$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3712676-880f-37d0-b42e-548a27ad31a2.roa File: a3712676-880f-37d0-b42e-548a27ad31a2.roa (raw, json) Hash identifier: hMVcTl71SWs5BnoGEZvmW0pY5sD7RGPlvmbSmao5ogo= Subject key identifier: 5A:03:08:E3:D5:5F:15:83:46:C7:67:FD:7E:72:73:72:7A:79:64:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D3765F451742F8E27A788880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3712676-880f-37d0-b42e-548a27ad31a2.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.36.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5f:45:17:42:f8:e2:7a:78:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=cd4c302a-f55a-4c69-8841-45028eac5ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:f6:b2:56:a1:6a:0b:aa:bf:08:fd:a0:0d: 10:a7:f1:ef:9e:95:f7:d1:35:92:de:7b:6f:2b:7d: c2:7b:ed:cc:bd:1d:16:01:ed:40:c9:fe:1c:d1:77: 28:f8:01:5f:a9:31:89:c0:1b:58:8f:5e:12:91:4c: 42:59:ea:78:d9:7e:d3:7d:8b:e2:7d:3b:19:68:64: 41:ef:3c:c4:3c:ec:f8:7e:81:75:a4:33:ff:19:be: e6:87:7c:97:17:44:19:32:3c:66:27:5f:37:99:15: f1:02:0b:5a:d0:ba:59:dd:59:00:fc:59:74:ff:ba: 8a:57:ca:dd:b4:94:d7:8c:9b:a5:5f:15:7a:1e:9e: 0b:a3:35:66:77:46:f4:60:b2:5c:6c:62:1b:4e:2a: 37:f7:7d:1b:c0:ff:da:e2:a1:4b:f6:ea:d7:10:49: 62:21:30:1b:45:46:ed:45:45:e1:11:e4:0d:d4:1d: 88:05:64:1c:d5:69:78:ea:b3:2f:74:ca:ec:81:2f: e0:47:b1:8d:48:db:ce:3f:3c:d4:85:5b:a4:f3:f1: 53:12:25:23:cd:3a:33:fc:db:81:99:2d:3d:f3:1b: 81:cf:68:ff:20:57:5d:09:83:ad:77:ef:6f:99:38: 51:65:a3:45:c9:ef:60:33:64:65:a0:69:2c:03:9e: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:03:08:E3:D5:5F:15:83:46:C7:67:FD:7E:72:73:72:7A:79:64:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3712676-880f-37d0-b42e-548a27ad31a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9c:e1:e7:24:51:31:f8:72:57:56:9f:f3:1b:75:4d:a6:16: fa:10:34:6a:70:ee:bd:5c:86:94:98:24:d6:2a:fb:c2:5e:1c: 3c:0e:12:88:dd:ed:6f:36:f2:cd:dd:d7:09:4b:d9:0c:a8:59: c2:74:92:51:da:ab:12:ab:29:38:40:12:32:6e:6e:51:7c:73: 24:d9:86:1c:af:6e:39:f4:a6:45:3a:29:1f:98:64:42:ef:d2: 50:b8:8b:ff:06:3c:f1:62:e2:d1:2e:da:31:99:75:de:12:4b: 4e:ef:20:e4:32:34:2a:44:ed:20:cc:9f:1b:7b:d2:b1:f1:75: 8a:08:08:97:3c:7a:e4:03:2a:b0:22:c3:ab:5f:ea:18:50:ce: bf:e4:6a:93:26:da:39:13:83:b8:c2:19:91:99:00:dd:f2:6c: 6c:ab:d1:be:40:e9:d8:62:28:57:08:7d:f3:2a:17:2d:ec:6d: 67:19:5e:b5:18:72:1b:a6:0b:e2:44:82:90:16:5f:e1:14:64: fb:05:53:85:71:62:fe:b7:fe:e1:87:ec:7f:1a:ad:f8:ba:a2: 9c:64:6a:63:0a:46:b8:e1:8a:c8:41:2b:f1:0d:77:4c:1a:f6: fd:0e:16:07:57:2f:3c:49:eb:7a:c6:cf:1a:16:04:2f:71:c9: 97:0e:3a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdl9FF0L44np4iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk Y2Q0YzMwMmEtZjU1YS00YzY5LTg4NDEtNDUwMjhlYWM1ZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH/2slahaguqvwj9oA0Qp/HvnpX30TWS3ntv K33Ce+3MvR0WAe1Ayf4c0Xco+AFfqTGJwBtYj14SkUxCWep42X7TfYvifTsZaGRB 7zzEPOz4foF1pDP/Gb7mh3yXF0QZMjxmJ183mRXxAgta0LpZ3VkA/Fl0/7qKV8rd tJTXjJulXxV6Hp4LozVmd0b0YLJcbGIbTio3930bwP/a4qFL9urXEEliITAbRUbt RUXhEeQN1B2IBWQc1Wl46rMvdMrsgS/gR7GNSNvOPzzUhVuk8/FTEiUjzToz/NuB mS098xuBz2j/IFddCYOtd+9vmThRZaNFye9gM2RloGksA56ENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoDCOPVXxWDRsdn/X5yc3J6eWRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM3MTI2NzYtODgwZi0z N2QwLWI0MmUtNTQ4YTI3YWQzMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmc4eckUTH4cldWn/MbdU2mFvoQNGpw7r1chpSYJNYq+8JeHDwOEojd 7W828s3d1wlL2QyoWcJ0klHaqxKrKThAEjJublF8cyTZhhyvbjn0pkU6KR+YZELv 0lC4i/8GPPFi4tEu2jGZdd4SS07vIOQyNCpE7SDMnxt70rHxdYoICJc8euQDKrAi w6tf6hhQzr/kapMm2jkTg7jCGZGZAN3ybGyr0b5A6dhiKFcIffMqFy3sbWcZXrUY chumC+JEgpAWX+EUZPsFU4VxYv63/uGH7H8arfi6opxkamMKRrjhishBK/ENd0wa 9v0OFgdXLzxJ63rGzxoWBC9xyZcOOsE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:00 2025 by rpki-client