$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa File: 5b3c8670-7242-3511-9bb0-3647ae7e4332.roa (raw, json) Hash identifier: PC2vCrUsZIdSnSrkAzwb9YjvECq8MYHtK1rQ1TmROXo= Subject key identifier: 0A:CF:F0:58:46:94:CD:0C:7A:84:88:52:E5:70:2A:49:CD:BC:73:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC42FC13ABA71C3849B3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.67.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:42:fc:13:ab:a7:1c:38:49:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=c26a626d-6aba-4139-bab8-51ddd1b4b574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:e5:0e:28:1f:dd:dd:e4:cf:bb:3f:d1:70: 2c:97:71:95:32:e7:ac:45:f8:64:cc:2e:9e:e0:de: fc:0d:bd:f1:fb:e6:c5:8c:00:fb:59:87:e4:98:b2: 26:71:24:39:d0:89:2a:98:4c:88:3f:af:08:f9:0e: 10:33:26:85:b1:e1:8e:5f:01:24:31:9f:48:2e:6c: 3b:8e:18:03:ab:8c:43:af:6b:2b:d5:91:00:7b:97: 8a:e0:15:fc:2f:a4:f1:db:40:27:e8:73:86:3c:fe: 60:a4:d1:e6:90:83:17:4f:3d:37:0a:a8:e1:a4:6b: c2:4f:5f:a6:27:6d:6f:35:b9:c7:c1:48:a5:e8:e5: 44:77:dc:e5:e6:09:fd:6d:da:d0:52:d3:b0:7f:de: a9:dc:76:17:51:00:a7:67:52:4e:1c:27:0f:93:83: 4c:83:c5:88:b3:6d:a4:b1:77:cf:7e:12:4f:b5:13: 96:a3:aa:af:da:5e:b7:3a:4a:32:7e:2f:af:9b:05: df:15:e3:55:4f:3e:f2:b4:f5:80:62:f8:1f:47:86: 54:70:4c:bb:86:a8:3f:d5:c4:94:1a:7d:52:c3:08: 0d:85:a2:3b:9c:e7:a4:15:b8:a8:91:85:9e:98:49: e7:74:ef:79:80:ca:38:29:d8:d1:fe:ab:9f:d8:0e: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CF:F0:58:46:94:CD:0C:7A:84:88:52:E5:70:2A:49:CD:BC:73:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c0:75:52:52:9f:68:e9:bb:ec:a7:80:74:7b:0a:fb:c5:61: 44:d1:5a:0b:11:34:13:35:40:ad:46:21:9f:72:d2:53:bb:ae: 91:8b:a7:46:2b:1c:df:bc:80:4d:99:3d:27:43:2c:3c:f1:a1: 38:d0:32:91:5b:dc:75:68:f8:28:0f:02:45:f3:25:25:7e:cd: 80:34:b9:23:0e:40:72:9c:2b:54:4c:a6:c1:92:45:45:f0:73: dd:53:8d:c5:1d:f3:d9:f8:d2:ed:a2:6d:44:96:40:d9:ac:1a: b1:17:9e:69:38:c1:07:b5:9d:d5:aa:a6:9f:a2:6d:04:d2:d2: 8e:c6:ca:40:e1:12:79:44:48:c2:3e:27:e0:5f:e4:8f:2d:f5: 91:e3:40:ae:9b:b4:73:81:ee:db:8d:15:60:72:b6:9b:43:85: 5a:71:77:f5:ba:d3:fe:26:ff:2f:49:25:ea:58:1d:ca:ce:8f: b2:16:61:7e:a0:fa:78:7e:ea:aa:ed:4d:82:8f:d3:4e:58:44: 10:0b:de:1f:61:e8:60:fe:5a:73:a6:72:30:5f:49:d1:d6:47: 68:6e:74:99:63:a4:d6:a4:94:10:a7:1d:36:ba:b0:15:f7:d2: 73:67:23:16:a2:95:aa:71:a3:b6:ef:ea:97:df:cd:1c:d4:0d: 65:a2:87:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrEL8E6unHDhJs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzI2YTYyNmQtNmFiYS00MTM5LWJhYjgtNTFkZGQxYjRiNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4nlDigf3d3kz7s/0XAsl3GVMuesRfhkzC6e 4N78Db3x++bFjAD7WYfkmLImcSQ50IkqmEyIP68I+Q4QMyaFseGOXwEkMZ9ILmw7 jhgDq4xDr2sr1ZEAe5eK4BX8L6Tx20An6HOGPP5gpNHmkIMXTz03CqjhpGvCT1+m J21vNbnHwUil6OVEd9zl5gn9bdrQUtOwf96p3HYXUQCnZ1JOHCcPk4NMg8WIs22k sXfPfhJPtROWo6qv2l63Okoyfi+vmwXfFeNVTz7ytPWAYvgfR4ZUcEy7hqg/1cSU Gn1SwwgNhaI7nOekFbiokYWemEnndO95gMo4KdjR/quf2A4FnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArP8FhGlM0MeoSIUuVwKknNvHNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIzYzg2NzAtNzI0Mi0z NTExLTliYjAtMzY0N2FlN2U0MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbAdVJSn2jpu+yngHR7CvvFYUTRWgsRNBM1QK1GIZ9y0lO7rpGLp0Yr HN+8gE2ZPSdDLDzxoTjQMpFb3HVo+CgPAkXzJSV+zYA0uSMOQHKcK1RMpsGSRUXw c91TjcUd89n40u2ibUSWQNmsGrEXnmk4wQe1ndWqpp+ibQTS0o7GykDhEnlESMI+ J+Bf5I8t9ZHjQK6btHOB7tuNFWBytptDhVpxd/W60/4m/y9JJepYHcrOj7IWYX6g +nh+6qrtTYKP005YRBAL3h9h6GD+WnOmcjBfSdHWR2hudJljpNaklBCnHTa6sBX3 0nNnIxailapxo7bv6pffzRzUDWWih+k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:33 2025 by rpki-client