$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4971e089-a072-32ae-8828-748dcbed5a88.roa File: 4971e089-a072-32ae-8828-748dcbed5a88.roa (raw, json) Hash identifier: w97gkYg1yXG62x7BGDdBkx+XKk92idlzWv6LTecJjEY= Subject key identifier: 0F:D5:A3:3A:15:67:2F:DD:5E:92:E5:4D:5D:58:E4:00:64:C0:E8:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC9578D8F00053CD4A46244 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4971e089-a072-32ae-8828-748dcbed5a88.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:57:8d:8f:00:05:3c:d4:a4:62:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=f75e1d32-669b-41c6-aec2-0734500ba060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:67:6a:1c:3b:a5:ae:b6:62:78:c9:9c:9f:37: c1:e2:25:bb:89:f2:f6:9e:77:e8:11:6d:35:bd:60: 56:23:9b:ed:5e:14:a6:86:52:33:1a:99:93:d7:91: 15:73:ea:ef:a5:a2:14:40:b3:0a:79:ce:45:b6:5c: b4:dc:51:de:31:db:ba:64:e6:c2:10:f3:0f:02:bf: fc:af:c6:39:f4:aa:10:a8:d1:ca:e4:7c:e5:8c:15: 13:3d:88:ca:ff:25:e2:bd:d7:38:fd:c8:2e:88:2a: de:f1:37:30:95:01:b7:cb:1d:9c:41:51:c9:c9:92: 7d:e8:30:00:ac:f8:ac:44:4b:06:9a:47:cb:86:58: b3:3d:19:c0:e4:ca:47:af:85:c5:f5:d4:95:3b:a8: e8:87:e6:12:35:22:e0:ac:1f:5f:7c:a3:62:9c:64: 07:4e:b0:d3:b6:aa:85:9c:f7:d9:e1:bc:e4:af:7c: df:0d:f4:9e:6a:00:8a:98:4a:9e:1a:3f:3a:df:69: 2a:4f:e8:a8:ad:99:4a:fa:c5:ea:84:49:6a:b0:60: ce:a5:2c:18:c4:e3:25:95:15:0e:6d:20:4d:8c:6e: f7:d8:29:c6:0b:0f:72:e0:a6:86:13:3b:0f:a2:14: cb:b2:a1:23:35:3a:8c:23:22:2e:88:e0:9c:4e:ec: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D5:A3:3A:15:67:2F:DD:5E:92:E5:4D:5D:58:E4:00:64:C0:E8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4971e089-a072-32ae-8828-748dcbed5a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8d:1b:c1:ed:43:bb:88:5c:83:19:94:d2:41:a7:a0:16:c0: 5d:84:77:1d:1c:e0:bf:4e:57:50:62:39:44:6d:5c:06:5e:76: e3:92:22:ef:8c:f3:98:1f:1e:d6:4e:a9:0d:16:bf:55:09:6c: 40:55:d9:80:d6:8b:22:2a:5a:5a:17:2c:77:07:e1:fd:94:a1: 96:83:e8:7a:8a:e7:d7:8c:a8:f4:2a:cd:bc:29:44:ca:50:91: 73:61:d5:f8:a7:93:71:24:35:7e:86:1b:f8:96:d5:a3:ce:23: 18:65:b1:96:8c:d7:ac:34:dd:74:8a:5e:a5:a6:1a:4f:aa:f6: bd:c5:ee:a3:35:64:ea:04:ed:c7:d0:bf:1b:70:b3:3b:d1:ed: b9:b1:29:6a:6c:e9:c6:d5:48:aa:18:ac:5a:04:4c:57:cb:fa: a7:20:1d:31:d6:5e:00:c0:00:2d:d0:99:c8:4b:ce:9c:e5:0b: 96:28:c8:14:dd:82:ba:b6:e0:e4:a4:1a:1f:f5:73:a8:e7:7f: 2a:68:a3:21:d2:3f:24:92:cc:8b:69:ff:42:a2:4d:c4:48:f4: 06:b2:68:8f:99:71:10:68:66:56:5a:cf:c0:1a:04:98:cd:c5: 93:a2:27:69:de:b0:fd:41:a2:2d:71:e7:e0:19:28:ce:8a:6e: 63:04:dd:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVeNjwAFPNSkYkQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk Zjc1ZTFkMzItNjY5Yi00MWM2LWFlYzItMDczNDUwMGJhMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGdqHDulrrZieMmcnzfB4iW7ifL2nnfoEW01 vWBWI5vtXhSmhlIzGpmT15EVc+rvpaIUQLMKec5Ftly03FHeMdu6ZObCEPMPAr/8 r8Y59KoQqNHK5HzljBUTPYjK/yXivdc4/cguiCre8TcwlQG3yx2cQVHJyZJ96DAA rPisREsGmkfLhlizPRnA5MpHr4XF9dSVO6joh+YSNSLgrB9ffKNinGQHTrDTtqqF nPfZ4bzkr3zfDfSeagCKmEqeGj8632kqT+iorZlK+sXqhElqsGDOpSwYxOMllRUO bSBNjG732CnGCw9y4KaGEzsPohTLsqEjNTqMIyIuiOCcTuxT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/VozoVZy/dXpLlTV1Y5ABkwOiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDk3MWUwODktYTA3Mi0z MmFlLTg4MjgtNzQ4ZGNiZWQ1YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWNG8HtQ7uIXIMZlNJBp6AWwF2Edx0c4L9OV1BiOURtXAZeduOSIu+M 85gfHtZOqQ0Wv1UJbEBV2YDWiyIqWloXLHcH4f2UoZaD6HqK59eMqPQqzbwpRMpQ kXNh1fink3EkNX6GG/iW1aPOIxhlsZaM16w03XSKXqWmGk+q9r3F7qM1ZOoE7cfQ vxtwszvR7bmxKWps6cbVSKoYrFoETFfL+qcgHTHWXgDAAC3QmchLzpzlC5YoyBTd grq24OSkGh/1c6jnfypooyHSPySSzItp/0KiTcRI9AayaI+ZcRBoZlZaz8AaBJjN xZOiJ2nesP1Boi1x5+AZKM6KbmME3QI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:55 2025 by rpki-client