$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa4b5b4-c026-35bd-8a18-db0e4ff8feb7.roa File: 4aa4b5b4-c026-35bd-8a18-db0e4ff8feb7.roa (raw, json) Hash identifier: QZdRdXX2ESJdnMc9tNddO3MDhwd1+08SFSpzX/tplWo= Subject key identifier: 99:20:12:A0:96:9B:86:79:38:38:61:AF:5B:AE:7F:CB:21:A9:3A:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490881600E809906391C3DB000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa4b5b4-c026-35bd-8a18-db0e4ff8feb7.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 24319 IP address blocks: 23.67.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:60:0e:80:99:06:39:1c:3d:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=8403de59-cf51-434f-a48b-7737c2d453de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:48:42:50:e0:9f:ec:ff:e3:47:42:4f:c8:e2: a5:f4:94:e5:a1:a8:90:a9:6f:e1:20:3e:64:96:b1: 81:93:84:97:a1:1e:26:8e:2f:fc:2a:6a:d5:b5:06: ef:a0:06:d0:31:56:72:d5:f0:9d:4f:a5:b4:2c:ae: 55:de:e1:b8:fd:c9:df:6e:3f:c9:1d:ec:7a:48:91: 5e:c2:6a:04:62:28:05:8b:24:91:34:df:08:5f:ce: 34:0e:5d:04:4e:c3:f6:6f:3f:34:86:0d:1c:71:41: b0:a8:f4:0e:ca:27:b5:08:f9:4f:f7:27:dc:ec:a6: a4:e1:72:97:b5:bf:eb:69:55:ec:a4:cd:e9:e7:4a: 0d:21:65:95:5a:07:75:97:a4:72:5c:3f:68:40:ed: a3:2e:d5:44:a5:b5:7c:90:8f:fb:77:cb:24:b8:fb: 19:a9:d9:d0:e2:fd:86:89:cf:61:62:33:df:a3:38: 5a:89:67:5c:f2:3d:f7:96:ec:ec:d0:b5:24:b2:3f: 64:6e:56:8f:78:9d:83:fb:d7:86:05:87:1b:00:e8: 98:cd:ea:34:7a:f3:06:5b:c6:14:59:5a:ba:75:b9: 19:12:18:88:33:9b:ea:14:9d:db:d4:13:8e:80:93: 6a:7c:ef:9c:4c:a9:c7:27:98:db:06:85:ba:98:c3: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:20:12:A0:96:9B:86:79:38:38:61:AF:5B:AE:7F:CB:21:A9:3A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa4b5b4-c026-35bd-8a18-db0e4ff8feb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e6:4b:75:29:39:af:ee:60:6b:65:00:ec:54:6e:07:34:a1: 88:1d:e7:9d:2b:ff:96:c1:39:c2:ad:53:1f:3e:58:51:8e:75: d6:42:34:ad:10:5b:ca:8a:0e:e2:5e:7f:5a:75:26:b1:f3:16: 66:7b:5a:9a:c4:ad:1d:04:7e:83:3b:11:45:28:df:bd:af:ba: fd:f4:83:f5:59:dd:89:44:58:4e:9e:12:1b:46:7b:72:71:ba: 5e:12:b8:23:08:0d:3c:46:6e:db:be:73:83:03:0c:86:b5:bb: 03:00:b3:27:b6:2c:79:c7:42:ec:1f:3b:9e:f0:27:5a:30:73: a7:83:65:20:63:eb:10:d3:70:73:bb:cf:4e:19:6b:33:31:62: e5:fe:98:80:07:6d:e0:c4:30:60:8e:dc:3c:cb:ee:94:bd:b4: 22:ee:7b:fb:71:3e:5f:96:ec:6b:82:bf:7b:ea:0c:da:d1:8c: 40:09:1f:7b:8e:cb:24:9e:0b:e3:d0:43:37:49:db:f5:4f:ba: 91:c3:17:b2:b2:fa:50:76:37:65:80:90:61:24:50:56:8f:e1: 9c:13:ad:df:1f:63:42:b3:12:2c:84:aa:32:bf:01:72:4d:22: 56:84:12:10:3e:ab:75:30:09:9d:ff:fd:28:2b:0d:55:a5:8a: 59:ad:d9:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWAOgJkGORw9sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ODQwM2RlNTktY2Y1MS00MzRmLWE0OGItNzczN2MyZDQ1M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEhCUOCf7P/jR0JPyOKl9JTloaiQqW/hID5k lrGBk4SXoR4mji/8KmrVtQbvoAbQMVZy1fCdT6W0LK5V3uG4/cnfbj/JHex6SJFe wmoEYigFiySRNN8IX840Dl0ETsP2bz80hg0ccUGwqPQOyie1CPlP9yfc7Kak4XKX tb/raVXspM3p50oNIWWVWgd1l6RyXD9oQO2jLtVEpbV8kI/7d8skuPsZqdnQ4v2G ic9hYjPfozhaiWdc8j33luzs0LUksj9kblaPeJ2D+9eGBYcbAOiYzeo0evMGW8YU WVq6dbkZEhiIM5vqFJ3b1BOOgJNqfO+cTKnHJ5jbBoW6mMMk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkgEqCWm4Z5ODhhr1uuf8shqTqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFhNGI1YjQtYzAyNi0z NWJkLThhMTgtZGIwZTRmZjhmZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvmS3UpOa/uYGtlAOxUbgc0oYgd550r/5bBOcKtUx8+WFGOddZCNK0Q W8qKDuJef1p1JrHzFmZ7WprErR0EfoM7EUUo372vuv30g/VZ3YlEWE6eEhtGe3Jx ul4SuCMIDTxGbtu+c4MDDIa1uwMAsye2LHnHQuwfO57wJ1owc6eDZSBj6xDTcHO7 z04ZazMxYuX+mIAHbeDEMGCO3DzL7pS9tCLue/txPl+W7GuCv3vqDNrRjEAJH3uO yySeC+PQQzdJ2/VPupHDF7Ky+lB2N2WAkGEkUFaP4ZwTrd8fY0KzEiyEqjK/AXJN IlaEEhA+q3UwCZ3//SgrDVWlilmt2cY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:52 2025 by rpki-client