$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa File: 4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa (raw, json) Hash identifier: rmSKilaYBI9TNlm/TV8r2YhCnBPpSUmKLnBOBuUiHjw= Subject key identifier: 97:0B:25:D1:D8:5E:5D:32:EE:E2:97:BF:1C:11:68:DC:17:C4:2F:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC9560CB5FF5F98E4B88100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 35994 IP address blocks: 23.32.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:56:0c:b5:ff:5f:98:e4:b8:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=15aa20ba-8173-49e4-b5f2-9496d4e42273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:54:2f:30:a5:58:1a:a6:b4:cf:12:6e:c3: 93:39:b1:29:12:78:bb:dd:fd:81:1a:6f:11:42:60: 75:90:1f:df:fe:45:be:2d:2e:e2:b7:4f:9e:40:1a: 50:64:c1:73:52:a7:92:21:1e:16:b4:06:cd:b8:80: f0:78:cd:df:08:4f:c4:83:04:7a:1e:67:e3:72:f6: 42:23:b6:00:22:48:4e:30:ae:98:d4:4f:66:cd:f8: b3:8b:a8:eb:b8:1b:2a:bc:66:32:35:a9:e9:e5:a0: 04:92:59:bf:8b:1a:46:5b:7c:37:36:73:1c:3e:1b: 44:0e:87:7c:20:05:3c:7a:4c:fe:00:4c:be:10:aa: b5:35:c8:49:39:6c:68:b9:15:1e:b4:71:e7:ac:ec: 5c:10:2c:08:f6:31:54:8e:91:d5:c1:ca:fb:b3:e6: 4b:e9:b1:c3:ea:c9:d3:50:9c:25:5f:1d:f0:92:2f: 4a:f8:92:c1:f5:55:44:48:a0:51:43:a3:5c:f3:87: 14:35:07:17:8a:29:41:07:fb:c5:87:a8:b7:85:88: 4d:4c:16:90:b3:ba:07:54:19:ed:70:fd:40:00:dd: 5a:ee:54:a8:3c:5f:b5:18:ec:41:6a:a7:86:5f:00: b8:1e:bf:21:fa:f3:35:80:ce:9d:02:18:6b:49:9d: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:25:D1:D8:5E:5D:32:EE:E2:97:BF:1C:11:68:DC:17:C4:2F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:85:34:bc:45:5d:6f:a3:63:53:9d:f8:4e:4d:5b:d3:81:cd: 2e:39:ec:fd:26:f2:27:67:93:e9:54:fa:73:a1:56:3e:f1:52: 50:e2:e2:bb:cd:65:b4:f2:ae:6d:6a:f2:7a:7d:f9:68:5a:1e: 15:0c:31:2f:a2:17:1b:72:09:6c:a5:2e:d5:a3:11:4c:d4:75: 65:1d:22:bd:f7:d8:6e:92:34:36:f3:22:94:0b:3a:cf:d8:97: d6:80:e3:ca:1b:9e:80:76:f3:4c:48:d7:67:6a:f6:de:5f:3a: 3d:94:ba:15:63:87:1c:6b:96:f2:ea:22:e5:15:69:79:e5:36: 02:41:21:ce:a7:9b:60:f0:48:8e:ef:06:f6:ab:16:a1:30:50: aa:5a:0f:df:92:0f:3d:ba:4e:ae:80:26:f2:e1:82:e6:bf:00: cd:ab:01:2b:c3:07:d4:e7:ed:41:98:b5:d9:2c:85:74:4d:27: c2:fe:f2:c3:a9:7f:cf:6b:1d:f0:33:44:05:7a:86:ab:36:1a: 91:b8:38:07:00:73:4b:d2:d4:8f:90:96:a2:b5:01:e7:ad:6f: 99:25:e6:e6:33:76:47:a3:b0:3e:06:d4:50:51:92:9d:62:10: 8b:2a:10:f8:7f:b5:1a:0d:f1:de:02:2a:ea:63:5d:7a:86:f1: 64:93:ca:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVYMtf9fmOS4gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MTVhYTIwYmEtODE3My00OWU0LWI1ZjItOTQ5NmQ0ZTQyMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAVULzClWBqmtM8SbsOTObEpEni73f2BGm8R QmB1kB/f/kW+LS7it0+eQBpQZMFzUqeSIR4WtAbNuIDweM3fCE/EgwR6HmfjcvZC I7YAIkhOMK6Y1E9mzfizi6jruBsqvGYyNanp5aAEklm/ixpGW3w3NnMcPhtEDod8 IAU8ekz+AEy+EKq1NchJOWxouRUetHHnrOxcECwI9jFUjpHVwcr7s+ZL6bHD6snT UJwlXx3wki9K+JLB9VVESKBRQ6Nc84cUNQcXiilBB/vFh6i3hYhNTBaQs7oHVBnt cP1AAN1a7lSoPF+1GOxBaqeGXwC4Hr8h+vM1gM6dAhhrSZ2q/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcLJdHYXl0y7uKXvxwRaNwXxC9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIxYWE0NDgtYTA2OS0z ZGI0LTlkMGYtM2RlOWM1Yzc2Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKFNLxFXW+jY1Od+E5NW9OBzS457P0m8idnk+lU+nOhVj7xUlDi4rvN ZbTyrm1q8np9+WhaHhUMMS+iFxtyCWylLtWjEUzUdWUdIr332G6SNDbzIpQLOs/Y l9aA48obnoB280xI12dq9t5fOj2UuhVjhxxrlvLqIuUVaXnlNgJBIc6nm2DwSI7v BvarFqEwUKpaD9+SDz26Tq6AJvLhgua/AM2rASvDB9Tn7UGYtdkshXRNJ8L+8sOp f89rHfAzRAV6hqs2GpG4OAcAc0vS1I+QlqK1Aeetb5kl5uYzdkejsD4G1FBRkp1i EIsqEPh/tRoN8d4CKupjXXqG8WSTygU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:47 2025 by rpki-client