$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c00b2ed-00c9-3581-b82a-c99ef5c4d16e.roa File: 8c00b2ed-00c9-3581-b82a-c99ef5c4d16e.roa (raw, json) Hash identifier: 83BXaaDBfwGAwkShD9SUyaJz8prAhflq8wn9Kq1pXXY= Subject key identifier: 66:40:C4:68:14:24:B3:07:BD:70:74:BE:E0:F9:C5:91:4A:41:5A:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584908815D577F21E153F06EC380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c00b2ed-00c9-3581-b82a-c99ef5c4d16e.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 24319 IP address blocks: 23.214.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5d:57:7f:21:e1:53:f0:6e:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=fcdfcfce-9bf2-4590-aa1e-554186144d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:f2:03:be:85:01:b4:aa:6a:ee:19:68:10: 22:24:6c:2d:b8:32:a4:d3:d0:db:0a:f9:50:1c:0e: fc:cc:70:eb:b3:7b:41:16:6c:e2:41:f1:60:e5:45: 85:84:24:25:38:30:31:e2:c0:2d:f8:cd:e3:54:27: 48:63:0c:bd:08:22:95:c2:86:bb:3c:b3:44:5f:83: bb:49:27:87:37:f9:d8:01:bc:dc:d0:5e:8a:a8:5a: 6b:e1:32:bc:06:8f:78:e5:db:e9:90:9c:4c:5a:dc: 2e:73:e1:6d:20:9e:bf:52:d3:ad:50:4b:da:ea:4e: f9:5c:4e:00:68:c4:5d:da:03:d6:9c:9a:df:0f:70: 89:77:33:63:2c:2d:e2:da:39:14:3d:bc:30:99:7c: b2:ad:53:3b:8c:cb:6f:ff:35:f1:5d:c6:ec:a0:0f: 9a:e5:4a:6f:16:fc:7c:c8:ca:69:13:f4:e3:76:ff: 6e:f5:d7:53:57:86:81:7a:a4:c6:2b:b7:6a:55:90: dd:d4:0a:35:06:f8:97:09:6a:1c:cd:52:96:33:61: 8f:94:b9:3b:01:c9:b9:46:5e:56:35:6a:6c:06:a8: eb:04:6b:5a:bb:24:3b:79:f6:3e:e2:6e:70:72:ad: 4e:a7:2f:12:6a:7b:a5:f0:da:67:a9:e1:a6:7b:24: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:40:C4:68:14:24:B3:07:BD:70:74:BE:E0:F9:C5:91:4A:41:5A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c00b2ed-00c9-3581-b82a-c99ef5c4d16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:30:fe:7c:25:bb:dc:2f:fc:e6:06:92:13:dd:84:8f:d2:1d: 29:ab:21:2d:d0:f1:80:69:17:ae:57:90:30:a5:8c:97:d2:db: 4a:be:2f:dc:c5:39:65:14:bd:a5:34:1d:7d:fa:36:48:9d:e7: c4:7d:88:ec:e1:89:80:f0:3e:19:18:2e:7e:0f:75:ac:9e:ee: 5f:6f:b7:15:67:82:2c:bc:bd:ba:fd:2b:4f:00:c3:de:cf:03: 54:1e:19:62:74:e8:7e:35:86:ae:27:38:9f:7a:e2:4f:b2:da: 04:05:a9:c9:76:62:40:87:8d:1a:88:8e:bb:82:31:70:d9:a1: f4:4e:2c:55:bf:b3:ca:57:d7:75:da:de:f7:47:fb:c2:37:77: e1:79:c1:60:23:b1:9c:72:fb:ff:95:96:3c:a5:a4:f0:ed:39: a4:5e:a7:f6:8b:45:28:e9:06:4f:c4:42:d9:a7:4c:c9:26:1f: 58:73:17:ad:57:4e:1b:5b:ed:1d:10:13:8d:62:96:d6:b6:f5: 59:b0:18:6e:d5:ca:80:96:3d:3f:b7:62:b5:64:f2:ee:33:4c: cc:63:be:b7:bf:d5:6e:7b:1c:01:90:18:d2:36:bd:6e:a9:3b: 07:95:13:bc:1c:b9:e1:51:20:48:ec:67:d5:f1:5f:0f:46:2e: 74:64:87:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgV1XfyHhU/Buw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmNkZmNmY2UtOWJmMi00NTkwLWFhMWUtNTU0MTg2MTQ0ZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGTyA76FAbSqau4ZaBAiJGwtuDKk09DbCvlQ HA78zHDrs3tBFmziQfFg5UWFhCQlODAx4sAt+M3jVCdIYwy9CCKVwoa7PLNEX4O7 SSeHN/nYAbzc0F6KqFpr4TK8Bo945dvpkJxMWtwuc+FtIJ6/UtOtUEva6k75XE4A aMRd2gPWnJrfD3CJdzNjLC3i2jkUPbwwmXyyrVM7jMtv/zXxXcbsoA+a5UpvFvx8 yMppE/Tjdv9u9ddTV4aBeqTGK7dqVZDd1Ao1BviXCWoczVKWM2GPlLk7Acm5Rl5W NWpsBqjrBGtauyQ7efY+4m5wcq1Opy8Sanul8NpnqeGmeySxYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZAxGgUJLMHvXB0vuD5xZFKQVr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMwMGIyZWQtMDBjOS0z NTgxLWI4MmEtYzk5ZWY1YzRkMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQw/nwlu9wv/OYGkhPdhI/SHSmrIS3Q8YBpF65XkDCljJfS20q+L9zF OWUUvaU0HX36Nkid58R9iOzhiYDwPhkYLn4Pdaye7l9vtxVngiy8vbr9K08Aw97P A1QeGWJ06H41hq4nOJ964k+y2gQFqcl2YkCHjRqIjruCMXDZofROLFW/s8pX13Xa 3vdH+8I3d+F5wWAjsZxy+/+VljylpPDtOaRep/aLRSjpBk/EQtmnTMkmH1hzF61X Thtb7R0QE41ilta29VmwGG7VyoCWPT+3YrVk8u4zTMxjvre/1W57HAGQGNI2vW6p OweVE7wcueFRIEjsZ9XxXw9GLnRkhwg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:04 2025 by rpki-client