$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5a8e509-04b3-37ee-8feb-39c2c941784b.roa File: b5a8e509-04b3-37ee-8feb-39c2c941784b.roa (raw, json) Hash identifier: nHfnjFzPQ0haRKu25mZ3DNVJaMBas0raPwYkJi6SSDE= Subject key identifier: 25:47:0C:DB:27:F6:43:E7:48:5B:46:0A:E2:27:03:59:4E:D0:E5:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBCFB49E6EC8D56E0BB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5a8e509-04b3-37ee-8feb-39c2c941784b.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bc:fb:49:e6:ec:8d:56:e0:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=fa43b60a-c569-4dd3-84ff-b42036b2633f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:89:27:fb:cf:9d:ee:64:1c:8d:1b:49:b3: 6d:41:04:30:2f:70:01:c7:02:ab:b7:c8:fa:d2:2c: 2c:f8:fb:f2:59:31:92:c2:81:98:6a:d2:50:d0:d5: 2c:0a:16:12:53:cf:22:25:c9:36:0d:e7:c0:99:2e: cb:3a:bc:ad:29:a8:ec:30:48:51:56:8b:04:db:5d: 0a:c3:62:35:ac:9c:6c:32:32:63:f8:f0:0b:ab:93: 18:99:35:f0:9a:87:0e:66:d4:4a:e1:c1:f0:90:86: d9:2e:24:29:65:cc:3c:ee:23:af:11:85:04:c9:5d: 70:c0:ca:b5:9b:c8:8d:58:56:f3:ec:51:0c:64:12: f3:62:40:92:07:12:ff:7b:83:9a:62:f5:5b:60:02: 0c:4b:1f:76:0d:3c:70:1d:2d:a1:12:a9:a7:b2:1f: d2:a6:b4:9a:5f:9d:96:f0:a3:62:cb:92:ff:9f:42: fa:79:87:ce:98:44:04:a1:ea:b8:5b:7f:f7:17:df: d2:55:6e:63:ec:8e:1a:20:7e:e1:f7:64:f4:97:ee: be:c5:b0:e4:5c:24:74:aa:1b:85:61:63:ec:fa:fb: 7b:e3:07:8c:0f:44:ca:fc:02:c5:61:1c:18:2a:24: af:11:c8:74:ac:fb:ca:dd:8d:17:66:31:00:ff:84: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:47:0C:DB:27:F6:43:E7:48:5B:46:0A:E2:27:03:59:4E:D0:E5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5a8e509-04b3-37ee-8feb-39c2c941784b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b3:18:75:d1:4e:76:17:15:1f:7d:2a:e9:c5:24:77:f3:be: 77:90:0b:5d:9c:b5:b8:29:07:36:66:6e:32:f4:e5:f4:c6:07: 88:7d:32:9f:6e:7f:c8:56:63:0e:0f:d5:2c:8c:4e:e2:37:0e: 06:3b:38:ba:11:f9:18:4a:f2:68:0b:24:fc:bf:65:93:54:4d: d2:a1:b1:65:32:95:33:8b:80:9c:e2:9f:2a:ad:ae:4e:83:32: fc:4f:a9:fe:cb:7d:f4:24:26:f5:de:62:52:0b:ee:ce:b1:8a: 33:e2:ef:26:e6:40:3b:ea:5c:83:d2:45:77:32:51:5e:9d:2e: 26:0c:44:68:bd:1c:19:e3:1d:cc:8d:9a:2e:98:f8:ba:08:c8: 8f:eb:71:a8:9c:29:7f:8b:3a:d0:fe:90:d8:82:b3:ee:48:d3: 12:43:f3:25:92:06:ca:f6:9c:31:16:f3:88:2b:13:aa:0e:8f: 2c:18:69:6c:9e:0e:12:a7:9d:46:61:ce:9c:9d:ba:72:14:ed: b6:c7:67:92:88:76:f4:57:3b:49:af:9d:b7:5c:90:56:10:8a: 56:37:12:bf:ad:ef:23:2c:88:41:97:17:d7:8e:26:c8:4f:96: 5e:4f:71:33:c8:03:29:f1:d7:d1:ac:55:c8:98:9b:dc:9c:0b: 8c:54:48:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrz7SebsjVbgu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZmE0M2I2MGEtYzU2OS00ZGQzLTg0ZmYtYjQyMDM2YjI2MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDSJJ/vPne5kHI0bSbNtQQQwL3ABxwKrt8j6 0iws+PvyWTGSwoGYatJQ0NUsChYSU88iJck2DefAmS7LOrytKajsMEhRVosE210K w2I1rJxsMjJj+PALq5MYmTXwmocOZtRK4cHwkIbZLiQpZcw87iOvEYUEyV1wwMq1 m8iNWFbz7FEMZBLzYkCSBxL/e4OaYvVbYAIMSx92DTxwHS2hEqmnsh/SprSaX52W 8KNiy5L/n0L6eYfOmEQEoeq4W3/3F9/SVW5j7I4aIH7h92T0l+6+xbDkXCR0qhuF YWPs+vt74weMD0TK/ALFYRwYKiSvEch0rPvK3Y0XZjEA/4SlXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVHDNsn9kPnSFtGCuInA1lO0OWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjVhOGU1MDktMDRiMy0z N2VlLThmZWItMzljMmM5NDE3ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASzGHXRTnYXFR99KunFJHfzvneQC12ctbgpBzZmbjL05fTGB4h9Mp9u f8hWYw4P1SyMTuI3DgY7OLoR+RhK8mgLJPy/ZZNUTdKhsWUylTOLgJzinyqtrk6D MvxPqf7LffQkJvXeYlIL7s6xijPi7ybmQDvqXIPSRXcyUV6dLiYMRGi9HBnjHcyN mi6Y+LoIyI/rcaicKX+LOtD+kNiCs+5I0xJD8yWSBsr2nDEW84grE6oOjywYaWye DhKnnUZhzpydunIU7bbHZ5KIdvRXO0mvnbdckFYQilY3Er+t7yMsiEGXF9eOJshP ll5PcTPIAynx19GsVciYm9ycC4xUSGM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:39 2025 by rpki-client