$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa File: 898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa (raw, json) Hash identifier: 9yHd/SqcLZnA/11EQafMAQIMA5mqksL+YxNoS4molU8= Subject key identifier: FA:5F:18:D0:57:92:63:76:1A:C3:69:84:07:2F:F5:28:76:19:5A:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC95863BC6AB1EAC4661180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:58:63:bc:6a:b1:ea:c4:66:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=6b2a8328-61e5-4eaa-b224-d5a19364dae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3d:1f:a3:2a:be:ea:5d:a2:fb:22:62:8d:68: 92:4f:e7:fc:0a:8d:9a:32:8c:22:cf:01:77:b5:4a: ea:c7:38:6e:12:e0:a1:78:4a:b5:7b:8e:22:e8:8d: 77:8b:b8:5f:a5:a5:fc:28:dd:97:a3:d8:3a:95:70: 19:a2:64:dd:16:77:2f:1e:11:62:32:2b:46:7a:dd: 38:bf:e1:e6:22:f4:49:0a:51:25:62:48:ba:ce:3e: 60:0a:95:ff:8a:b9:dc:eb:e1:4a:64:4d:2d:a8:e6: b5:ab:f5:de:10:d5:e0:67:2b:54:14:44:45:6b:df: 7f:f1:62:08:c1:41:64:c2:87:22:8f:c2:e2:ae:af: 0a:cb:1c:37:bc:f9:72:43:51:b7:3b:aa:28:b4:72: 18:90:b1:2c:e4:38:26:68:f7:ef:a7:39:6d:5b:73: ec:12:49:e1:fe:c5:49:61:06:f9:e3:37:38:c7:0c: e6:cc:98:ae:f1:43:b4:14:e2:3f:9e:16:2d:8a:78: 29:b7:33:f2:4e:30:f3:d6:a1:81:29:d2:40:e8:55: a3:97:cc:57:f6:7f:88:5c:1c:26:02:3d:ab:63:9a: dc:9f:ec:fc:ad:cd:5c:b0:34:bc:ee:a1:8f:5a:30: 6f:ac:c6:81:a0:28:fa:34:c0:af:7d:14:aa:bf:0a: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5F:18:D0:57:92:63:76:1A:C3:69:84:07:2F:F5:28:76:19:5A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6c:9c:79:d2:96:d4:06:50:88:b8:cd:0a:72:77:37:86:50: b9:f9:55:f8:0a:34:fb:96:19:83:97:0a:14:44:0f:d7:e6:2e: 83:14:a0:a3:d1:47:76:56:50:00:86:a4:6f:48:05:c1:07:03: cd:62:c7:b9:59:99:38:23:02:4d:bc:34:93:46:94:21:f9:90: db:e9:41:0f:4c:a8:ce:af:9f:b4:74:8a:bc:94:22:74:d2:fd: 88:db:cd:d0:b3:7c:84:01:42:a8:97:cf:26:23:e6:82:ef:6b: a1:89:51:11:e1:79:07:e1:3a:2b:14:19:5d:e2:4d:ee:da:c9: e7:07:b7:ee:b3:d0:ed:a3:64:10:c2:27:61:aa:f4:f3:4c:80: 38:ab:18:d2:cb:f1:bd:51:0c:69:f4:7e:aa:21:d1:bb:19:67: 91:ac:be:f7:e4:7a:91:13:29:fe:89:08:bc:89:86:02:72:96: eb:32:89:3e:ec:1c:bc:7b:71:a7:7c:22:25:79:0a:21:c7:dd: 4a:a2:bf:86:a5:5c:01:05:87:2f:75:73:d9:bf:a9:a4:c9:f7: da:84:b5:c9:76:a1:6a:d5:87:5f:77:d5:17:37:27:6a:af:82: 62:08:67:c5:45:7c:12:f3:ba:d4:08:f1:f7:bf:e5:6c:8b:b3: da:1a:da:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVhjvGqx6sRmEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmIyYTgzMjgtNjFlNS00ZWFhLWIyMjQtZDVhMTkzNjRkYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz0foyq+6l2i+yJijWiST+f8Co2aMowizwF3 tUrqxzhuEuCheEq1e44i6I13i7hfpaX8KN2Xo9g6lXAZomTdFncvHhFiMitGet04 v+HmIvRJClElYki6zj5gCpX/irnc6+FKZE0tqOa1q/XeENXgZytUFERFa99/8WII wUFkwocij8Lirq8Kyxw3vPlyQ1G3O6ootHIYkLEs5DgmaPfvpzltW3PsEknh/sVJ YQb54zc4xwzmzJiu8UO0FOI/nhYtingptzPyTjDz1qGBKdJA6FWjl8xX9n+IXBwm Aj2rY5rcn+z8rc1csDS87qGPWjBvrMaBoCj6NMCvfRSqvwrdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpfGNBXkmN2GsNphAcv9Sh2GVrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk4ZjIwYjQtYTM5NC0z MGJjLWFmYzUtY2RiZjZlNmE0NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZsnHnSltQGUIi4zQpydzeGULn5VfgKNPuWGYOXChRED9fmLoMUoKPR R3ZWUACGpG9IBcEHA81ix7lZmTgjAk28NJNGlCH5kNvpQQ9MqM6vn7R0iryUInTS /YjbzdCzfIQBQqiXzyYj5oLva6GJURHheQfhOisUGV3iTe7ayecHt+6z0O2jZBDC J2Gq9PNMgDirGNLL8b1RDGn0fqoh0bsZZ5GsvvfkepETKf6JCLyJhgJylusyiT7s HLx7cad8IiV5CiHH3Uqiv4alXAEFhy91c9m/qaTJ99qEtcl2oWrVh1931Rc3J2qv gmIIZ8VFfBLzutQI8fe/5WyLs9oa2vs= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:01 2025 by rpki-client