$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84621a4-8e4d-3ae2-af87-e3a04d4a5d80.roa File: b84621a4-8e4d-3ae2-af87-e3a04d4a5d80.roa (raw, json) Hash identifier: oNmAuMq8EsEWm6w8JPHUksKLs/yvIZ0gPZ7g+2iIHPk= Subject key identifier: 28:B4:41:5B:C6:E8:30:E7:A4:10:41:92:BA:2C:B5:06:82:60:CB:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56AE5758A3DFB4CC668880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84621a4-8e4d-3ae2-af87-e3a04d4a5d80.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 23.209.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ae:57:58:a3:df:b4:cc:66:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=863576cb-e68c-4e12-a1c7-62bbcee46db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:d3:57:df:50:da:57:cc:30:d3:f8:0e:a3: 0a:45:8d:93:4f:1a:ef:c0:9b:7f:49:32:2f:3d:a4: d6:84:27:3f:30:26:dd:7c:26:33:c6:d9:07:0e:95: 4e:63:7b:24:4c:09:76:e6:75:fc:a9:b6:d2:f5:14: 3d:54:53:0f:1e:b2:55:91:68:32:44:e6:10:11:ce: 69:14:b8:92:f0:fd:49:07:65:45:25:f1:e7:56:d3: ab:4e:25:57:a7:12:3b:c8:e5:c5:47:42:7a:61:98: ed:92:6c:c4:21:84:bd:58:b5:d1:b5:30:5a:71:19: 42:29:56:04:c9:2b:0a:73:7a:5e:ef:90:71:87:ad: 16:28:97:07:b3:2e:47:61:ef:45:83:f5:fa:09:76: 17:b2:1e:1d:e0:08:b2:88:23:44:8c:bd:22:06:bd: 4f:44:bf:1f:fb:c9:c9:e8:01:34:85:c0:ac:3a:c7: 05:91:d7:b8:f9:fb:11:94:68:fc:fd:a8:2b:e5:e1: a6:0a:2b:f4:83:7b:57:f0:98:7f:37:e0:8f:b1:ac: fa:35:9f:1d:03:8d:1a:d5:a3:8c:61:e1:15:70:8c: 6c:87:48:94:09:e3:09:df:da:d8:5e:03:95:07:14: 15:02:82:87:b2:19:7e:44:09:ce:8f:db:ad:f5:a4: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:41:5B:C6:E8:30:E7:A4:10:41:92:BA:2C:B5:06:82:60:CB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84621a4-8e4d-3ae2-af87-e3a04d4a5d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:08:f7:5e:a9:a4:e5:41:e3:98:ab:44:25:a0:82:3c:60:4c: 6e:de:27:8c:ff:64:8f:99:ef:70:91:64:e2:6a:59:51:00:41: f8:c1:74:78:21:35:e3:b0:a1:2d:af:eb:f8:a5:25:cf:54:6d: db:11:b4:ae:84:24:e0:1e:5d:25:9c:94:47:b9:ab:7e:7d:9a: 15:9c:90:bb:94:f2:94:ab:bd:2a:00:b3:3f:b7:c2:10:0a:d5: 7a:2e:4d:97:66:6a:60:b1:3d:13:d4:61:f2:ee:4d:8f:49:f3: dc:08:c6:c6:3b:f8:7d:6c:c7:67:10:48:73:ab:4c:94:09:e0: ea:36:88:b7:dd:38:a3:e0:8f:a0:f3:86:ce:84:2e:4c:ed:c7: 98:8e:e7:8d:a7:f2:b2:d8:8b:07:94:85:6b:d8:02:aa:cf:af: d8:6f:cc:c5:af:c6:5c:73:af:48:5f:03:2e:0d:2a:ba:92:12: 86:2e:5c:7c:22:d9:ba:a0:80:06:c5:01:c4:8c:1c:f4:d4:09: e4:be:f7:62:f4:31:5b:de:53:6f:25:4c:5b:6a:3f:00:4b:4d: 57:13:02:56:7d:e3:4b:54:fb:ce:83:50:c6:c0:95:9b:81:97: 86:51:44:48:fc:96:5c:d2:0b:cc:e2:46:ca:a7:43:98:85:67: 75:1c:c9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vq5XWKPftMxmiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODYzNTc2Y2ItZTY4Yy00ZTEyLWExYzctNjJiYmNlZTQ2ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto/TV99Q2lfMMNP4DqMKRY2TTxrvwJt/STIv PaTWhCc/MCbdfCYzxtkHDpVOY3skTAl25nX8qbbS9RQ9VFMPHrJVkWgyROYQEc5p FLiS8P1JB2VFJfHnVtOrTiVXpxI7yOXFR0J6YZjtkmzEIYS9WLXRtTBacRlCKVYE ySsKc3pe75Bxh60WKJcHsy5HYe9Fg/X6CXYXsh4d4AiyiCNEjL0iBr1PRL8f+8nJ 6AE0hcCsOscFkde4+fsRlGj8/agr5eGmCiv0g3tX8Jh/N+CPsaz6NZ8dA40a1aOM YeEVcIxsh0iUCeMJ39rYXgOVBxQVAoKHshl+RAnOj9ut9aRFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi0QVvG6DDnpBBBkrostQaCYMvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg0NjIxYTQtOGU0ZC0z YWUyLWFmODctZTNhMDRkNGE1ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwI916ppOVB45irRCWggjxgTG7eJ4z/ZI+Z73CRZOJqWVEAQfjBdHgh NeOwoS2v6/ilJc9UbdsRtK6EJOAeXSWclEe5q359mhWckLuU8pSrvSoAsz+3whAK 1XouTZdmamCxPRPUYfLuTY9J89wIxsY7+H1sx2cQSHOrTJQJ4Oo2iLfdOKPgj6Dz hs6ELkztx5iO542n8rLYiweUhWvYAqrPr9hvzMWvxlxzr0hfAy4NKrqSEoYuXHwi 2bqggAbFAcSMHPTUCeS+92L0MVveU28lTFtqPwBLTVcTAlZ940tU+86DUMbAlZuB l4ZRREj8llzSC8ziRsqnQ5iFZ3UcySA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:56 2025 by rpki-client