$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0635fbb-0b42-3855-b284-94fc6d0064fd.roa File: c0635fbb-0b42-3855-b284-94fc6d0064fd.roa (raw, json) Hash identifier: BgO78J+0AQELZ/K3Zmb2pJA/T4CD8hlllIv09hPVYUg= Subject key identifier: 81:02:64:28:0A:BA:1E:08:81:C0:82:A9:02:A8:D8:46:36:30:69:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D71699310210965B2B30340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0635fbb-0b42-3855-b284-94fc6d0064fd.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.35.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:69:93:10:21:09:65:b2:b3:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=f5f8b9de-fac5-4fe0-ac1b-bd050e2635ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:04:9a:32:06:2e:78:7e:42:4e:b7:ea:f6: 80:ed:46:79:77:f7:8d:64:bd:aa:4f:73:a7:30:49: 93:e3:f3:f1:05:39:9d:3d:53:04:84:8e:4e:e9:00: 2d:57:5a:2a:25:2d:32:a0:79:59:fc:b8:40:a9:2d: 93:b0:9c:c2:ee:bb:26:34:95:70:06:24:b5:b2:5e: aa:87:f8:78:aa:17:f9:1d:c7:c9:b8:50:8e:72:6e: 43:e2:1c:cb:9c:1e:3b:32:fd:2d:2e:2d:bb:46:6b: 6d:bf:4c:63:57:b1:00:f2:89:bc:0b:bb:df:6c:c8: 39:c1:24:10:99:d4:5a:b7:75:ce:6e:03:7f:77:1c: 2b:5c:6c:c0:be:ac:bc:77:dc:c9:d4:41:1e:b4:2f: 4d:89:ac:49:e6:b3:4b:88:bf:2c:ba:51:f9:fe:7b: 60:eb:60:48:dd:83:e4:08:87:83:78:54:53:2e:a6: 13:61:a3:f0:9b:8f:38:b2:0e:27:7e:5f:f3:a3:f7: 5c:98:3d:b2:e8:61:d1:a8:c2:90:c6:7e:d7:57:0e: e4:96:74:6c:b2:40:0c:6e:20:ff:72:f2:21:a9:78: 91:55:4e:8a:34:b5:07:5e:59:71:3e:e4:e5:ec:7e: ba:cc:e0:23:15:73:43:17:34:e8:87:d1:b6:54:b1: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:02:64:28:0A:BA:1E:08:81:C0:82:A9:02:A8:D8:46:36:30:69:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0635fbb-0b42-3855-b284-94fc6d0064fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:56:d9:43:85:ba:77:a8:1d:2b:6e:14:3e:76:98:60:13:4c: a3:4b:6a:ff:09:c1:69:a1:91:94:8c:17:70:c8:c4:6a:3a:de: 23:21:10:72:4d:f3:47:8f:d2:e6:5a:36:dd:a2:b5:67:e8:f1: fc:38:3c:c1:45:1f:c6:bb:84:d7:24:db:e7:dd:b7:95:42:48: 8e:1a:94:3e:2a:83:2a:2b:a0:d9:82:6e:ad:06:34:0c:95:47: 03:a3:1f:99:fd:b0:4e:d6:e2:0b:f3:57:02:30:12:ca:35:37: ae:ba:4a:33:03:57:0e:d7:2c:1c:91:1e:6c:e5:d2:96:b1:0b: 39:91:cf:d4:d5:8a:da:2a:10:b8:7b:2b:78:eb:18:72:20:69: 21:a3:79:5e:3d:49:d4:aa:e4:75:d8:1c:83:f6:26:20:d2:98: f9:a7:a4:e6:aa:8e:bc:2d:91:0a:47:34:5c:93:f1:0e:40:b1: 60:1d:1e:03:92:07:b4:54:40:ff:84:4c:f9:eb:c6:85:d3:3e: 78:0d:f8:9a:2d:ec:fe:db:1e:33:58:73:b9:a7:da:67:91:cd: fe:5d:1b:7b:13:42:7a:22:28:37:03:9c:e3:d0:93:3f:37:ae: 61:cc:e6:20:37:be:49:9b:3b:b0:62:84:8d:2d:69:73:1f:44: 35:d0:64:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWmTECEJZbKzA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjVmOGI5ZGUtZmFjNS00ZmUwLWFjMWItYmQwNTBlMjYzNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTAEmjIGLnh+Qk636vaA7UZ5d/eNZL2qT3On MEmT4/PxBTmdPVMEhI5O6QAtV1oqJS0yoHlZ/LhAqS2TsJzC7rsmNJVwBiS1sl6q h/h4qhf5HcfJuFCOcm5D4hzLnB47Mv0tLi27Rmttv0xjV7EA8om8C7vfbMg5wSQQ mdRat3XObgN/dxwrXGzAvqy8d9zJ1EEetC9NiaxJ5rNLiL8sulH5/ntg62BI3YPk CIeDeFRTLqYTYaPwm484sg4nfl/zo/dcmD2y6GHRqMKQxn7XVw7klnRsskAMbiD/ cvIhqXiRVU6KNLUHXllxPuTl7H66zOAjFXNDFzToh9G2VLE4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIECZCgKuh4IgcCCqQKo2EY2MGlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA2MzVmYmItMGI0Mi0z ODU1LWIyODQtOTRmYzZkMDA2NGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZW2UOFuneoHStuFD52mGATTKNLav8JwWmhkZSMF3DIxGo63iMhEHJN 80eP0uZaNt2itWfo8fw4PMFFH8a7hNck2+fdt5VCSI4alD4qgyoroNmCbq0GNAyV RwOjH5n9sE7W4gvzVwIwEso1N666SjMDVw7XLByRHmzl0paxCzmRz9TVitoqELh7 K3jrGHIgaSGjeV49SdSq5HXYHIP2JiDSmPmnpOaqjrwtkQpHNFyT8Q5AsWAdHgOS B7RUQP+ETPnrxoXTPngN+Jot7P7bHjNYc7mn2meRzf5dG3sTQnoiKDcDnOPQkz83 rmHM5iA3vkmbO7BihI0taXMfRDXQZJ4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:36 2025 by rpki-client