$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/611b4426-be4d-375f-bd44-198afe6057a1.roa File: 611b4426-be4d-375f-bd44-198afe6057a1.roa (raw, json) Hash identifier: Oij/flXQdl+3BVDW/rRyCO5SjTiYAONLbk/r8UJKWj4= Subject key identifier: 01:BC:E0:F1:58:55:F5:AB:48:59:61:4B:D0:56:5A:69:8A:18:69:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849002159F7D1D0CCA8B343AF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/611b4426-be4d-375f-bd44-198afe6057a1.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 23.43.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:59:f7:d1:d0:cc:a8:b3:43:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=3346f4b0-21e4-43e9-9e50-7547a444ef44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:b1:b4:14:cc:20:0a:1d:38:83:2d:ef:77: 9e:88:ff:d3:d2:fa:f1:83:84:b4:91:74:9b:c6:3b: d7:26:ec:e9:d9:27:2d:29:e3:1d:23:12:4e:0c:59: 46:44:af:92:13:49:cd:31:ac:5b:46:f7:71:a4:01: d0:de:74:67:c7:07:90:3e:c1:11:bc:a1:7f:00:ad: 4a:a5:17:14:6a:69:63:90:e1:85:81:88:e0:e7:2c: b5:3a:00:35:25:2f:fa:33:33:a4:fb:61:1c:76:e0: d1:1b:7d:e6:de:65:5c:5b:2c:f0:ca:7c:3a:17:e5: 65:a4:bc:c4:b6:e0:df:d2:11:7e:d3:d2:b0:03:92: af:0f:1b:fa:67:72:a1:ed:cb:d3:b3:f5:9c:1e:6b: 7e:b5:a1:1c:67:4f:c1:eb:6e:bb:c5:e3:4e:81:24: 6a:1c:e4:5b:05:c5:83:bc:3e:94:94:fc:07:a1:3f: 7c:fe:24:84:6f:36:e8:1d:20:44:ab:d9:3a:c6:81: bb:ae:d8:33:6a:57:3d:26:a9:41:80:0e:d5:e2:cd: dc:29:4c:b5:37:64:60:09:24:3f:2a:6b:8a:d8:f5: 58:e1:06:52:0e:d8:73:db:51:c8:70:99:1d:be:74: 21:1c:42:29:55:1a:17:03:f3:0e:a7:f0:43:a2:4e: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:E0:F1:58:55:F5:AB:48:59:61:4B:D0:56:5A:69:8A:18:69:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/611b4426-be4d-375f-bd44-198afe6057a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:69:05:8f:c3:4f:c0:b4:18:8b:c7:60:77:78:48:f8:10:75: 17:47:ba:31:8a:64:63:53:35:cf:4c:07:cd:a1:f9:44:a7:f2: 51:65:81:c7:12:dd:22:0d:ed:99:8d:24:3e:23:fe:5e:bc:7b: 45:fb:21:2a:96:95:2b:0f:f0:95:cb:fb:50:b0:b2:37:8b:8f: 81:10:7c:d3:6a:4b:b3:10:53:bd:0f:90:13:25:46:60:82:64: 42:ff:59:b6:8e:d4:35:0b:06:44:9f:fc:78:d1:1c:c7:9a:6c: d6:62:88:4b:ad:c7:9e:e4:db:5e:9d:e1:52:cb:d2:d9:b4:8c: 74:5d:e7:89:ff:8d:2d:2b:5b:d6:4a:f6:ed:96:2a:82:60:c6: a7:63:bf:1b:6e:d9:34:d8:55:d5:5c:17:c2:2d:87:53:ae:e2: 5b:b8:6c:7b:d6:dd:a7:fd:01:17:a8:7f:98:cc:eb:89:d8:d6: eb:29:49:f9:66:39:b0:04:e6:cf:08:17:31:bf:dc:ba:ae:0c: 06:0c:3e:b5:43:5b:71:20:a9:31:75:9e:24:1b:a3:18:40:06: d4:60:2f:dc:7b:79:8c:4b:a6:5a:53:fa:9b:54:9d:cf:2c:e2: e2:c0:ce:c0:8a:88:96:9c:95:00:55:ab:5b:63:2a:19:51:4f: 4e:d7:5c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVn30dDMqLNDrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzM0NmY0YjAtMjFlNC00M2U5LTllNTAtNzU0N2E0NDRlZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYqxtBTMIAodOIMt73eeiP/T0vrxg4S0kXSb xjvXJuzp2SctKeMdIxJODFlGRK+SE0nNMaxbRvdxpAHQ3nRnxweQPsERvKF/AK1K pRcUamljkOGFgYjg5yy1OgA1JS/6MzOk+2EcduDRG33m3mVcWyzwynw6F+VlpLzE tuDf0hF+09KwA5KvDxv6Z3Kh7cvTs/WcHmt+taEcZ0/B6267xeNOgSRqHORbBcWD vD6UlPwHoT98/iSEbzboHSBEq9k6xoG7rtgzalc9JqlBgA7V4s3cKUy1N2RgCSQ/ KmuK2PVY4QZSDthz21HIcJkdvnQhHEIpVRoXA/MOp/BDok52XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG84PFYVfWrSFlhS9BWWmmKGGkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjExYjQ0MjYtYmU0ZC0z NzVmLWJkNDQtMTk4YWZlNjA1N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVpBY/DT8C0GIvHYHd4SPgQdRdHujGKZGNTNc9MB82h+USn8lFlgccS 3SIN7ZmNJD4j/l68e0X7ISqWlSsP8JXL+1CwsjeLj4EQfNNqS7MQU70PkBMlRmCC ZEL/WbaO1DULBkSf/HjRHMeabNZiiEutx57k216d4VLL0tm0jHRd54n/jS0rW9ZK 9u2WKoJgxqdjvxtu2TTYVdVcF8Ith1Ou4lu4bHvW3af9AReof5jM64nY1uspSflm ObAE5s8IFzG/3LquDAYMPrVDW3EgqTF1niQboxhABtRgL9x7eYxLplpT+ptUnc8s 4uLAzsCKiJaclQBVq1tjKhlRT07XXNo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:14 2025 by rpki-client