$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98df59fb-ff52-30bc-8749-72eb5b9f33ee.roa File: 98df59fb-ff52-30bc-8749-72eb5b9f33ee.roa (raw, json) Hash identifier: j0ZUHT2IjO81FnMZlKkQdK4yBC7ixIMohfuPHf+Wppo= Subject key identifier: 52:56:42:BE:4D:9C:09:B8:F7:F8:F9:5A:19:11:2D:50:3E:9C:EF:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C2454823ACF7A8630EDBA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98df59fb-ff52-30bc-8749-72eb5b9f33ee.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.44.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:54:82:3a:cf:7a:86:30:ed:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=024ee39c-96d0-4f86-8e10-49b87f81822e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0d:b3:15:18:0f:da:51:80:6e:cd:d1:57:24: bd:bf:23:3c:75:7a:fd:6b:fa:2a:b1:9c:e2:73:20: 63:00:e4:c7:ee:19:7e:0a:ec:fe:ee:d2:dd:61:55: 40:0d:20:5e:ef:69:43:13:5d:b9:4b:22:83:2e:e0: 46:7c:28:07:a9:0c:6a:bc:0b:da:2a:29:0a:db:b1: 41:a7:0b:fc:37:18:f0:04:df:50:dd:78:10:6d:3d: 5b:e2:94:24:82:39:70:46:74:6b:71:ab:95:b0:b8: ce:40:bb:81:78:e7:c4:18:0d:5a:87:5f:27:46:4d: bc:24:25:ab:8c:24:0d:19:6b:86:36:31:97:4b:8c: bb:81:5a:82:bf:ca:f4:87:c6:ae:77:83:b6:1b:57: ae:43:5e:64:c6:1f:da:58:af:ef:4f:1a:48:14:08: 4a:36:28:b3:68:0e:af:7f:f5:ab:3d:bd:e3:df:ea: 8d:4d:a2:d5:13:22:60:9a:9a:19:10:38:a9:19:a8: f3:ba:f0:48:80:92:e6:4b:a8:e1:35:b7:38:48:e2: 31:e3:f1:cd:9b:fd:25:37:fd:25:c6:91:ce:e7:60: 1d:46:0e:3b:aa:bc:88:b6:e8:eb:15:65:84:1d:0f: 73:00:51:4f:0a:84:0d:5d:64:b0:85:be:5f:b0:18: 96:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:42:BE:4D:9C:09:B8:F7:F8:F9:5A:19:11:2D:50:3E:9C:EF:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98df59fb-ff52-30bc-8749-72eb5b9f33ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:78:6e:26:8f:bc:81:14:f1:60:b8:19:c5:a4:1d:67:62:6e: 62:a4:cb:00:7b:8b:9d:cb:b8:1f:45:40:3a:4a:a8:3a:bf:2e: 7e:a0:0f:71:1d:3b:b3:e0:03:62:ee:de:85:87:90:5c:e7:f3: 63:b9:91:ed:82:21:96:a7:cd:4d:69:7d:b9:3c:ee:57:da:05: 57:2a:22:b9:f3:f8:78:71:ce:81:e8:19:86:6e:b3:58:74:a3: 54:22:1c:17:3b:5a:6d:e8:eb:0b:92:05:f6:eb:34:ab:48:78: 88:50:d7:2d:6c:d8:9a:66:78:94:ff:be:f8:1d:10:70:9f:70: 38:56:53:3c:cf:5c:3c:00:40:62:f2:77:78:1a:7f:25:87:f4: ba:5e:09:f1:d7:95:2b:1b:78:59:a1:a5:04:00:10:7c:ca:3a: 69:ff:a3:07:02:3e:89:73:11:ed:9a:8f:b3:b1:10:91:f2:fc: fe:f1:ed:e3:3f:d3:08:95:92:d2:c8:6e:60:45:bc:66:11:36: 57:aa:c7:e0:df:cd:8a:71:58:9d:36:ff:06:a3:03:c3:1a:3c: 8b:1c:0c:38:5d:01:f1:29:06:74:a7:a9:77:25:b5:da:5e:2e: c1:17:b4:95:eb:67:0f:54:fd:91:20:fd:8f:2a:e3:d5:36:da: c7:cf:0e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJFSCOs96hjDtugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MDI0ZWUzOWMtOTZkMC00Zjg2LThlMTAtNDliODdmODE4MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ2zFRgP2lGAbs3RVyS9vyM8dXr9a/oqsZzi cyBjAOTH7hl+Cuz+7tLdYVVADSBe72lDE125SyKDLuBGfCgHqQxqvAvaKikK27FB pwv8NxjwBN9Q3XgQbT1b4pQkgjlwRnRrcauVsLjOQLuBeOfEGA1ah18nRk28JCWr jCQNGWuGNjGXS4y7gVqCv8r0h8aud4O2G1euQ15kxh/aWK/vTxpIFAhKNiizaA6v f/WrPb3j3+qNTaLVEyJgmpoZEDipGajzuvBIgJLmS6jhNbc4SOIx4/HNm/0lN/0l xpHO52AdRg47qryItujrFWWEHQ9zAFFPCoQNXWSwhb5fsBiWUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJWQr5NnAm49/j5WhkRLVA+nO9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOThkZjU5ZmItZmY1Mi0z MGJjLTg3NDktNzJlYjViOWYzM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC94biaPvIEU8WC4GcWkHWdibmKkywB7i53LuB9FQDpKqDq/Ln6gD3Ed O7PgA2Lu3oWHkFzn82O5ke2CIZanzU1pfbk87lfaBVcqIrnz+HhxzoHoGYZus1h0 o1QiHBc7Wm3o6wuSBfbrNKtIeIhQ1y1s2JpmeJT/vvgdEHCfcDhWUzzPXDwAQGLy d3gafyWH9LpeCfHXlSsbeFmhpQQAEHzKOmn/owcCPolzEe2aj7OxEJHy/P7x7eM/ 0wiVktLIbmBFvGYRNleqx+DfzYpxWJ02/wajA8MaPIscDDhdAfEpBnSnqXcltdpe LsEXtJXrZw9U/ZEg/Y8q49U22sfPDlM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:35 2025 by rpki-client