$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa File: 975b2e17-f15b-3eda-aa6f-40d437f71e08.roa (raw, json) Hash identifier: Llvfy3XcURxWj9mGf3dwXwc4dg+dM09R4Fkc1GqyPlQ= Subject key identifier: B0:14:CD:30:0B:CD:82:2A:73:D7:53:5B:84:24:1A:68:AF:E4:28:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849088169427695A8D647C6E3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 24319 IP address blocks: 23.214.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:69:42:76:95:a8:d6:47:c6:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=4d967d15-11b9-4ff1-83c9-684461f46ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:d9:ca:0f:a8:ef:d0:53:f0:2e:f4:44:54: 86:d3:7c:10:e3:11:56:b6:4e:4e:ce:a5:fd:f7:00: 65:56:3c:7c:ce:5b:17:95:ed:5d:b3:a3:eb:f9:80: b0:e8:cf:7d:92:10:a7:df:64:81:4f:fc:63:c3:d4: 3a:86:77:46:ba:da:43:29:92:17:18:88:03:e6:08: 03:bc:79:25:93:58:02:cb:22:58:fa:f5:ee:aa:69: 3d:6b:21:35:53:01:52:a8:bf:05:2d:7f:8c:6d:41: da:e5:f7:b6:9c:f2:5e:fc:59:94:cd:3e:2f:21:7b: d2:82:9e:c9:76:9b:6b:cc:fe:bf:26:ca:e3:7d:2b: 52:a8:c6:3d:da:ee:3b:d3:b0:78:96:b1:6a:3b:77: cb:6e:94:1c:92:ab:03:c3:1e:b0:f0:76:7b:2e:c4: 2d:89:05:f8:a9:2a:42:39:08:03:98:00:67:c4:05: fc:ec:24:50:d8:25:95:d2:81:6f:b9:18:8a:89:4e: b0:55:b5:f2:1d:43:b2:63:8e:fe:cd:15:35:e3:f6: 13:c2:56:23:94:57:fb:e3:6c:7f:08:c8:ad:fb:c9: 9d:45:ca:3f:32:79:90:34:8d:36:29:16:34:0b:ca: 2c:73:fe:0e:09:75:c2:8c:77:41:b6:85:1e:eb:27: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:14:CD:30:0B:CD:82:2A:73:D7:53:5B:84:24:1A:68:AF:E4:28:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0c:98:a8:03:d0:cc:3e:63:2a:74:09:92:7c:e8:95:98:54: 09:bb:29:01:e1:ed:23:a1:70:e0:9b:cf:fb:79:4c:22:f5:b4: 1b:c5:d3:d7:05:fa:2f:81:eb:bc:6a:c6:0b:ce:f3:e2:cc:e0: 78:bc:e7:e4:25:e7:b4:31:c4:b2:07:52:db:65:b3:67:8c:b0: 52:ae:73:b3:a3:34:57:73:7b:ca:31:07:76:94:d6:6f:4a:59: a7:da:76:b9:b3:c0:5d:49:a8:86:43:98:db:04:e8:5a:28:9c: 8e:fb:8c:08:db:65:f9:cc:9f:d9:43:b3:10:ad:eb:42:df:e0: 5d:ce:8a:f6:69:fd:e1:92:2d:db:c2:ae:01:75:66:26:0f:b1: f3:08:f6:d3:d2:fd:b7:ed:69:45:96:76:a1:6f:97:89:74:6c: f7:cf:c3:c0:8a:e9:02:69:88:98:39:fb:6e:61:32:1b:94:bf: 54:cc:71:6a:17:49:e1:24:dc:10:ef:48:2a:35:5c:66:65:41: 33:59:90:a4:fb:f5:75:f1:53:f5:6d:7d:d9:dc:9f:d3:1d:84: 25:1a:9a:5c:a5:61:5c:47:70:4a:23:97:52:32:53:bc:aa:f2: 11:d6:17:1c:ab:89:7c:32:8f:42:de:b4:40:30:f5:40:a8:93: b0:e1:7e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWlCdpWo1kfG48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NGQ5NjdkMTUtMTFiOS00ZmYxLTgzYzktNjg0NDYxZjQ2ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiPZyg+o79BT8C70RFSG03wQ4xFWtk5OzqX9 9wBlVjx8zlsXle1ds6Pr+YCw6M99khCn32SBT/xjw9Q6hndGutpDKZIXGIgD5ggD vHklk1gCyyJY+vXuqmk9ayE1UwFSqL8FLX+MbUHa5fe2nPJe/FmUzT4vIXvSgp7J dptrzP6/JsrjfStSqMY92u4707B4lrFqO3fLbpQckqsDwx6w8HZ7LsQtiQX4qSpC OQgDmABnxAX87CRQ2CWV0oFvuRiKiU6wVbXyHUOyY47+zRU14/YTwlYjlFf742x/ CMit+8mdRco/MnmQNI02KRY0C8osc/4OCXXCjHdBtoUe6ycejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAUzTALzYIqc9dTW4QkGmiv5CjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc1YjJlMTctZjE1Yi0z ZWRhLWFhNmYtNDBkNDM3ZjcxZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYMmKgD0Mw+Yyp0CZJ86JWYVAm7KQHh7SOhcOCbz/t5TCL1tBvF09cF +i+B67xqxgvO8+LM4Hi85+Ql57QxxLIHUttls2eMsFKuc7OjNFdze8oxB3aU1m9K WafadrmzwF1JqIZDmNsE6FoonI77jAjbZfnMn9lDsxCt60Lf4F3OivZp/eGSLdvC rgF1ZiYPsfMI9tPS/bftaUWWdqFvl4l0bPfPw8CK6QJpiJg5+25hMhuUv1TMcWoX SeEk3BDvSCo1XGZlQTNZkKT79XXxU/Vtfdncn9MdhCUamlylYVxHcEojl1IyU7yq 8hHWFxyriXwyj0LetEAw9UCok7DhfiQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:12 2025 by rpki-client