$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa File: 84950b3a-15d7-3b08-9186-13789c4594b0.roa (raw, json) Hash identifier: aV/ta2yAz/KWWUrtqKRTh9+/qjAZSFNTKAD0pKbDPe0= Subject key identifier: 43:6F:3F:04:73:28:D4:A3:3D:0B:E0:35:8F:CB:7F:C3:88:28:E9:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC2B289EDA8DBA897E6E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2b:28:9e:da:8d:ba:89:7e:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=b961f6c7-162b-4a5b-ada6-9d56bc3081f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:7a:72:98:e0:37:46:cd:78:e1:a2:ea:73: 8d:b6:0e:1c:53:11:53:5e:51:d9:12:b3:39:9e:03: d3:1a:0f:66:a2:a9:42:ed:6f:d8:18:3a:60:a8:8f: 41:5b:5d:ca:9c:d0:c9:a2:b5:b7:82:af:6a:30:55: 89:c8:da:b1:62:b4:a7:fe:78:b8:c1:55:ff:87:ae: cd:d1:07:6c:ea:f4:3c:00:81:c6:1e:cb:14:22:ed: d2:19:77:5d:44:7a:df:48:3f:b1:b7:b7:b4:b3:23: 37:70:b8:a2:7a:cc:63:e3:63:9f:c7:23:94:dd:26: 8b:e0:8c:99:0d:7c:ea:bd:88:20:51:c3:97:ce:61: 50:16:85:83:09:ec:18:04:39:77:28:30:5f:15:46: 34:26:e1:16:d0:2b:19:00:25:00:c3:47:47:5e:9f: 07:07:e7:df:98:ca:66:75:0c:50:3e:c8:5f:ba:17: 19:6e:f7:b1:f2:42:1f:95:12:65:08:ba:9a:e6:33: 51:59:94:ab:81:4c:44:be:af:10:63:e1:b2:79:ca: f7:51:8b:29:79:6f:3d:ff:b6:41:e9:84:ed:d7:7e: 62:67:73:d8:cd:fe:7f:a5:42:e1:12:eb:6f:ad:8d: fb:6d:53:d5:e2:97:23:ce:be:ad:b9:9e:75:9a:ea: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6F:3F:04:73:28:D4:A3:3D:0B:E0:35:8F:CB:7F:C3:88:28:E9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2a:6b:9a:8d:5e:21:a3:88:b2:8b:53:24:77:12:7b:cd:bf: 24:52:06:7a:c6:35:45:0c:dc:e7:cb:bf:e8:bf:91:78:4f:49: b1:ef:67:44:86:40:d2:46:5a:78:3a:fc:85:74:52:e1:fb:96: 18:4c:b6:94:61:58:f2:a6:aa:8c:a7:58:55:b6:e1:02:12:a6: 21:c4:1f:a6:1c:cb:d9:b6:88:89:54:de:e0:2a:2a:d5:07:cd: e6:12:8a:77:a0:ee:0a:68:55:02:d2:cd:11:1d:73:13:17:a5: 8a:b2:8b:e2:60:1b:87:1f:73:ba:b7:df:fb:3c:e2:e5:8b:92: 17:b9:6b:b4:48:52:d5:20:0a:91:9c:b9:23:69:91:a5:ff:ee: 1b:a7:ec:68:84:15:3f:cb:71:a9:a8:be:5a:0e:24:f8:25:7b: 26:e0:cc:91:5e:e7:3c:a4:29:fa:14:f0:8e:4c:a8:94:f6:b1: 3a:5c:56:c0:40:94:b9:a0:07:71:74:b7:c3:eb:eb:73:d5:2b: a5:13:54:c8:a6:59:88:90:37:46:dc:c1:f5:09:fe:e6:0e:87: 40:83:ea:c5:47:a5:1f:08:b8:50:15:6a:33:ec:bc:87:31:59: 5e:74:70:fe:a0:cb:91:29:bc:f6:35:4b:0c:db:9e:83:de:9b: f3:ab:dd:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CsontqNuol+boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk Yjk2MWY2YzctMTYyYi00YTViLWFkYTYtOWQ1NmJjMzA4MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNF6cpjgN0bNeOGi6nONtg4cUxFTXlHZErM5 ngPTGg9moqlC7W/YGDpgqI9BW13KnNDJorW3gq9qMFWJyNqxYrSn/ni4wVX/h67N 0Qds6vQ8AIHGHssUIu3SGXddRHrfSD+xt7e0syM3cLiiesxj42OfxyOU3SaL4IyZ DXzqvYggUcOXzmFQFoWDCewYBDl3KDBfFUY0JuEW0CsZACUAw0dHXp8HB+ffmMpm dQxQPshfuhcZbvex8kIflRJlCLqa5jNRWZSrgUxEvq8QY+Gyecr3UYspeW89/7ZB 6YTt135iZ3PYzf5/pULhEutvrY37bVPV4pcjzr6tuZ51muq3kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENvPwRzKNSjPQvgNY/Lf8OIKOl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5NTBiM2EtMTVkNy0z YjA4LTkxODYtMTM3ODljNDU5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8qa5qNXiGjiLKLUyR3EnvNvyRSBnrGNUUM3OfLv+i/kXhPSbHvZ0SG QNJGWng6/IV0UuH7lhhMtpRhWPKmqoynWFW24QISpiHEH6Ycy9m2iIlU3uAqKtUH zeYSineg7gpoVQLSzREdcxMXpYqyi+JgG4cfc7q33/s84uWLkhe5a7RIUtUgCpGc uSNpkaX/7hun7GiEFT/LcamovloOJPgleybgzJFe5zykKfoU8I5MqJT2sTpcVsBA lLmgB3F0t8Pr63PVK6UTVMimWYiQN0bcwfUJ/uYOh0CD6sVHpR8IuFAVajPsvIcx WV50cP6gy5EpvPY1SwzbnoPem/Or3aQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:46 2025 by rpki-client