$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa File: 70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa (raw, json) Hash identifier: 0sC3u/NeVRhVMbTRU9f129hm4a8wGfnHKX2XLAtADvM= Subject key identifier: 49:14:76:36:57:0A:08:1E:C9:2E:C0:6A:8B:98:AD:46:2A:8E:02:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584908816BB51B29A016DC9A8044 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 23.79.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6b:b5:1b:29:a0:16:dc:9a:80:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=89cd7b8e-f4ed-4de2-bc51-309252e00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:7f:32:61:4b:e9:85:41:6f:42:4a:90:f6: 5a:bc:88:cf:5a:60:a8:c4:f4:10:ec:83:01:fd:7c: 9d:95:79:47:8b:49:29:40:2a:9a:a7:86:f3:fd:09: 6a:86:10:8d:e0:7a:76:e6:ee:77:ec:45:98:21:cf: 8b:80:6e:83:06:58:04:a9:be:62:8c:56:d6:90:54: 26:5a:6a:fb:d5:ce:49:b5:e8:9e:4e:c1:02:30:5c: 62:ef:66:82:37:44:07:7b:03:33:81:47:05:9d:c3: 1e:7d:4c:01:56:0f:2e:3f:1f:fa:17:4a:4b:73:2d: 2b:4b:ea:8e:e7:00:ee:9a:72:91:22:92:5b:5f:0f: 82:55:06:2e:fb:df:ea:29:5f:9e:13:b2:93:8d:d5: 79:f3:f3:53:f8:95:85:a8:eb:74:9c:ab:a0:bf:4d: 69:16:e0:43:b8:88:e4:53:04:47:c9:e8:9b:e5:75: 9f:c2:06:e7:43:03:eb:7d:a3:b9:32:f4:5a:fb:a3: b6:a9:c9:98:d6:0c:71:ff:f4:0d:d5:d1:6d:4e:4d: 0c:63:06:5e:f7:8a:34:f0:3d:0f:c6:21:72:84:7c: af:86:cf:b4:c9:2c:9c:b8:c5:6b:b9:5b:29:ae:a1: 9f:8c:ed:5a:ee:d2:b1:18:14:aa:84:25:be:7f:5d: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:14:76:36:57:0A:08:1E:C9:2E:C0:6A:8B:98:AD:46:2A:8E:02:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.79.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c7:4a:d0:a8:1c:b8:ef:00:11:17:90:e9:79:47:09:bf:33: 5b:61:40:91:e9:9f:3b:93:67:01:f3:ad:9c:81:8c:e8:cc:4a: f5:9b:8d:c5:74:79:19:70:b3:c5:01:7a:ab:2a:3e:51:20:d9: 0d:2f:bf:3a:b3:bd:0c:99:b0:28:33:0e:82:a6:1c:95:d5:23: bd:6f:0b:94:1a:bc:bd:1b:2a:97:67:5a:36:9b:c2:08:c6:17: 48:52:bd:0a:2d:12:88:e8:44:46:2c:d2:5a:e2:84:e5:2d:18: 24:3c:5b:d9:a5:13:f2:0b:32:fb:96:a0:26:8d:99:c2:55:b9: 9b:99:a4:9f:ba:1b:03:85:b5:fc:39:6c:d5:85:56:e1:cd:5c: cc:68:e4:5a:1e:07:3b:fd:2d:96:61:ac:dd:5d:cc:3c:f2:c0: d9:1e:a4:5e:c8:99:28:ff:90:27:ef:b5:5d:af:f6:26:30:01: 2c:07:24:f1:8c:13:c1:c9:ae:85:7d:0c:0a:51:17:9f:d2:89: 40:5b:f4:c5:98:a3:9c:70:b3:00:25:0d:da:43:af:2c:10:da: 04:36:ce:a5:57:4c:b5:56:de:11:9e:8c:22:fd:4d:5a:4d:47: f7:80:ac:8c:5e:44:3f:dc:c3:fe:49:04:41:26:a4:b0:33:05: b2:2c:fe:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWu1GymgFtyagEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ODljZDdiOGUtZjRlZC00ZGUyLWJjNTEtMzA5MjUyZTAwOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoct/MmFL6YVBb0JKkPZavIjPWmCoxPQQ7IMB /XydlXlHi0kpQCqap4bz/QlqhhCN4Hp25u537EWYIc+LgG6DBlgEqb5ijFbWkFQm Wmr71c5JteieTsECMFxi72aCN0QHewMzgUcFncMefUwBVg8uPx/6F0pLcy0rS+qO 5wDumnKRIpJbXw+CVQYu+9/qKV+eE7KTjdV58/NT+JWFqOt0nKugv01pFuBDuIjk UwRHyeib5XWfwgbnQwPrfaO5MvRa+6O2qcmY1gxx//QN1dFtTk0MYwZe94o08D0P xiFyhHyvhs+0ySycuMVruVsprqGfjO1a7tKxGBSqhCW+f13p5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkUdjZXCggeyS7AaouYrUYqjgIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBkMTQyYzQtNmQ5My0z YjkyLWEwNWUtMmE5MDFlMTdmNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0/lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTHStCoHLjvABEXkOl5Rwm/M1thQJHpnzuTZwHzrZyBjOjMSvWbjcV0 eRlws8UBeqsqPlEg2Q0vvzqzvQyZsCgzDoKmHJXVI71vC5QavL0bKpdnWjabwgjG F0hSvQotEojoREYs0lrihOUtGCQ8W9mlE/ILMvuWoCaNmcJVuZuZpJ+6GwOFtfw5 bNWFVuHNXMxo5FoeBzv9LZZhrN1dzDzywNkepF7ImSj/kCfvtV2v9iYwASwHJPGM E8HJroV9DApRF5/SiUBb9MWYo5xwswAlDdpDrywQ2gQ2zqVXTLVW3hGejCL9TVpN R/eArIxeRD/cw/5JBEEmpLAzBbIs/pM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:20 2025 by rpki-client