$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c0f97df-f5e9-36bc-b978-f1a40bd8af14.roa File: 8c0f97df-f5e9-36bc-b978-f1a40bd8af14.roa (raw, json) Hash identifier: Q+KEf0cRvgOrrZcTk69Yq6eqMUhmc/Q5Xsyx7o0Knog= Subject key identifier: FF:AC:A6:1D:1A:31:93:59:34:0C:F7:DE:F0:3A:6D:80:05:83:6A:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB7D1183503E038CD2600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c0f97df-f5e9-36bc-b978-f1a40bd8af14.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b7:d1:18:35:03:e0:38:cd:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=d8caab54-8c97-4e03-9235-5b0628442b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:a8:7f:7f:4d:e9:09:ee:45:a6:2e:a8:c8: 03:bf:3b:d1:4d:bc:60:f4:5f:fe:db:4d:51:af:ad: 15:47:73:13:30:ff:0e:e1:41:8e:1e:eb:e5:9d:93: 1b:a3:b3:b6:13:94:6c:7c:be:30:45:25:84:89:65: 13:55:32:e9:0b:97:50:18:d4:aa:e5:75:27:28:33: b1:57:fa:99:f6:d7:92:76:bd:fe:63:15:2e:dd:f2: 27:2b:f1:86:88:a7:0c:5c:f6:e3:fc:d8:97:eb:7c: 41:8e:1a:5c:e7:d0:35:d4:bc:8e:44:60:a3:74:31: ba:72:f1:46:a4:fa:2c:0f:fa:5e:e6:91:26:eb:c0: 3c:cd:b3:0e:65:37:b9:d5:90:e9:51:35:f7:55:c3: 4a:c3:02:25:95:7f:05:c5:0e:af:f4:da:27:09:8d: fc:ac:eb:3c:9c:f2:c5:73:d0:96:cf:db:24:82:cd: 02:30:3e:16:de:c0:ba:72:4c:3b:97:7b:d3:2a:9a: 5f:e2:db:f8:0c:dd:9c:8d:9f:48:0a:43:b2:82:82: 4e:f8:fe:58:1b:34:5b:d1:74:07:3e:9b:e6:17:8f: 5d:c7:21:d0:35:2f:04:ed:8a:e5:4b:16:16:a2:c5: 44:9f:59:bb:77:9b:d9:aa:9b:d0:e8:aa:a3:dd:84: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AC:A6:1D:1A:31:93:59:34:0C:F7:DE:F0:3A:6D:80:05:83:6A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c0f97df-f5e9-36bc-b978-f1a40bd8af14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:01:96:0a:02:eb:97:b0:27:e1:cd:8d:91:63:f2:e5:72:c7: 82:6e:68:5c:1e:09:03:99:ec:d1:70:07:69:82:38:b0:c6:cc: 69:72:f6:75:be:d3:33:0c:ef:21:89:1c:e1:79:7b:9c:e3:28: 45:59:39:7d:26:2e:56:5a:59:22:c0:a2:b7:73:79:59:46:8d: 56:24:af:cb:13:78:ab:0b:c2:cb:be:90:ac:2f:39:1a:2a:59: 4c:a6:87:55:8f:e4:cd:84:c5:e1:0b:00:8a:ad:47:5d:22:31: a0:94:41:09:2d:38:4c:da:82:b0:a2:c7:04:da:67:9b:32:87: cd:b9:9f:35:78:f0:f4:7a:20:66:09:74:04:7f:4d:2b:86:96: e5:58:6a:84:70:67:38:aa:65:94:fa:62:c1:9e:3c:0b:80:e3: 93:ef:74:7f:e1:9e:2e:fc:f3:f7:dc:ee:d2:6c:73:32:d1:da: e3:34:32:90:fc:f8:5c:0d:38:36:8b:03:d1:13:93:88:b4:31: 59:45:06:9e:41:aa:f5:6e:a9:f0:e5:1e:d3:17:60:b3:0f:83: 70:37:81:a4:37:f4:e4:e8:c8:d8:e5:cd:c7:74:a6:e6:61:4e: 22:c4:bb:79:64:c3:f5:d3:61:24:a9:52:b1:4a:21:01:dc:4e: 85:17:a8:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrfRGDUD4DjNJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDhjYWFiNTQtOGM5Ny00ZTAzLTkyMzUtNWIwNjI4NDQyYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMWof39N6QnuRaYuqMgDvzvRTbxg9F/+201R r60VR3MTMP8O4UGOHuvlnZMbo7O2E5RsfL4wRSWEiWUTVTLpC5dQGNSq5XUnKDOx V/qZ9teSdr3+YxUu3fInK/GGiKcMXPbj/NiX63xBjhpc59A11LyORGCjdDG6cvFG pPosD/pe5pEm68A8zbMOZTe51ZDpUTX3VcNKwwIllX8FxQ6v9NonCY38rOs8nPLF c9CWz9skgs0CMD4W3sC6ckw7l3vTKppf4tv4DN2cjZ9ICkOygoJO+P5YGzRb0XQH PpvmF49dxyHQNS8E7YrlSxYWosVEn1m7d5vZqpvQ6Kqj3YRUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+sph0aMZNZNAz33vA6bYAFg2qtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMwZjk3ZGYtZjVlOS0z NmJjLWI5NzgtZjFhNDBiZDhhZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcBlgoC65ewJ+HNjZFj8uVyx4JuaFweCQOZ7NFwB2mCOLDGzGly9nW+ 0zMM7yGJHOF5e5zjKEVZOX0mLlZaWSLAordzeVlGjVYkr8sTeKsLwsu+kKwvORoq WUymh1WP5M2ExeELAIqtR10iMaCUQQktOEzagrCixwTaZ5syh825nzV48PR6IGYJ dAR/TSuGluVYaoRwZziqZZT6YsGePAuA45PvdH/hni788/fc7tJsczLR2uM0MpD8 +FwNODaLA9ETk4i0MVlFBp5BqvVuqfDlHtMXYLMPg3A3gaQ39OToyNjlzcd0puZh TiLEu3lkw/XTYSSpUrFKIQHcToUXqL4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:02 2025 by rpki-client