$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fda035-67fc-3850-9947-57c35dc0207b.roa File: a0fda035-67fc-3850-9947-57c35dc0207b.roa (raw, json) Hash identifier: Pe4VNixVHqiiqP979Hu6SszBPTQtVNIzdYrnk1Iq0ps= Subject key identifier: F2:B4:4B:52:B7:D1:78:09:F1:72:54:C4:88:52:BE:D1:23:C4:97:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584908816A60266C0F55E47E0580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fda035-67fc-3850-9947-57c35dc0207b.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 32787 IP address blocks: 23.58.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6a:60:26:6c:0f:55:e4:7e:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=9c20c964-5149-4b41-b07a-d1071e5f7d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:94:8d:9f:d1:d4:cb:57:42:77:f2:eb:fc: a3:41:0b:0e:b0:c1:8b:65:0e:ce:1e:2d:78:3d:6a: bb:49:36:eb:ba:96:fa:66:53:f2:75:69:cf:d6:48: ad:3d:45:cb:7d:2f:85:a7:8c:45:25:cc:7b:e2:67: c5:15:0c:f2:b0:2b:b1:08:8d:4d:c7:a7:4d:0a:1e: 89:ce:29:ab:ab:51:71:8f:05:88:d7:90:6b:63:dd: 52:ff:13:bb:9a:3b:15:7d:23:a0:f2:6e:8e:97:ec: b1:41:65:89:d3:78:86:76:3d:00:62:ec:15:19:11: 56:a0:f6:53:74:8a:39:7a:50:bb:eb:4d:37:1d:63: a1:a3:8e:9f:db:58:43:44:dc:8d:5b:0c:74:e9:88: 3b:62:80:9b:f8:bb:8f:f7:74:bd:fb:7c:75:15:92: da:d5:ac:f8:b7:ed:62:cd:f8:91:3d:e1:80:20:74: 24:14:23:93:1b:38:5e:76:83:73:d1:a9:2d:93:8e: 64:6e:c6:81:2a:e9:5a:ba:a4:41:aa:e5:0d:ce:01: 1f:86:9a:4d:43:9b:52:6c:b7:32:1b:ba:86:f9:4f: c2:2d:ab:f3:94:42:e0:46:40:6a:3c:7a:0f:3d:3d: 02:c4:20:0d:22:c9:87:e6:8f:db:58:3a:ca:9c:f3: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:4B:52:B7:D1:78:09:F1:72:54:C4:88:52:BE:D1:23:C4:97:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fda035-67fc-3850-9947-57c35dc0207b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:22:72:f7:40:7a:58:a1:a8:25:4f:be:82:f8:a3:a6:9d:5c: d6:97:7b:7f:fb:98:ed:85:ab:5c:1a:73:68:a9:86:50:fc:b6: e3:04:bf:97:23:0f:5c:da:7b:4c:50:b5:45:13:a1:6a:07:17: 3a:a5:21:24:15:eb:a9:7e:0b:bb:1a:18:4f:c0:14:a2:c9:19: ab:ee:51:20:19:24:80:02:b9:80:32:77:d1:42:5f:9a:b9:30: 5d:22:3f:9f:ba:e4:10:80:c1:46:82:7d:28:41:f3:ff:f0:db: 1c:94:83:0f:df:06:31:8c:c7:fc:75:22:7c:e0:cb:04:45:2a: e5:2e:98:26:1f:d6:6f:df:8d:81:88:b4:cc:5f:89:95:71:91: f5:61:13:47:4e:d1:81:96:63:a4:5f:53:26:23:a4:43:c1:1b: 5a:03:6a:8f:c9:76:3a:b6:7e:33:39:b5:dc:8d:d1:82:cb:a6: 2b:c7:68:3c:3e:1a:59:04:64:10:35:da:9c:fe:a8:12:94:0e: 17:72:bf:23:ad:3a:a2:52:62:8e:d0:77:e2:1f:32:95:78:88: 5f:b0:0f:d6:b7:e6:b8:2f:04:31:cd:6a:cf:d7:09:43:39:c0: f7:a1:1b:9c:8e:5f:11:f6:06:60:b7:82:59:42:5a:65:bc:be: f5:e4:e0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWpgJmwPVeR+BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OWMyMGM5NjQtNTE0OS00YjQxLWIwN2EtZDEwNzFlNWY3ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNCUjZ/R1MtXQnfy6/yjQQsOsMGLZQ7OHi14 PWq7STbrupb6ZlPydWnP1kitPUXLfS+Fp4xFJcx74mfFFQzysCuxCI1Nx6dNCh6J zimrq1FxjwWI15BrY91S/xO7mjsVfSOg8m6Ol+yxQWWJ03iGdj0AYuwVGRFWoPZT dIo5elC76003HWOho46f21hDRNyNWwx06Yg7YoCb+LuP93S9+3x1FZLa1az4t+1i zfiRPeGAIHQkFCOTGzhedoNz0aktk45kbsaBKulauqRBquUNzgEfhppNQ5tSbLcy G7qG+U/CLavzlELgRkBqPHoPPT0CxCANIsmH5o/bWDrKnPNQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK0S1K30XgJ8XJUxIhSvtEjxJecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBmZGEwMzUtNjdmYy0z ODUwLTk5NDctNTdjMzVkYzAyMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8icvdAelihqCVPvoL4o6adXNaXe3/7mO2Fq1wac2iphlD8tuMEv5cj D1zae0xQtUUToWoHFzqlISQV66l+C7saGE/AFKLJGavuUSAZJIACuYAyd9FCX5q5 MF0iP5+65BCAwUaCfShB8//w2xyUgw/fBjGMx/x1InzgywRFKuUumCYf1m/fjYGI tMxfiZVxkfVhE0dO0YGWY6RfUyYjpEPBG1oDao/Jdjq2fjM5tdyN0YLLpivHaDw+ GlkEZBA12pz+qBKUDhdyvyOtOqJSYo7Qd+IfMpV4iF+wD9a35rgvBDHNas/XCUM5 wPehG5yOXxH2BmC3gllCWmW8vvXk4FU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:43 2025 by rpki-client