$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa File: 5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa (raw, json) Hash identifier: /yo3REc3myCerBc658BZga9G82QQ/499+sfVVwHIku8= Subject key identifier: 5B:50:C1:D7:DB:BD:77:27:89:B9:1D:37:19:F2:C1:FB:A4:38:40:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBA28A2DA60CF3B2D0680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.35.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ba:28:a2:da:60:cf:3b:2d:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=457f6b42-7c94-4a67-bb12-b530134c62f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:fd:54:ef:5f:67:d7:ac:d9:c2:e9:8e:2d: e0:24:4d:d0:d1:f2:7d:c0:ea:3d:f5:a9:2e:aa:a7: 65:6f:8a:20:66:51:6e:13:42:35:20:54:03:e9:a5: 69:18:83:e0:76:bd:43:c7:ff:bc:76:5e:06:d0:b6: 11:1e:f8:c1:09:03:e0:0f:90:18:4c:81:5b:6d:8d: ad:3a:1a:38:72:9e:0e:f0:bf:5a:a7:04:b8:3d:d5: 90:9b:08:36:d3:df:2a:4e:93:8f:41:a8:81:1f:d4: 91:c7:58:07:82:57:01:3d:5e:4b:dd:87:ee:bb:cf: 7a:fd:59:5d:6a:1e:d7:94:90:f5:8a:67:a8:ef:9e: c3:a3:a3:36:8c:51:9d:48:98:f0:82:15:6c:f6:4d: 47:98:2a:1c:60:7b:89:71:b6:11:12:a0:28:da:86: 1a:bf:b5:00:dd:56:75:25:b5:90:72:10:b6:66:c6: e3:73:96:8b:76:1c:ef:d9:f0:fb:6c:cf:0c:78:f3: 3d:e6:6c:a9:8c:b9:94:86:f9:dd:b9:49:b7:ae:94: 10:ae:10:ad:48:92:06:a2:cc:11:eb:00:b1:70:de: 1f:35:9e:e6:6b:7e:b1:f0:7b:ff:e6:0d:6b:28:a8: 54:60:2b:f8:20:d7:e6:f9:e7:33:f8:30:b2:49:16: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:50:C1:D7:DB:BD:77:27:89:B9:1D:37:19:F2:C1:FB:A4:38:40:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d8:c3:72:f4:b2:1f:12:b0:ad:9f:07:18:53:4f:7f:44:29: 6a:e6:0a:71:5a:5b:36:3e:e4:f9:d4:e8:74:f7:35:84:72:b3: 4a:d5:48:c4:72:b9:ad:d7:79:de:2c:fd:f6:55:3a:29:fd:37: ab:98:e3:19:a0:73:5f:0a:05:e0:d4:3d:c8:54:8d:4b:83:df: 9d:cd:99:56:60:e5:22:ee:63:dc:19:30:b6:15:48:c0:87:95: f5:da:6e:df:33:6b:da:53:bc:4c:5c:72:2a:d4:56:89:a9:35: 67:ec:b6:ab:42:c5:f0:23:e6:70:df:3d:50:8b:98:84:16:23: 5c:b7:93:f5:67:47:a5:b0:0a:fb:31:5f:ec:99:9d:ce:73:78: c3:bd:70:71:5f:8e:06:6a:fe:4a:b3:c6:0a:a7:73:27:ec:9c: 5d:a5:01:a4:37:a2:92:3d:b5:cb:9a:f6:3b:aa:2d:5d:f0:9f: 3f:86:36:26:a2:fb:df:2e:0b:4a:18:14:fd:f4:12:6f:cc:21: 0d:b6:b9:d6:cd:80:be:d7:01:0a:94:4e:ed:40:ac:47:8f:7a: c0:3e:ae:2a:da:45:03:92:1b:1e:4c:de:c8:e3:c4:82:b1:c4: cc:e1:71:f7:b8:1d:54:77:2b:d7:49:f5:00:53:c3:a2:2a:3e: 91:cd:61:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLroootpgzzstBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NDU3ZjZiNDItN2M5NC00YTY3LWJiMTItYjUzMDEzNGM2MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N79VO9fZ9es2cLpji3gJE3Q0fJ9wOo99aku qqdlb4ogZlFuE0I1IFQD6aVpGIPgdr1Dx/+8dl4G0LYRHvjBCQPgD5AYTIFbbY2t Oho4cp4O8L9apwS4PdWQmwg2098qTpOPQaiBH9SRx1gHglcBPV5L3Yfuu896/Vld ah7XlJD1imeo757Do6M2jFGdSJjwghVs9k1HmCocYHuJcbYREqAo2oYav7UA3VZ1 JbWQchC2Zsbjc5aLdhzv2fD7bM8MePM95mypjLmUhvnduUm3rpQQrhCtSJIGoswR 6wCxcN4fNZ7ma36x8Hv/5g1rKKhUYCv4INfm+ecz+DCySRb7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtQwdfbvXcnibkdNxnywfukOEDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFkNmY4YTMtMmQ0ZS0z YWUyLWE4YTQtYTg3ZjI5Y2I4MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzYw3L0sh8SsK2fBxhTT39EKWrmCnFaWzY+5PnU6HT3NYRys0rVSMRy ua3Xed4s/fZVOin9N6uY4xmgc18KBeDUPchUjUuD353NmVZg5SLuY9wZMLYVSMCH lfXabt8za9pTvExccirUVompNWfstqtCxfAj5nDfPVCLmIQWI1y3k/VnR6WwCvsx X+yZnc5zeMO9cHFfjgZq/kqzxgqncyfsnF2lAaQ3opI9tcua9juqLV3wnz+GNiai +98uC0oYFP30Em/MIQ22udbNgL7XAQqUTu1ArEePesA+riraRQOSGx5M3sjjxIKx xMzhcfe4HVR3K9dJ9QBTw6IqPpHNYdw= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:04 2025 by rpki-client