$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/724b26ca-95b3-3860-924c-d921b9e27334.roa File: 724b26ca-95b3-3860-924c-d921b9e27334.roa (raw, json) Hash identifier: 5h6mpEuGRYvf8rTDH8egW5au0fTGPQz5oz6cc6XMgKY= Subject key identifier: 01:41:40:66:AB:99:5C:84:F4:D1:03:20:18:97:6F:B7:14:38:6B:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB857024577550DC89780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/724b26ca-95b3-3860-924c-d921b9e27334.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.34.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b8:57:02:45:77:55:0d:c8:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=ac124d4a-0a98-4328-8f65-f1ab8e45feb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:16:0a:dc:dc:ea:ef:08:0f:98:fe:54:2a: 11:b7:73:a1:8d:9d:8b:9c:41:94:91:e7:31:e6:5d: 34:5f:35:b6:3a:3d:fd:24:34:87:42:95:1e:93:87: 7f:6e:58:ee:50:9b:c4:cd:e5:d7:9f:0f:9c:f3:64: d3:3a:98:b0:b6:c0:a8:34:d8:63:09:1b:7f:8e:23: f8:66:d4:7f:c8:09:c1:69:20:83:c7:fe:38:85:7e: ad:40:17:9b:36:43:1f:f0:37:e6:57:96:a2:fa:f8: 93:20:ee:63:56:f3:63:67:50:4f:1a:d0:b3:aa:16: d4:48:92:69:9b:7f:e9:5b:3a:df:63:37:ab:23:46: 46:02:44:01:7d:40:1e:8c:f3:a5:3c:e6:0b:7c:2a: 26:e9:ef:37:04:70:6e:15:bc:90:4d:3b:d5:f3:00: 6a:37:4d:0b:b6:f5:d7:a1:45:f0:41:c4:89:12:08: 76:34:ab:5e:13:31:0c:4d:a3:d9:a4:14:97:74:b5: 3b:37:d9:3a:62:ac:49:8d:2e:38:e5:3a:c6:14:a3: 0c:42:23:5c:c4:a8:84:3f:1b:b8:54:66:7c:f0:d0: cf:c5:78:d2:64:0a:e7:e2:e2:b7:86:86:70:04:73: c0:24:f3:0d:19:84:c4:90:f3:7e:65:76:ec:73:e8: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:40:66:AB:99:5C:84:F4:D1:03:20:18:97:6F:B7:14:38:6B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/724b26ca-95b3-3860-924c-d921b9e27334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0a:29:de:15:0f:40:75:ae:1c:b7:2b:38:05:f8:06:9e:44: e4:78:2a:ef:be:5f:3e:d9:40:aa:f6:5c:2b:be:7c:b9:de:1b: f3:c4:06:f4:68:26:7d:25:66:6a:36:88:4b:54:c7:c0:1d:61: 62:ef:49:fa:9f:27:8d:0c:45:c1:4b:03:63:50:d4:e1:30:12: b3:71:4f:a0:f6:e4:50:01:8a:30:58:b5:d9:72:d7:93:09:fa: d8:6d:7c:89:83:a9:71:bb:db:e1:c2:63:d9:02:c5:20:56:16: e9:e6:8c:75:e7:cb:f3:2c:ea:19:50:67:f3:3a:46:74:b0:d3: 1e:3f:0a:c9:85:02:db:79:5a:f8:06:8d:5d:01:34:02:69:51: 0f:2a:ea:97:28:e1:52:66:2e:23:06:47:ec:4a:56:86:4e:94: 5a:2c:0b:07:2d:c2:bb:67:f6:39:77:8a:27:46:5b:7b:dd:93: 9a:b7:39:6a:08:f7:be:88:c8:11:fd:7e:42:2b:cc:7f:7f:73: 26:31:c3:67:33:5c:9d:26:ac:78:a8:a1:82:bc:40:91:b4:46: 23:7e:b3:29:49:50:38:bc:3b:5a:73:dd:0b:97:72:9e:f6:0f: d0:44:9b:a5:09:96:32:ff:f9:61:9e:5f:c0:28:a8:fe:2a:41: 85:a2:b2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrhXAkV3VQ3Il4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk YWMxMjRkNGEtMGE5OC00MzI4LThmNjUtZjFhYjhlNDVmZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySAWCtzc6u8ID5j+VCoRt3OhjZ2LnEGUkecx 5l00XzW2Oj39JDSHQpUek4d/bljuUJvEzeXXnw+c82TTOpiwtsCoNNhjCRt/jiP4 ZtR/yAnBaSCDx/44hX6tQBebNkMf8DfmV5ai+viTIO5jVvNjZ1BPGtCzqhbUSJJp m3/pWzrfYzerI0ZGAkQBfUAejPOlPOYLfCom6e83BHBuFbyQTTvV8wBqN00LtvXX oUXwQcSJEgh2NKteEzEMTaPZpBSXdLU7N9k6YqxJjS445TrGFKMMQiNcxKiEPxu4 VGZ88NDPxXjSZArn4uK3hoZwBHPAJPMNGYTEkPN+ZXbsc+ibQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFBQGarmVyE9NEDIBiXb7cUOGsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzI0YjI2Y2EtOTViMy0z ODYwLTkyNGMtZDkyMWI5ZTI3MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwKKd4VD0B1rhy3KzgF+AaeROR4Ku++Xz7ZQKr2XCu+fLneG/PEBvRo Jn0lZmo2iEtUx8AdYWLvSfqfJ40MRcFLA2NQ1OEwErNxT6D25FABijBYtdly15MJ +thtfImDqXG72+HCY9kCxSBWFunmjHXny/Ms6hlQZ/M6RnSw0x4/CsmFAtt5WvgG jV0BNAJpUQ8q6pco4VJmLiMGR+xKVoZOlFosCwctwrtn9jl3iidGW3vdk5q3OWoI 976IyBH9fkIrzH9/cyYxw2czXJ0mrHiooYK8QJG0RiN+sylJUDi8O1pz3QuXcp72 D9BEm6UJljL/+WGeX8AoqP4qQYWisjE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:07 2025 by rpki-client