$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4604fcf8-05a3-3bb3-abab-430b13a78b8b.roa File: 4604fcf8-05a3-3bb3-abab-430b13a78b8b.roa (raw, json) Hash identifier: LXfC9SR7lF9/Al32LLChVNQ1jAnqbwV3QxdAZtE8/fg= Subject key identifier: 6F:F0:F2:CE:84:E0:EF:0F:0D:3A:39:70:FD:C6:DC:50:F0:48:2D:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D716967278AD43741FAE2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4604fcf8-05a3-3bb3-abab-430b13a78b8b.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.33.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:69:67:27:8a:d4:37:41:fa:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=53d961a9-6aa6-412f-b239-812dba9ff585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:ff:fc:f1:df:f4:cf:67:1a:a7:0e:0d:19: 63:93:74:86:03:7c:80:a1:3d:a0:e5:76:86:01:34: f2:55:e3:5d:75:6f:20:ac:82:31:72:26:ab:65:10: b6:db:10:2f:94:4d:d5:84:12:33:cc:de:ee:ff:e1: 65:15:c5:a5:ab:c8:6c:49:c6:08:d8:23:8f:4d:cc: 68:b8:4e:cf:63:75:de:e4:37:fc:de:f8:63:e9:e8: 08:4d:dd:d9:2d:b1:a9:00:37:ad:14:4b:0b:2e:23: 2b:a1:9a:5a:20:f6:cc:9b:74:f4:8b:d2:1b:87:89: 3a:c4:c5:ab:13:58:cc:5b:89:30:d6:f7:d9:5c:b8: b8:78:df:e9:cd:53:99:32:87:6d:cb:fe:97:b1:81: 85:33:ae:a0:c3:f2:5c:fd:0d:60:60:05:a0:9e:dc: 00:6e:a3:6f:ed:75:dd:49:17:03:d8:e5:5c:f9:a1: aa:8d:5b:3c:25:06:4d:62:38:02:6a:49:b2:d6:6e: 0c:87:9c:2a:8c:f1:a9:b4:d9:8b:c8:fb:ff:38:41: a0:42:98:c0:03:75:eb:79:b9:19:76:e8:9d:e9:66: fd:37:9b:c2:39:79:80:ca:a1:7d:57:e6:12:3f:18: d5:fd:58:2a:6b:6c:4d:89:61:c8:cb:e6:f0:4e:87: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F0:F2:CE:84:E0:EF:0F:0D:3A:39:70:FD:C6:DC:50:F0:48:2D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4604fcf8-05a3-3bb3-abab-430b13a78b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:aa:60:e0:2f:1a:5b:db:48:9f:7e:6f:7d:c1:01:69:5d:c9: b4:cc:c5:50:bd:63:b5:51:75:49:97:f8:c0:80:57:4f:c1:d8: 97:66:1b:1b:94:01:54:2b:2f:7d:5e:54:e3:e5:28:25:56:7c: 6e:14:58:85:ad:6e:88:13:68:b3:8d:4b:6b:73:7c:5c:0a:46: 70:ba:4d:53:6b:07:71:60:f2:39:ac:7a:a4:b9:fd:4d:f5:18: 53:1b:69:ec:97:21:ba:9c:3a:b7:eb:d8:a2:dc:14:4d:cc:1e: 7c:27:44:c8:a6:f9:a7:ed:07:42:2d:9c:f6:94:1a:2c:c5:48: f4:c1:a5:91:d0:e5:d0:ee:77:b1:db:50:81:c8:4e:38:c2:f2: 69:47:ed:c2:59:8b:ea:a9:4e:1e:a8:bc:e3:ff:6c:9a:a5:35: ea:41:ab:12:33:2e:c5:ed:87:03:53:34:48:e6:c0:0d:a0:52: fa:47:8f:49:ae:9a:20:92:e3:28:c2:84:5e:35:e7:e3:58:84: ac:9a:b9:64:f8:f9:0f:6c:a7:e6:39:2d:f6:bf:30:ac:33:24: 98:b6:0a:c6:9a:22:63:49:04:b3:ed:7e:6a:77:ca:52:1b:d7: a9:55:8f:d4:9f:54:b5:8e:ac:a3:bd:66:09:89:16:ad:65:97: 55:e6:65:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWlnJ4rUN0H64sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTNkOTYxYTktNmFhNi00MTJmLWIyMzktODEyZGJhOWZmNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk17//PHf9M9nGqcODRljk3SGA3yAoT2g5XaG ATTyVeNddW8grIIxciarZRC22xAvlE3VhBIzzN7u/+FlFcWlq8hsScYI2COPTcxo uE7PY3Xe5Df83vhj6egITd3ZLbGpADetFEsLLiMroZpaIPbMm3T0i9Ibh4k6xMWr E1jMW4kw1vfZXLi4eN/pzVOZModty/6XsYGFM66gw/Jc/Q1gYAWgntwAbqNv7XXd SRcD2OVc+aGqjVs8JQZNYjgCakmy1m4Mh5wqjPGptNmLyPv/OEGgQpjAA3XrebkZ duid6Wb9N5vCOXmAyqF9V+YSPxjV/Vgqa2xNiWHIy+bwTocT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/w8s6E4O8PDTo5cP3G3FDwSC31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDYwNGZjZjgtMDVhMy0z YmIzLWFiYWItNDMwYjEzYTc4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuqYOAvGlvbSJ9+b33BAWldybTMxVC9Y7VRdUmX+MCAV0/B2JdmGxuU AVQrL31eVOPlKCVWfG4UWIWtbogTaLONS2tzfFwKRnC6TVNrB3Fg8jmseqS5/U31 GFMbaeyXIbqcOrfr2KLcFE3MHnwnRMim+aftB0ItnPaUGizFSPTBpZHQ5dDud7Hb UIHITjjC8mlH7cJZi+qpTh6ovOP/bJqlNepBqxIzLsXthwNTNEjmwA2gUvpHj0mu miCS4yjChF415+NYhKyauWT4+Q9sp+Y5Lfa/MKwzJJi2CsaaImNJBLPtfmp3ylIb 16lVj9SfVLWOrKO9ZgmJFq1ll1XmZTs= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:20 2025 by rpki-client