$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68afbf9b-7f37-37cc-9246-aedf990cc2ff.roa File: 68afbf9b-7f37-37cc-9246-aedf990cc2ff.roa (raw, json) Hash identifier: kyCZ0EjlhUjI5zGUh6HKvOmQGC/0trZkj33QKQLHVZE= Subject key identifier: 3C:AA:F0:10:12:65:B5:BF:72:5A:00:A9:27:B5:83:9E:9F:68:B0:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC428191520346227E3180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68afbf9b-7f37-37cc-9246-aedf990cc2ff.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.67.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:42:81:91:52:03:46:22:7e:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=524c9a87-e012-4bfe-bd28-ec1b7287d19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:ca:8f:02:64:a2:7b:5a:d3:96:d2:ad:e6: a7:ff:fc:b6:14:4d:4e:20:23:13:58:49:57:22:2f: 87:ea:d5:6e:9c:f7:d1:e4:9d:b9:31:6a:f7:44:9b: 7a:34:f4:01:33:d7:e8:32:f8:dc:64:5b:0e:4f:27: 5d:b4:80:a9:77:67:34:fa:4a:d9:83:cb:93:bd:1c: 1c:1d:58:a4:81:b3:d8:22:eb:90:bc:9d:f1:42:22: 7a:19:c0:45:13:e9:7c:eb:5c:7e:54:6a:d1:5d:18: f0:a2:9d:53:0e:d7:84:0c:81:18:83:15:f9:b2:7f: f6:a4:88:d2:a1:7d:c3:34:d2:0c:8f:32:84:48:1f: 89:12:37:2e:5b:1e:0c:a2:e7:ec:c1:f6:b3:ab:b5: c0:12:26:59:68:b6:ed:7d:7b:c9:e1:5e:b3:9c:94: db:42:8a:24:e8:3f:d0:ca:f5:1a:39:07:47:b0:93: 43:36:ae:33:49:fe:b9:23:d3:79:51:a4:15:38:57: 2b:26:fc:6f:3e:e0:30:2e:98:15:9f:87:3b:b4:6c: 62:7c:38:37:7d:aa:39:c5:8a:d6:4f:b0:5a:57:77: 77:7b:a8:eb:c3:8b:7a:ab:14:f4:0c:6a:da:7f:82: 36:6a:2a:9e:66:db:98:c7:48:41:f6:bf:9a:61:61: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:F0:10:12:65:B5:BF:72:5A:00:A9:27:B5:83:9E:9F:68:B0:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68afbf9b-7f37-37cc-9246-aedf990cc2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:36:8e:45:f8:b9:4e:08:46:11:d9:a7:18:46:ed:b1:e1:15: 17:52:75:84:92:77:b1:f7:2a:db:4e:e7:03:06:55:e3:ff:e5: d4:1d:68:1d:2c:10:3d:5f:4c:98:b5:f1:2d:6d:0d:0c:14:b5: db:b6:6a:6b:22:75:e3:30:ad:5c:b5:88:fa:84:c8:55:0f:97: 10:e7:10:c8:52:3c:ac:cf:1f:d7:35:77:b7:92:6c:11:86:d5: 96:35:e6:b2:0d:39:94:7c:45:a5:77:1f:dc:ad:88:07:89:ae: bb:16:a8:7a:a1:c2:ce:7e:e8:68:2d:da:b8:a0:73:84:6d:7a: 55:09:70:ec:6e:37:fc:d7:6b:8c:ed:70:93:fa:57:f5:da:1b: 4e:1c:1b:a7:c5:cd:05:7a:b0:dd:77:91:fd:5f:c3:02:42:49: 00:07:14:5a:19:86:59:c6:ff:20:c2:1d:38:7a:06:12:3c:ea: 4d:2c:fc:4d:5e:b2:e5:e0:69:e3:c5:6e:94:14:b4:b4:02:fe: 0e:d7:02:79:18:92:3b:83:4c:82:be:29:12:39:15:20:2a:d5: 9d:ca:b9:ac:ab:f9:eb:02:fe:f5:c4:6f:a6:dc:1b:7f:f1:eb: 71:2b:33:88:51:f3:31:5d:1a:a0:4d:2a:c0:87:9a:9f:36:8e: 8c:4c:5c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrEKBkVIDRiJ+MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTI0YzlhODctZTAxMi00YmZlLWJkMjgtZWMxYjcyODdkMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApffKjwJkonta05bSrean//y2FE1OICMTWElX Ii+H6tVunPfR5J25MWr3RJt6NPQBM9foMvjcZFsOTyddtICpd2c0+krZg8uTvRwc HVikgbPYIuuQvJ3xQiJ6GcBFE+l861x+VGrRXRjwop1TDteEDIEYgxX5sn/2pIjS oX3DNNIMjzKESB+JEjcuWx4Moufswfazq7XAEiZZaLbtfXvJ4V6znJTbQook6D/Q yvUaOQdHsJNDNq4zSf65I9N5UaQVOFcrJvxvPuAwLpgVn4c7tGxifDg3fao5xYrW T7BaV3d3e6jrw4t6qxT0DGraf4I2aiqeZtuYx0hB9r+aYWGF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyq8BASZbW/cloAqSe1g56faLBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhhZmJmOWItN2YzNy0z N2NjLTkyNDYtYWVkZjk5MGNjMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM2jkX4uU4IRhHZpxhG7bHhFRdSdYSSd7H3KttO5wMGVeP/5dQdaB0s ED1fTJi18S1tDQwUtdu2amsideMwrVy1iPqEyFUPlxDnEMhSPKzPH9c1d7eSbBGG 1ZY15rINOZR8RaV3H9ytiAeJrrsWqHqhws5+6Ggt2rigc4RtelUJcOxuN/zXa4zt cJP6V/XaG04cG6fFzQV6sN13kf1fwwJCSQAHFFoZhlnG/yDCHTh6BhI86k0s/E1e suXgaePFbpQUtLQC/g7XAnkYkjuDTIK+KRI5FSAq1Z3Kuayr+esC/vXEb6bcG3/x 63ErM4hR8zFdGqBNKsCHmp82joxMXBg= -----END CERTIFICATE-----Generated at Sat Apr 5 13:11:17 2025 by rpki-client