$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eafadea-cece-3ec7-b450-0ab6847eac27.roa File: 8eafadea-cece-3ec7-b450-0ab6847eac27.roa (raw, json) Hash identifier: /JyX/FJ8HSwCR3OMgTpxbYHhG7hyAdo7kievIKbjGJE= Subject key identifier: 03:26:2D:42:B7:6B:29:06:88:A7:60:C5:91:46:99:04:E7:8F:3A:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE863B6466AE9305E2D73967 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eafadea-cece-3ec7-b450-0ab6847eac27.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 35994 IP address blocks: 23.217.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:3b:64:66:ae:93:05:e2:d7:39:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=03aa87e5-1415-44ce-b4bd-f824c005d967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:92:fa:8e:9c:98:f0:40:8e:7a:b3:20:59: 22:77:a9:28:ef:de:7a:3b:03:53:7f:13:6c:e3:7e: cf:eb:01:da:36:1a:e1:d1:81:0c:58:20:60:7c:37: 08:a6:d1:88:cb:4b:42:3a:a1:3f:21:c8:93:54:1a: 5a:d1:40:70:41:c8:e3:c1:4a:98:19:c0:73:12:11: c1:48:88:58:3e:f1:71:09:c3:3a:de:8c:c4:c1:92: 22:07:70:a9:10:f8:9d:18:40:ff:1a:7d:d1:e8:d9: 57:7b:4f:24:f6:fa:88:eb:b8:19:44:7a:7d:f4:be: 55:3d:96:fd:80:9d:2d:dc:61:3d:a9:00:40:0d:ff: 9d:c2:76:e5:a6:40:bd:d4:6e:9d:55:25:bc:58:a3: de:fb:34:21:ed:d3:1c:5d:47:3a:cb:1b:a8:11:ed: 38:07:fc:a8:2c:49:a4:73:45:b7:35:72:ab:a7:d5: 4f:fa:08:a8:b3:c0:02:32:6c:e6:6d:f2:17:f5:59: a2:c4:46:ee:35:c7:79:86:d9:1d:75:57:af:ab:49: f3:66:94:01:6b:66:d2:9c:95:a6:b7:eb:1c:69:9f: 39:9b:5f:bd:06:48:82:71:d0:d5:1f:fd:be:31:92: 82:f7:d2:a0:f0:51:a5:6c:3b:42:d5:5a:9f:e8:b1: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:26:2D:42:B7:6B:29:06:88:A7:60:C5:91:46:99:04:E7:8F:3A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eafadea-cece-3ec7-b450-0ab6847eac27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f6:85:e9:08:8f:a5:88:2f:a9:1f:c2:44:8f:e3:61:5b:31: d7:e0:38:d0:de:9e:8e:cf:12:86:f5:9d:db:15:86:23:2e:40: ea:92:14:78:cb:37:01:3c:d0:48:c3:91:bd:9c:02:db:40:72: 55:2d:33:74:60:51:91:17:18:69:d2:c1:59:a2:d6:e7:43:a9: ed:1a:a5:b9:4a:75:e3:1e:3d:4e:4b:f7:0c:f6:25:9a:6b:a2: 6c:cd:b7:7a:e6:13:4a:94:97:24:4a:8c:59:c4:74:f3:5c:b8: 2a:5f:1f:3d:05:33:b4:e3:5d:f6:df:6e:b4:e5:b3:38:4d:94: 81:df:12:5a:95:e4:01:0e:72:b0:d2:1f:b1:46:4c:94:87:e0: 68:e9:23:8e:43:d1:11:dc:ed:ae:f0:43:93:85:1c:a7:4d:59: c3:13:76:94:4c:be:e1:7a:c0:1c:8f:53:74:98:96:6d:22:b0: 44:f6:1e:8d:3e:3a:83:8e:82:26:52:cb:e3:56:d5:e3:ad:23: 0e:74:51:7d:9f:ab:0c:9d:05:c6:dd:e1:29:5b:42:dd:9b:cd: b6:14:67:7d:91:40:f1:85:8a:12:5b:1e:6e:ab:e7:35:19:9e: 45:13:9a:2b:5e:58:9b:ae:f9:cf:cd:bb:e7:43:bc:3f:f4:c5: 16:16:df:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjtkZq6TBeLXOWcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MDNhYTg3ZTUtMTQxNS00NGNlLWI0YmQtZjgyNGMwMDVkOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigKS+o6cmPBAjnqzIFkid6ko7956OwNTfxNs 437P6wHaNhrh0YEMWCBgfDcIptGIy0tCOqE/IciTVBpa0UBwQcjjwUqYGcBzEhHB SIhYPvFxCcM63ozEwZIiB3CpEPidGED/Gn3R6NlXe08k9vqI67gZRHp99L5VPZb9 gJ0t3GE9qQBADf+dwnblpkC91G6dVSW8WKPe+zQh7dMcXUc6yxuoEe04B/yoLEmk c0W3NXKrp9VP+gios8ACMmzmbfIX9VmixEbuNcd5htkddVevq0nzZpQBa2bSnJWm t+scaZ85m1+9BkiCcdDVH/2+MZKC99Kg8FGlbDtC1Vqf6LFRowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMmLUK3aykGiKdgxZFGmQTnjzq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVhZmFkZWEtY2VjZS0z ZWM3LWI0NTAtMGFiNjg0N2VhYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9liMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD2hekIj6WIL6kfwkSP42FbMdfgONDeno7PEob1ndsVhiMuQOqSFHjL NwE80EjDkb2cAttAclUtM3RgUZEXGGnSwVmi1udDqe0apblKdeMePU5L9wz2JZpr omzNt3rmE0qUlyRKjFnEdPNcuCpfHz0FM7TjXfbfbrTlszhNlIHfElqV5AEOcrDS H7FGTJSH4GjpI45D0RHc7a7wQ5OFHKdNWcMTdpRMvuF6wByPU3SYlm0isET2Ho0+ OoOOgiZSy+NW1eOtIw50UX2fqwydBcbd4SlbQt2bzbYUZ32RQPGFihJbHm6r5zUZ nkUTmiteWJuu+c/Nu+dDvD/0xRYW308= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:51 2025 by rpki-client