$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de64081-dd66-3a80-b03a-5c650937d926.roa File: 4de64081-dd66-3a80-b03a-5c650937d926.roa (raw, json) Hash identifier: ABxBn2lX9YljSPzBUcZk11stW2ox6eYIusgcb89E55o= Subject key identifier: BB:BB:8E:D2:61:D1:2B:E9:5D:E4:47:1B:37:28:2D:69:00:07:73:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DA44389CC4A57CE72600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de64081-dd66-3a80-b03a-5c650937d926.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 35994 IP address blocks: 23.204.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:da:44:38:9c:c4:a5:7c:e7:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=fbb08b1f-c99e-47a9-be8b-209c4057e39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:67:a6:14:ce:86:1d:3c:ef:a4:bc:53:6f: 6f:79:ae:f6:61:c6:6e:db:ff:15:cc:c0:1d:62:81: 3e:94:24:f9:55:35:ab:7a:da:cf:15:32:71:ca:29: 9e:4c:8d:66:a1:10:89:7e:bb:02:39:88:17:80:c1: b3:b5:05:0b:1a:e6:b4:f0:1c:58:8b:e5:19:e3:55: 64:c7:7c:40:88:4a:ca:ac:c0:f6:58:71:e4:c5:3b: 19:a7:c5:2c:f0:4d:9e:e7:64:01:39:0e:28:bd:88: eb:af:b1:c7:a4:54:75:9c:30:17:c2:87:3d:42:e0: 22:21:9c:69:d2:8c:83:65:61:d6:11:e4:a6:97:25: 20:3f:06:6a:8f:2d:eb:ae:34:f2:d3:b3:79:16:0f: bc:ad:46:b9:04:23:f8:e2:49:4b:21:87:6b:ce:22: 8e:45:05:d0:3c:2f:33:fd:f7:2d:e5:fc:ea:cf:00: 9b:de:a8:ca:7c:0a:e5:fb:7f:e6:be:de:44:9b:c0: 1f:69:f6:26:37:a2:fa:45:bb:5b:4e:8a:10:e6:b5: 73:d5:5a:ac:9f:72:34:97:fd:10:4a:9a:e8:85:9c: 64:cb:dc:85:e5:e5:fd:45:a0:fe:c8:ba:31:d3:4c: 6c:9a:95:22:d3:06:49:dd:49:ad:60:93:0a:1a:47: dc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BB:8E:D2:61:D1:2B:E9:5D:E4:47:1B:37:28:2D:69:00:07:73:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de64081-dd66-3a80-b03a-5c650937d926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:45:34:e6:27:07:de:10:b9:1d:0f:b0:e6:ec:da:ae:62:af: ad:f1:7b:44:04:5f:6e:01:d9:36:42:ae:76:e5:93:cc:9f:3f: 28:c6:25:52:4e:11:d3:35:94:6c:26:34:ae:c9:0c:a8:e9:a9: 0c:9b:c6:ee:58:de:cb:4e:03:0c:52:5c:ea:9d:8a:c5:45:46: 33:cf:b1:37:bb:e9:fa:57:fc:19:7e:ed:99:58:b7:91:fd:17: 22:1e:45:28:79:39:1b:db:b9:a6:fc:0c:20:62:14:35:b2:01: 45:7c:5d:76:77:06:64:1e:f4:e6:a7:01:74:53:3c:ae:b0:6a: a8:56:d9:76:3c:37:4c:bd:12:e1:77:9e:96:1c:71:a8:d9:f5: 46:a5:53:cf:50:cb:e4:a0:a9:e3:f9:31:88:88:51:56:f7:68: cf:89:be:f9:2d:fc:40:09:8b:d8:38:66:ab:1c:6c:79:2a:00: aa:66:e6:85:7f:7b:c5:08:13:cf:37:dc:d9:5b:c1:e7:c9:8c: 92:43:0c:16:aa:74:54:8b:66:0b:1d:b8:1f:67:ba:18:fb:c2: c2:9e:b4:17:ab:c0:40:c3:65:63:14:37:ea:a5:e1:31:c6:d6: 68:20:cc:0b:a0:a5:fd:29:6e:ce:6a:b2:6d:43:0c:6a:04:98: c3:95:c0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NpEOJzEpXznJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZmJiMDhiMWYtYzk5ZS00N2E5LWJlOGItMjA5YzQwNTdlMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwBnphTOhh0876S8U29vea72YcZu2/8VzMAd YoE+lCT5VTWretrPFTJxyimeTI1moRCJfrsCOYgXgMGztQULGua08BxYi+UZ41Vk x3xAiErKrMD2WHHkxTsZp8Us8E2e52QBOQ4ovYjrr7HHpFR1nDAXwoc9QuAiIZxp 0oyDZWHWEeSmlyUgPwZqjy3rrjTy07N5Fg+8rUa5BCP44klLIYdrziKORQXQPC8z /fct5fzqzwCb3qjKfArl+3/mvt5Em8AfafYmN6L6RbtbTooQ5rVz1Vqsn3I0l/0Q SprohZxky9yF5eX9RaD+yLox00xsmpUi0wZJ3UmtYJMKGkfcmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu7jtJh0SvpXeRHGzcoLWkAB3PvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRlNjQwODEtZGQ2Ni0z YTgwLWIwM2EtNWM2NTA5MzdkOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVFNOYnB94QuR0PsObs2q5ir63xe0QEX24B2TZCrnblk8yfPyjGJVJO EdM1lGwmNK7JDKjpqQybxu5Y3stOAwxSXOqdisVFRjPPsTe76fpX/Bl+7ZlYt5H9 FyIeRSh5ORvbuab8DCBiFDWyAUV8XXZ3BmQe9OanAXRTPK6waqhW2XY8N0y9EuF3 npYccajZ9UalU89Qy+SgqeP5MYiIUVb3aM+Jvvkt/EAJi9g4ZqscbHkqAKpm5oV/ e8UIE8833NlbwefJjJJDDBaqdFSLZgsduB9nuhj7wsKetBerwEDDZWMUN+ql4THG 1mggzAugpf0pbs5qsm1DDGoEmMOVwFI= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:22 2025 by rpki-client