:cf:5c: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:26:67:A2:8C:B4:1F:15:AC:67:01:7C:C0:6A:1D:7E:E3:35:FC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e5:bc:0e:1f:c6:c0:f2:a5:85:57:10:83:a0:4d:0d:ad:6c: c7:f8:79:fd:51:be:6c:1a:3d:18:2f:5b:f1:54:eb:12:ab:af: 30:d3:86:27:84:a3:d4:f0:26:f9:ca:61:42:0c:98:2d:ff:c5: 86:da:a5:a9:8c:4a:17:91:c8:85:55:2c:22:25:42:a7:cd:31: c7:3b:48:5a:50:22:f8:52:d9:f3:f6:c3:b7:1f:97:bf:04:5c: 88:9e:be:aa:3f:7b:a4:6d:c1:d5:ab:49:38:5d:e3:07:97:4f: 9c:02:fd:e2:7f:6a:67:76:d9:b2:8d:fc:8f:c0:19:f1:bd:02: 46:bb:c1:fb:99:4c:ef:2d:e7:aa:6c:90:94:09:7c:3a:f4:d9: 1c:d5:f3:28:e6:e5:23:49:32:4f:05:ab:11:58:ab:c2:ef:2e: be:25:ba:85:1e:af:b1:fe:ea:12:1d:f6:77:e6:cd:b9:b3:ed: 97:3e:f2:9a:72:62:e5:57:1f:66:88:48:94:89:74:37:3b:b5: 96:fd:10:5a:ae:1e:2f:ed:84:a4:97:61:f3:16:90:43:15:1a: 76:2d:26:be:58:e8:a1:a6:b7:3a:a0:2e:b0:dc:15:7e:1b:09: fe:e8:67:12:ae:81:76:69:e8:d5:90:18:c9:78:5e:2b:2b:ab: ef:93:b3:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1u5jxHijL3T5+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YTlmYmEzYjgtMDM2MS00MzA2LWE3NmMtNWVjMjRlY2FjZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg9iHth1hs66FseqZq950oGBK2uOeb9Y5kGA xw0nHI+h2I55yO7sYeX7yOJBNa/hfqEB9cKsqTJw8oyp3PMCnASN5ECKb7b+zHtW gPmIv1gGAIUOtTbz4GslqeSOd369ijw8d5PG+r0ElVJkoLvHl5D6jsbdiwYvGLcK gkNqTX6YB8c7DrDBbjApsENPEHSZbU0lk/RVjtD/qRWA9XueIKnvz+Y2CQ22Zk1d wxlopiyiRrv4+LpmHP/jn/7FGsQYP5tBZ1nOA4kbNJDW8Snoc6zwR4U4iCJyOrkX 320TaO4u3u8gCTox+x8L2Qk/P2WyQvOIzUdcCy1bWzHkz1zXQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0mZ6KMtB8VrGcBfMBqHX7jNfxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkMGJkNDctMDEyNC0z ZTYxLWI4YzEtNWFkMDk1ZGUxMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0i4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjlvA4fxsDypYVXEIOgTQ2tbMf4ef1RvmwaPRgvW/FU6xKrrzDThieE o9TwJvnKYUIMmC3/xYbapamMSheRyIVVLCIlQqfNMcc7SFpQIvhS2fP2w7cfl78E XIievqo/e6RtwdWrSThd4weXT5wC/eJ/amd22bKN/I/AGfG9Aka7wfuZTO8t56ps kJQJfDr02RzV8yjm5SNJMk8FqxFYq8LvLr4luoUer7H+6hId9nfmzbmz7Zc+8ppy YuVXH2aISJSJdDc7tZb9EFquHi/thKSXYfMWkEMVGnYtJr5Y6KGmtzqgLrDcFX4b Cf7oZxKugXZp6NWQGMl4Xisrq++Ts9o= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:44 2025 by rpki-client