$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/451941a1-b7b1-376c-9d7e-0e07264a87bb.roa File: 451941a1-b7b1-376c-9d7e-0e07264a87bb.roa (raw, json) Hash identifier: AXyKdSASFv81cAbbFKeEh05K8ivRu4jM3TG0edO7nSY= Subject key identifier: B8:24:6D:4B:9F:8A:7B:DE:2C:89:5E:78:7E:1C:B2:EB:02:BC:59:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC2B0922351154A2484C7E Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/451941a1-b7b1-376c-9d7e-0e07264a87bb.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.32.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2b:09:22:35:11:54:a2:48:4c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=6bda33c5-9ef1-4a3b-9d62-7c39299f7ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:67:aa:77:76:62:68:96:91:14:1d:f6:b4: 64:9b:a5:eb:15:e0:86:a9:e7:6a:3c:d1:75:6d:ba: 1f:b9:a4:9c:c4:0f:8c:8e:52:47:00:78:4d:c7:8a: 61:12:d2:1f:b5:65:47:fa:d4:b0:f9:fb:99:28:dd: 64:a2:72:f3:dc:cf:ca:02:99:5b:10:53:b1:59:0a: 10:ef:20:92:aa:b1:84:ab:c5:d7:93:24:80:c0:e1: 71:0d:8e:95:60:a5:03:73:8d:29:a3:25:75:3a:7b: a5:f3:0d:f4:9c:ae:13:6a:af:c8:e6:25:6e:f7:98: a1:75:99:22:8a:58:3c:63:73:12:bc:10:c6:a9:06: 21:ec:44:dd:36:c5:b4:6f:9e:a7:81:59:42:42:a3: 57:1d:38:77:a9:b4:47:64:80:9c:fb:7a:e4:b8:e6: f3:86:3b:26:8e:fc:e1:7f:53:3a:d0:b2:e7:e2:83: 3e:b3:39:7e:cb:21:01:a4:7d:b4:60:c1:9f:d9:3e: 56:a4:b4:67:e5:30:c2:8f:7a:e9:6e:67:c6:f9:47: 9c:1c:90:19:76:b1:aa:eb:a1:5e:75:a5:f5:45:a6: 72:15:12:79:d0:c6:c3:b1:97:42:92:50:2e:0d:9c: 80:50:ab:0a:24:56:e3:f6:6e:65:8e:af:9a:c6:8b: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:6D:4B:9F:8A:7B:DE:2C:89:5E:78:7E:1C:B2:EB:02:BC:59:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/451941a1-b7b1-376c-9d7e-0e07264a87bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8f:45:16:53:e3:e8:ac:bf:fa:b5:14:98:6f:59:02:99:7a: 4a:27:6a:49:13:ef:1d:fb:db:5f:25:da:35:fc:b4:8b:6a:65: 7e:18:83:ed:15:ef:af:20:bd:e6:fa:69:28:6d:bb:37:09:6e: 3d:d2:35:7e:fd:97:7b:da:fb:7f:11:94:ac:3e:eb:8c:22:7b: 0f:ff:b2:ed:e1:20:08:ad:24:00:14:fe:35:e2:35:ce:2a:cc: 13:59:4c:63:ad:41:83:57:40:62:43:95:cf:c5:15:d6:ab:a8: 4c:fb:25:01:53:5f:b0:7a:4f:85:45:8a:a5:7e:d4:47:0d:ad: 42:4e:14:64:ec:91:b7:0a:5d:66:fd:43:49:9a:d3:ad:8d:d8: db:ca:fc:1c:39:71:a1:8c:64:54:5d:27:3b:a1:a2:5d:a4:18: f9:34:db:93:14:93:5b:77:50:56:52:56:6f:7c:08:a1:89:fd: 8e:8a:7f:5b:6f:67:0f:9d:e2:78:87:71:9c:17:7a:4c:06:e8: 91:f8:db:31:27:fc:65:82:34:db:9b:8f:ed:7a:7f:a5:3f:4c: 01:27:0f:55:26:ce:d9:c1:42:96:e4:db:ab:2b:5f:7a:f3:4f: cb:81:19:6d:a6:19:af:c8:c7:97:66:37:9a:2a:7e:43:27:7b: 84:57:68:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CsJIjURVKJITH4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NmJkYTMzYzUtOWVmMS00YTNiLTlkNjItN2MzOTI5OWY3YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Znqnd2YmiWkRQd9rRkm6XrFeCGqedqPNF1 bbofuaScxA+MjlJHAHhNx4phEtIftWVH+tSw+fuZKN1konLz3M/KAplbEFOxWQoQ 7yCSqrGEq8XXkySAwOFxDY6VYKUDc40poyV1Onul8w30nK4Taq/I5iVu95ihdZki ilg8Y3MSvBDGqQYh7ETdNsW0b56ngVlCQqNXHTh3qbRHZICc+3rkuObzhjsmjvzh f1M60LLn4oM+szl+yyEBpH20YMGf2T5WpLRn5TDCj3rpbmfG+UecHJAZdrGq66Fe daX1RaZyFRJ50MbDsZdCklAuDZyAUKsKJFbj9m5ljq+axovHXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgkbUufinveLIleeH4csusCvFmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDUxOTQxYTEtYjdiMS0z NzZjLTlkN2UtMGUwNzI2NGE4N2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyC1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABePRRZT4+isv/q1FJhvWQKZekonakkT7x37218l2jX8tItqZX4Yg+0V 768gveb6aShtuzcJbj3SNX79l3va+38RlKw+64wiew//su3hIAitJAAU/jXiNc4q zBNZTGOtQYNXQGJDlc/FFdarqEz7JQFTX7B6T4VFiqV+1EcNrUJOFGTskbcKXWb9 Q0ma062N2NvK/Bw5caGMZFRdJzuhol2kGPk025MUk1t3UFZSVm98CKGJ/Y6Kf1tv Zw+d4niHcZwXekwG6JH42zEn/GWCNNubj+16f6U/TAEnD1UmztnBQpbk26srX3rz T8uBGW2mGa/Ix5dmN5oqfkMne4RXaF8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:48 2025 by rpki-client