$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97c0e39c-6b06-3169-812b-13a6e8c2800d.roa File: 97c0e39c-6b06-3169-812b-13a6e8c2800d.roa (raw, json) Hash identifier: VZVLKZZucE43uhUitfP3Uibz5hwCwVfl/43ziU0ajCc= Subject key identifier: 3F:9B:3A:B4:C0:9F:04:A3:45:4B:E1:C4:4A:E8:B5:91:28:1C:43:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B5F028506D79084550A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97c0e39c-6b06-3169-812b-13a6e8c2800d.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.219.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5f:02:85:06:d7:90:84:55:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=5053ea01-1840-4716-95e6-5c5c1f475dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:b6:82:0c:fd:0c:df:16:ae:ed:03:a7:0f: ea:35:ea:4a:4a:a7:58:4b:97:b4:8d:54:83:7c:f4: 29:02:54:07:85:8f:68:75:f3:5a:11:f5:44:f3:c6: f6:2c:e6:67:eb:2e:21:45:fe:55:c9:96:e7:cd:16: 40:d4:ee:25:d5:c5:b8:1f:19:12:f0:bf:0c:b8:16: 5b:09:7e:31:44:6b:76:e2:00:64:4d:77:e6:6a:70: 41:40:8a:66:39:05:0c:78:8f:70:a2:b9:30:44:7e: 8f:51:f7:80:7e:8d:9f:c2:86:47:c3:27:7a:79:62: 77:f5:7e:d1:06:88:70:4a:dd:ce:05:41:35:1b:b8: 45:2f:0d:36:ba:72:6e:d2:6a:e4:1c:1b:34:be:e2: e6:7e:6c:15:96:7d:f7:4b:76:8d:4c:d4:88:7b:22: 82:ec:0d:56:d6:ad:ec:a6:05:4b:c6:90:9d:4b:9e: 12:2e:96:d2:cc:56:69:49:70:ea:5f:53:40:07:a1: 9f:14:aa:12:e0:3f:0d:e2:01:f0:ac:86:f5:5f:43: a5:7f:0c:a8:d7:e9:de:06:3a:65:2e:99:b9:74:fd: 14:6a:cd:c8:59:10:cb:30:8b:02:4b:3e:e1:35:27: 80:ba:ae:cc:cf:62:b4:47:5e:6d:91:79:f7:1f:7a: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9B:3A:B4:C0:9F:04:A3:45:4B:E1:C4:4A:E8:B5:91:28:1C:43:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97c0e39c-6b06-3169-812b-13a6e8c2800d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:dd:61:b3:1f:00:a4:4b:9b:14:68:08:82:2b:e2:5d:34:03: 06:85:78:a9:e6:89:92:3c:b7:95:6e:f7:24:40:f0:4a:b6:66: 63:f8:31:7e:b7:55:d1:c9:30:8e:e6:48:c9:ef:63:07:2d:a7: 1c:72:42:63:e2:89:f6:b7:ee:da:56:f6:a3:04:2d:8f:3f:27: 14:90:3c:30:1a:9a:79:6c:67:fd:cd:39:25:96:02:74:07:a9: 60:c5:a7:54:5e:ba:d5:83:42:62:94:f6:40:3c:29:03:5b:e6: 8f:76:a8:21:c7:c5:d6:3b:10:32:76:fb:dc:1e:e6:9a:a7:b3: cd:81:11:16:45:f6:3f:d5:b1:4c:63:88:fe:67:8d:d0:5a:0a: 45:89:04:e9:a7:ff:c3:c5:2f:ed:e1:b3:96:2d:78:ee:6e:2c: ab:fd:eb:a7:e6:9f:92:28:db:6f:c1:13:d8:9c:a4:11:18:93: 2b:1b:99:16:3d:c0:2e:e0:75:2e:03:3f:03:fb:67:f3:62:71: e5:73:09:26:0e:51:a0:59:2a:d3:34:f7:bc:7d:9a:6c:eb:70: ff:59:37:87:da:79:9c:4b:c5:4d:86:32:13:ce:2d:6e:26:a3: a5:86:e6:92:c9:e2:4a:9a:9f:bb:b9:84:01:69:4e:71:7c:5c: 65:25:e0:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC18ChQbXkIRVCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk NTA1M2VhMDEtMTg0MC00NzE2LTk1ZTYtNWM1YzFmNDc1ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oe2ggz9DN8Wru0Dpw/qNepKSqdYS5e0jVSD fPQpAlQHhY9odfNaEfVE88b2LOZn6y4hRf5VyZbnzRZA1O4l1cW4HxkS8L8MuBZb CX4xRGt24gBkTXfmanBBQIpmOQUMeI9workwRH6PUfeAfo2fwoZHwyd6eWJ39X7R BohwSt3OBUE1G7hFLw02unJu0mrkHBs0vuLmfmwVln33S3aNTNSIeyKC7A1W1q3s pgVLxpCdS54SLpbSzFZpSXDqX1NAB6GfFKoS4D8N4gHwrIb1X0Olfwyo1+neBjpl Lpm5dP0Uas3IWRDLMIsCSz7hNSeAuq7Mz2K0R15tkXn3H3oVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+bOrTAnwSjRUvhxErotZEoHEMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTdjMGUzOWMtNmIwNi0z MTY5LTgxMmItMTNhNmU4YzI4MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9skMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrdYbMfAKRLmxRoCIIr4l00AwaFeKnmiZI8t5Vu9yRA8Eq2ZmP4MX63 VdHJMI7mSMnvYwctpxxyQmPiifa37tpW9qMELY8/JxSQPDAamnlsZ/3NOSWWAnQH qWDFp1ReutWDQmKU9kA8KQNb5o92qCHHxdY7EDJ2+9we5pqns82BERZF9j/VsUxj iP5njdBaCkWJBOmn/8PFL+3hs5YteO5uLKv966fmn5Io22/BE9icpBEYkysbmRY9 wC7gdS4DPwP7Z/NiceVzCSYOUaBZKtM097x9mmzrcP9ZN4faeZxLxU2GMhPOLW4m o6WG5pLJ4kqan7u5hAFpTnF8XGUl4IA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:29 2025 by rpki-client