$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e2b94bc-203f-3058-9ff8-87bae51ca0ab.roa File: 4e2b94bc-203f-3058-9ff8-87bae51ca0ab.roa (raw, json) Hash identifier: GAxJqwhkF2CUmgCIJHI9fuuvw03MIrxHIbaogaobebk= Subject key identifier: C8:3B:18:A8:F5:9A:5A:59:B4:B0:F0:D6:9D:94:FB:22:F9:BF:0F:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC3D964718F55C81D34D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e2b94bc-203f-3058-9ff8-87bae51ca0ab.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.66.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3d:96:47:18:f5:5c:81:d3:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=bdacbfa8-10d9-4ce6-bec0-c5e18a2fadb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:41:cf:1a:4c:dc:8b:98:96:45:a0:1b:8f: a2:0e:0d:6e:4b:40:3b:f0:fb:2a:18:60:dd:b8:b6: a5:36:d6:f7:56:a8:6a:ad:81:92:34:b2:c1:86:c2: fa:4b:be:91:80:64:98:a0:3f:9d:11:51:ce:16:a1: 12:c2:b0:85:b4:94:4b:7e:2a:18:11:f0:e4:eb:74: 48:73:39:9e:4b:1f:9e:13:23:d6:e8:d2:ad:06:e8: 30:9e:c8:75:1b:4b:ed:37:96:9c:c4:36:ad:75:3b: be:09:d0:63:d0:bc:bd:1a:1f:83:63:77:d3:76:a0: e4:7e:51:db:2d:8f:f7:c8:ca:66:a0:62:82:f1:19: 5d:de:06:4a:99:fd:1a:24:49:e8:ba:bc:2d:17:68: f0:be:ac:84:6f:b7:82:74:28:80:7a:a8:75:d8:c6: 5d:cf:95:f8:20:c1:c6:8d:7c:97:52:36:32:68:dc: a7:bc:cc:e8:7a:36:36:5d:9c:44:81:c3:9b:ac:24: b2:2c:a6:d7:83:83:a0:d9:7c:58:c8:14:29:b3:c3: 38:23:76:1c:0d:55:d4:49:c8:fc:36:aa:b2:b8:cf: ac:f5:25:8d:d1:da:70:13:4b:4d:27:29:cb:5a:4e: 36:cb:66:4f:a1:d6:1c:88:e4:17:5b:70:f2:e7:e4: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3B:18:A8:F5:9A:5A:59:B4:B0:F0:D6:9D:94:FB:22:F9:BF:0F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e2b94bc-203f-3058-9ff8-87bae51ca0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9f:52:9a:d3:10:75:d6:61:d4:76:d8:79:60:c4:1c:29:86: 10:56:9d:aa:e4:6b:0a:aa:c8:09:9f:0b:aa:d1:8f:32:b3:14: 1a:8b:54:e5:b2:6e:5e:43:61:4c:1c:d7:5a:9b:da:64:b4:18: 70:3f:7b:a2:bc:5f:e6:cc:7c:87:a9:08:9e:12:0b:e0:95:c2: b6:cd:10:6d:cd:16:31:e3:e0:24:b4:cf:88:a4:dc:a6:df:a1: 5e:a2:45:db:91:5d:c6:f5:3f:60:9b:39:08:62:4a:ed:5c:d9: 10:cd:1b:70:a1:69:e6:29:b0:89:be:c0:a4:2b:d5:e8:ce:8b: 0c:91:9b:cd:02:30:fc:56:77:79:dd:eb:59:85:15:ba:f7:80: 15:89:99:ec:ff:81:68:26:48:cf:c2:1a:9a:09:52:42:0e:9d: 80:22:8b:3d:c6:31:a1:a8:04:c0:fa:f1:09:f6:d2:55:4e:cc: c3:4b:ce:fa:fc:8b:5d:07:ad:d3:1c:a5:06:c4:5c:6f:a1:fe: 81:d6:ca:c8:60:23:44:83:07:78:6a:ce:48:b1:b7:09:94:45: 4e:b1:56:31:df:23:ea:df:bc:ff:59:dd:50:0a:34:0a:8b:eb: 96:a1:45:6a:e7:7d:f2:54:9a:08:a6:e9:68:a3:4d:92:09:61: e0:06:73:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrD2WRxj1XIHTTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YmRhY2JmYTgtMTBkOS00Y2U2LWJlYzAtYzVlMThhMmZhZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp1BzxpM3IuYlkWgG4+iDg1uS0A78PsqGGDd uLalNtb3VqhqrYGSNLLBhsL6S76RgGSYoD+dEVHOFqESwrCFtJRLfioYEfDk63RI czmeSx+eEyPW6NKtBugwnsh1G0vtN5acxDatdTu+CdBj0Ly9Gh+DY3fTdqDkflHb LY/3yMpmoGKC8Rld3gZKmf0aJEnourwtF2jwvqyEb7eCdCiAeqh12MZdz5X4IMHG jXyXUjYyaNynvMzoejY2XZxEgcObrCSyLKbXg4Og2XxYyBQps8M4I3YcDVXUScj8 NqqyuM+s9SWN0dpwE0tNJynLWk42y2ZPodYciOQXW3Dy5+QzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg7GKj1mlpZtLDw1p2U+yL5vw+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGUyYjk0YmMtMjAzZi0z MDU4LTlmZjgtODdiYWU1MWNhMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0LnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2fUprTEHXWYdR22HlgxBwphhBWnarkawqqyAmfC6rRjzKzFBqLVOWy bl5DYUwc11qb2mS0GHA/e6K8X+bMfIepCJ4SC+CVwrbNEG3NFjHj4CS0z4ik3Kbf oV6iRduRXcb1P2CbOQhiSu1c2RDNG3ChaeYpsIm+wKQr1ejOiwyRm80CMPxWd3nd 61mFFbr3gBWJmez/gWgmSM/CGpoJUkIOnYAiiz3GMaGoBMD68Qn20lVOzMNLzvr8 i10HrdMcpQbEXG+h/oHWyshgI0SDB3hqzkixtwmURU6xVjHfI+rfvP9Z3VAKNAqL 65ahRWrnffJUmgim6WijTZIJYeAGc1o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:13 2025 by rpki-client