$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76eab935-3070-3b55-93a5-e525d7df40d2.roa File: 76eab935-3070-3b55-93a5-e525d7df40d2.roa (raw, json) Hash identifier: CJTRCZ5M5bs/o1O/7mRNcGmOiq7Q2oF5ZK2OqkmLR3M= Subject key identifier: 33:49:97:E9:08:0F:E2:5D:E2:21:AC:5C:F5:EE:E9:F6:9D:6F:7D:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849032C58E91AB826EA3DEEA940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76eab935-3070-3b55-93a5-e525d7df40d2.roa Signing time: Wed 26 Feb 2025 16:10:36 +0000 ROA not before: Wed 26 Feb 2025 16:10:36 +0000 ROA not after: Tue 27 May 2025 15:10:36 +0000 asID: 7552 IP address blocks: 23.205.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:2c:58:e9:1a:b8:26:ea:3d:ee:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 16:10:36 2025 GMT Not After : May 27 15:10:36 2025 GMT Subject: CN=1555bb50-1653-4e5d-a732-978ff363d522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e6:77:8f:28:e0:7c:3f:42:6a:64:ec:30:10: 61:09:6f:0e:89:d0:37:82:60:cb:40:f4:d2:30:6d: b1:6c:2a:92:c9:96:a4:b5:6b:2d:f5:37:5a:db:af: 10:16:4c:07:b3:10:12:84:0c:71:78:37:85:80:5a: 32:a4:00:8d:4a:1c:cb:9f:d6:9a:07:48:6a:e8:53: b1:3f:3f:28:bf:97:72:0f:81:fe:08:a3:85:4b:d4: 7d:82:7b:9b:91:4a:b3:de:26:de:fd:c1:bd:c2:8e: 5e:f6:57:70:63:2b:a7:f7:af:39:16:0d:8a:ba:97: 91:d5:ab:c9:ec:d8:a6:9a:cd:19:96:7c:34:92:79: 72:5a:45:91:b0:a4:bc:06:0b:f4:23:cb:e8:dd:25: f3:3f:fd:da:01:26:ea:34:27:ee:69:27:20:4c:9c: dd:b7:63:b4:6c:af:bb:0f:f8:89:be:48:13:63:24: fc:3d:5c:b2:9b:44:af:18:11:40:f7:60:93:d4:47: 27:24:a7:e3:75:ab:02:7b:28:38:88:d4:8c:82:2c: 47:03:78:fc:90:2f:f4:9f:1a:39:7d:ba:ba:9f:99: 1d:24:29:bd:41:98:cd:a9:b1:40:09:6a:21:3f:28: 32:dc:7c:57:d2:66:c4:db:ec:34:ca:b4:80:22:c8: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:49:97:E9:08:0F:E2:5D:E2:21:AC:5C:F5:EE:E9:F6:9D:6F:7D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76eab935-3070-3b55-93a5-e525d7df40d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:63:c7:3b:56:ee:56:08:8d:4a:12:06:6f:82:a1:f7:d8:4c: 02:54:e8:9f:4e:e0:e0:53:fc:1b:1c:65:55:12:fc:2e:ed:ee: fc:08:71:a0:b3:f0:aa:9a:61:2d:43:69:b9:30:90:47:d8:b3: 2b:08:79:c2:88:16:36:65:8a:bf:40:6b:29:8f:4f:04:fa:f0: fb:e2:67:29:ac:4c:f3:47:7e:2a:18:ab:d7:fa:82:d2:a6:5b: 1d:11:59:60:8b:36:fb:3e:06:5b:3e:67:09:89:23:5c:7c:ea: de:ae:79:25:6c:0f:42:03:b5:5c:e2:9d:b1:a2:5d:12:cf:37: 69:e3:4b:e5:01:f7:9a:bc:c2:dc:68:29:cf:87:56:6f:60:61: 7b:a3:6f:21:3a:12:90:df:69:f7:35:21:03:31:9c:9a:1a:c8: b3:10:37:55:be:be:47:95:0c:ef:19:e3:56:f7:49:a1:93:0e: d9:11:ed:f5:6b:0f:48:16:46:d6:5e:7a:b7:f4:40:d3:88:f3: 10:5a:98:de:f4:65:8a:45:9c:5e:e6:3e:16:bb:fc:2e:69:39: 69:8b:00:53:e3:c3:b0:10:3d:0a:87:6e:7a:ad:3f:9f:8b:3a: e9:25:e3:ad:1a:5e:9e:0c:fd:e7:8a:d5:ee:29:92:ff:52:70: 13:94:38:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkDLFjpGrgm6j3uqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE2MTAzNloXDTI1MDUyNzE1MTAzNlowLzEtMCsGA1UEAxMk MTU1NWJiNTAtMTY1My00ZTVkLWE3MzItOTc4ZmYzNjNkNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieZ3jyjgfD9CamTsMBBhCW8OidA3gmDLQPTS MG2xbCqSyZaktWst9Tda268QFkwHsxAShAxxeDeFgFoypACNShzLn9aaB0hq6FOx Pz8ov5dyD4H+CKOFS9R9gnubkUqz3ibe/cG9wo5e9ldwYyun9685Fg2KupeR1avJ 7Nimms0Zlnw0knlyWkWRsKS8Bgv0I8vo3SXzP/3aASbqNCfuaScgTJzdt2O0bK+7 D/iJvkgTYyT8PVyym0SvGBFA92CT1EcnJKfjdasCeyg4iNSMgixHA3j8kC/0nxo5 fbq6n5kdJCm9QZjNqbFACWohPygy3HxX0mbE2+w0yrSAIsiu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNJl+kID+Jd4iGsXPXu6fadb32KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzZlYWI5MzUtMzA3MC0z YjU1LTkzYTUtZTUyNWQ3ZGY0MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF82oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVjxztW7lYIjUoSBm+CoffYTAJU6J9O4OBT/BscZVUS/C7t7vwIcaCz 8KqaYS1DabkwkEfYsysIecKIFjZlir9AaymPTwT68PviZymsTPNHfioYq9f6gtKm Wx0RWWCLNvs+Bls+ZwmJI1x86t6ueSVsD0IDtVzinbGiXRLPN2njS+UB95q8wtxo Kc+HVm9gYXujbyE6EpDfafc1IQMxnJoayLMQN1W+vkeVDO8Z41b3SaGTDtkR7fVr D0gWRtZeerf0QNOI8xBamN70ZYpFnF7mPha7/C5pOWmLAFPjw7AQPQqHbnqtP5+L Oukl460aXp4M/eeK1e4pkv9ScBOUODk= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:11 2025 by rpki-client