$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5929485b-afad-302c-a942-a09777de9aeb.roa File: 5929485b-afad-302c-a942-a09777de9aeb.roa (raw, json) Hash identifier: Z7Mla/avA1Cg2HyIv4AJ7N8vVqGfE4LYOrycEyya6iY= Subject key identifier: DE:DE:DA:33:9E:47:CB:2D:0C:F9:F0:BF:EE:7B:B3:74:65:77:93:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EC094D24BB35D959DD2B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5929485b-afad-302c-a942-a09777de9aeb.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.35.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:c0:94:d2:4b:b3:5d:95:9d:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=6256b84a-d5fc-4d49-af21-1ad9e9a3598f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:22:16:d3:37:32:f7:5c:06:d0:87:ef:a6:86: ee:2a:ba:f6:83:6e:db:3f:93:af:c3:c3:f5:dc:eb: b7:98:c1:67:1f:8f:3e:c0:88:0d:30:c3:44:bb:fb: c1:c0:5f:09:1c:77:54:b1:84:a4:66:a2:57:5a:79: 59:14:2b:f2:a7:80:d9:fb:81:b4:12:55:fc:b0:72: 38:72:5f:89:ce:60:a1:46:b6:10:e6:bc:2c:ab:83: e0:3b:ce:6b:9a:49:8e:e3:83:9b:15:6a:81:11:df: bc:b7:88:66:13:b9:9c:00:73:16:c4:7d:e3:6c:46: e1:ad:2e:0e:a0:52:17:60:61:7b:c0:73:59:19:1c: 7f:c8:6e:2e:00:e0:75:68:48:5f:e8:cb:0e:45:24: 92:5c:c3:87:12:67:dd:10:75:2b:c5:88:20:c9:84: 15:f2:3a:2a:e5:b0:17:4f:f4:10:0d:9c:23:24:9c: 5e:12:3f:ce:1b:8c:13:82:42:4f:8b:1e:17:a1:31: 41:6a:5a:f9:48:f1:b0:b9:78:de:1a:b2:06:1b:57: 5a:03:65:96:03:45:b5:27:08:bb:29:4f:06:16:06: ed:71:69:42:50:97:41:5e:34:6f:b7:7f:23:9c:69: db:a9:18:d1:d7:0a:ae:58:d8:0b:4a:d8:3f:29:4d: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DE:DA:33:9E:47:CB:2D:0C:F9:F0:BF:EE:7B:B3:74:65:77:93:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5929485b-afad-302c-a942-a09777de9aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e4:37:6f:4e:67:e5:af:61:23:70:87:46:d8:2a:18:70:df: a5:e2:b6:ec:69:bf:be:ba:88:6b:dc:e6:31:cd:76:be:8c:f6: 19:7e:42:1f:62:26:f2:ab:bc:a6:b2:6b:c6:3c:bc:76:4b:3b: aa:8f:3c:00:46:19:04:79:67:6c:56:74:ce:ed:23:55:fd:d9: f6:2f:53:39:81:42:c1:ba:51:28:32:21:20:e6:e2:b8:32:86: 57:e3:d4:87:50:33:c7:64:75:87:72:17:83:82:93:de:79:7e: 8e:a2:c3:12:b5:8c:40:84:d4:c8:b6:8c:3e:05:7c:ee:cb:25: 69:21:cf:f1:20:b6:b6:bd:46:52:e7:84:9a:9b:b3:73:bd:51: 1c:0d:5a:1c:77:5d:1b:68:db:23:f5:44:41:87:60:16:86:35: 00:3e:85:0e:00:79:09:ac:52:7b:25:0b:52:91:e7:41:55:76: ff:2c:71:01:38:db:7b:a3:20:8e:1f:6b:a2:60:8b:7f:a1:a6: 34:73:ca:d0:14:d9:68:3f:0d:a4:4e:a1:bb:d1:05:86:27:66: 67:17:bf:10:5c:b0:58:cf:14:dd:9d:9e:9d:fc:ab:09:00:42: 9c:26:7e:81:69:ce:aa:27:87:0d:06:a8:13:62:ae:4d:ed:ad: 49:37:14:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLsCU0kuzXZWd0rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NjI1NmI4NGEtZDVmYy00ZDQ5LWFmMjEtMWFkOWU5YTM1OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yIW0zcy91wG0IfvpobuKrr2g27bP5Ovw8P1 3Ou3mMFnH48+wIgNMMNEu/vBwF8JHHdUsYSkZqJXWnlZFCvyp4DZ+4G0ElX8sHI4 cl+JzmChRrYQ5rwsq4PgO85rmkmO44ObFWqBEd+8t4hmE7mcAHMWxH3jbEbhrS4O oFIXYGF7wHNZGRx/yG4uAOB1aEhf6MsORSSSXMOHEmfdEHUrxYggyYQV8joq5bAX T/QQDZwjJJxeEj/OG4wTgkJPix4XoTFBalr5SPGwuXjeGrIGG1daA2WWA0W1Jwi7 KU8GFgbtcWlCUJdBXjRvt38jnGnbqRjR1wquWNgLStg/KU0C+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7e2jOeR8stDPnwv+57s3Rld5PZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTkyOTQ4NWItYWZhZC0z MDJjLWE5NDItYTA5Nzc3ZGU5YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3kN29OZ+WvYSNwh0bYKhhw36Xituxpv766iGvc5jHNdr6M9hl+Qh9i JvKrvKaya8Y8vHZLO6qPPABGGQR5Z2xWdM7tI1X92fYvUzmBQsG6USgyISDm4rgy hlfj1IdQM8dkdYdyF4OCk955fo6iwxK1jECE1Mi2jD4FfO7LJWkhz/Egtra9RlLn hJqbs3O9URwNWhx3XRto2yP1REGHYBaGNQA+hQ4AeQmsUnslC1KR50FVdv8scQE4 23ujII4fa6Jgi3+hpjRzytAU2Wg/DaROobvRBYYnZmcXvxBcsFjPFN2dnp38qwkA QpwmfoFpzqonhw0GqBNirk3trUk3FFA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:09 2025 by rpki-client