$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5bb7fe6-a631-384f-8c28-1d26543ee466.roa File: a5bb7fe6-a631-384f-8c28-1d26543ee466.roa (raw, json) Hash identifier: rjvpumkN18YdKk4GtKnX/h+16oTWIdAoaXR4GRmno/k= Subject key identifier: 19:A8:F7:F9:A9:83:23:7A:14:C1:86:CF:25:9A:90:AD:9F:94:2D:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC95195F40822BFBB028D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5bb7fe6-a631-384f-8c28-1d26543ee466.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:51:95:f4:08:22:bf:bb:02:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=ddabe82a-0ae0-4e00-b2ec-864fc89e095b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:b8:16:a8:20:19:9c:12:a9:81:3a:f6:c0: 51:ab:1d:41:f3:05:31:74:8f:40:37:70:d1:0a:95: d5:3e:bb:9a:fa:ec:ae:32:ee:15:cf:b5:37:e7:fb: 2a:9f:f2:19:81:c7:52:44:05:b1:57:b8:bc:79:11: f6:b8:2b:f7:eb:6f:8c:0b:5f:77:80:89:06:5e:b6: a4:d9:49:de:ef:cf:75:1c:6c:97:65:8f:cd:8b:d7: 22:06:22:33:d9:d8:e0:74:42:d7:5c:fa:93:a5:89: 01:0a:35:3b:3e:77:0c:f6:fb:d4:04:c4:36:9d:c0: 1e:51:39:52:12:80:83:ab:26:e8:37:b7:67:2f:e3: c0:2b:b8:58:2d:37:76:8e:21:b7:de:8c:e0:40:ce: bf:e9:d2:42:f7:d3:80:bb:f2:d9:14:1a:64:20:97: 0f:78:0b:b4:e9:07:4f:3f:d6:bc:06:d4:4b:64:97: 0d:cf:16:19:0f:99:24:6e:b5:29:2c:d5:71:62:64: 06:b2:f0:88:7f:36:62:f4:85:e3:cf:c5:20:b2:18: b4:d4:c2:3e:28:67:85:0a:ef:70:dc:7d:c4:41:ea: f8:4e:fe:96:5f:4e:42:a9:0a:47:17:d0:11:cb:60: b5:4f:99:07:4b:81:ea:b4:cb:97:c6:f6:1a:14:52: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A8:F7:F9:A9:83:23:7A:14:C1:86:CF:25:9A:90:AD:9F:94:2D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5bb7fe6-a631-384f-8c28-1d26543ee466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:50:dd:0e:dd:ab:23:bf:b0:3a:bf:9c:34:47:97:54:74:31: f6:23:81:00:d0:5d:0d:aa:0f:ef:a8:02:ed:d9:5b:bc:60:57: 61:ba:4b:4e:90:70:8a:25:02:87:74:fb:89:2c:cc:ce:4f:e9: 1d:0e:ea:f6:65:be:39:ea:24:f9:4b:0f:91:fa:cc:18:b9:a6: c3:26:ca:ce:df:02:6b:ab:8c:a1:1a:7b:d3:c3:dc:cd:d4:ea: 95:9f:25:08:a4:2e:a2:90:ce:b8:60:f1:d0:24:2f:81:91:bc: c7:2c:f3:56:05:46:6d:99:83:f7:f5:56:3c:05:24:ff:32:60: 93:df:9b:eb:fe:e0:7d:e0:8e:d9:3a:ee:4a:e0:78:92:c0:70: 4b:39:69:20:f1:61:68:a1:c4:c5:4f:b7:a6:fa:a5:62:55:41: c2:84:10:d4:91:e5:12:6d:db:43:05:34:9e:b6:46:1d:15:69: 9c:af:20:77:1d:0b:77:99:3b:ef:fb:57:1c:2e:fc:64:ff:cb: 3c:fe:f0:2c:a4:9e:53:43:ad:5c:6d:4f:64:d7:10:c6:70:32: c8:b3:2b:c6:72:e0:70:9e:60:3d:9c:b9:6f:3a:68:f9:0b:5a: 10:d1:60:af:19:09:09:f7:67:39:e8:dd:16:5a:6a:7f:83:6c: ad:6c:7c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVGV9Agiv7sCjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGRhYmU4MmEtMGFlMC00ZTAwLWIyZWMtODY0ZmM4OWUwOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NK4FqggGZwSqYE69sBRqx1B8wUxdI9AN3DR CpXVPrua+uyuMu4Vz7U35/sqn/IZgcdSRAWxV7i8eRH2uCv362+MC193gIkGXrak 2Une7891HGyXZY/Ni9ciBiIz2djgdELXXPqTpYkBCjU7PncM9vvUBMQ2ncAeUTlS EoCDqyboN7dnL+PAK7hYLTd2jiG33ozgQM6/6dJC99OAu/LZFBpkIJcPeAu06QdP P9a8BtRLZJcNzxYZD5kkbrUpLNVxYmQGsvCIfzZi9IXjz8Ugshi01MI+KGeFCu9w 3H3EQer4Tv6WX05CqQpHF9ARy2C1T5kHS4HqtMuXxvYaFFLeswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmo9/mpgyN6FMGGzyWakK2flC0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTViYjdmZTYtYTYzMS0z ODRmLThjMjgtMWQyNjU0M2VlNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlQ3Q7dqyO/sDq/nDRHl1R0MfYjgQDQXQ2qD++oAu3ZW7xgV2G6S06Q cIolAod0+4kszM5P6R0O6vZlvjnqJPlLD5H6zBi5psMmys7fAmurjKEae9PD3M3U 6pWfJQikLqKQzrhg8dAkL4GRvMcs81YFRm2Zg/f1VjwFJP8yYJPfm+v+4H3gjtk6 7krgeJLAcEs5aSDxYWihxMVPt6b6pWJVQcKEENSR5RJt20MFNJ62Rh0VaZyvIHcd C3eZO+/7Vxwu/GT/yzz+8CyknlNDrVxtT2TXEMZwMsizK8Zy4HCeYD2cuW86aPkL WhDRYK8ZCQn3Zzno3RZaan+DbK1sfIA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:15 2025 by rpki-client