$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c11d56d9-260e-3c93-94f4-8aac2b96768a.roa File: c11d56d9-260e-3c93-94f4-8aac2b96768a.roa (raw, json) Hash identifier: FF1V3XQzyt2s0sWolM1PlTPmibAnWkn527k/tXJjXAY= Subject key identifier: C2:C4:2F:BD:55:C0:6C:43:62:33:67:0C:35:66:F0:5F:9F:40:03:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBB439DC43501C0D65380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c11d56d9-260e-3c93-94f4-8aac2b96768a.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.33.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bb:43:9d:c4:35:01:c0:d6:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=9decbc53-7c18-4bd2-9876-9cfe7643205f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:42:9b:b5:d4:7d:6c:91:7a:4b:4b:bd:f2: e2:9f:0f:3c:20:a5:83:56:95:eb:a5:f2:43:6d:de: 74:dc:9a:6b:cf:4b:95:bb:8b:f1:3f:8d:c0:9b:e9: 30:fe:81:46:63:da:1a:00:85:15:ef:e0:00:52:1c: a3:a1:43:85:fe:b6:39:76:62:e2:b0:26:cf:4d:27: b9:35:8e:a1:83:fc:23:68:12:a3:dc:2d:62:66:da: 6c:64:38:18:bf:b7:cb:49:4c:54:bb:13:c2:b6:42: 19:f2:3c:29:8b:79:ea:e6:0d:a8:9e:bd:08:45:e5: 04:c9:1e:17:5d:71:81:38:89:9e:e2:b2:56:fe:3e: 2a:24:96:f8:5e:c4:0f:0d:81:51:a8:f1:43:ed:e0: 7d:81:e5:1c:15:11:32:fb:97:5b:7f:75:28:67:7e: c6:6d:8d:76:29:81:35:6e:eb:b3:6f:6b:24:b1:d7: 81:06:f7:0a:90:98:39:00:86:77:fd:ab:2a:83:6f: f2:ec:3d:f1:62:0d:3e:81:6f:00:02:a9:4a:ce:1e: 76:25:a8:b1:8a:73:4a:19:98:95:30:49:0d:4e:08: af:b1:40:74:05:7b:76:32:e3:ca:f0:67:c9:4f:c2: 69:ab:68:6b:99:54:43:fc:1d:19:fa:79:0a:53:fc: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:2F:BD:55:C0:6C:43:62:33:67:0C:35:66:F0:5F:9F:40:03:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c11d56d9-260e-3c93-94f4-8aac2b96768a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4d:b3:61:c0:51:e0:60:be:1b:b5:e0:aa:b7:4a:0f:34:b0: 96:e9:05:46:fc:8a:7f:a6:f4:7d:50:2f:96:da:f0:cf:41:e1: d9:26:ed:6c:94:10:d2:45:f5:a2:46:9f:86:e2:c4:05:2b:27: 9b:59:d9:2c:e3:d3:da:b0:46:2d:91:66:6d:5f:02:5a:34:f5: b6:3e:a4:b4:4e:dc:55:87:77:99:c1:a2:bf:08:ab:dc:7d:f3: 2f:4a:17:31:ff:ff:2c:96:c7:43:ca:a6:24:e7:05:ba:4c:39: cc:a1:dd:4d:5a:4e:df:9a:5e:13:1f:a0:54:0c:36:f7:6b:e6: 64:2d:a3:97:56:9c:6a:41:a6:b1:8f:ec:77:4c:62:49:59:b6: e5:5a:eb:c1:a6:dc:a2:12:79:c4:a4:67:a3:fb:d8:71:e8:eb: 81:ca:7c:e3:b1:1d:7b:0f:77:f7:cd:6a:ef:8f:1f:62:39:8c: c4:8b:27:6f:bd:0f:47:9b:32:cf:d4:8b:b0:b9:29:fe:49:fa: 50:ab:c6:14:c3:ea:a0:30:90:98:74:bd:c2:cd:d9:1d:de:27: 53:01:7f:08:05:2d:8d:94:b4:70:92:9d:3e:1a:07:ab:58:a2: 7e:67:a3:3e:b2:c9:ad:df:f9:9d:c9:d9:68:c7:4b:44:dc:e4: f1:68:ab:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrtDncQ1AcDWU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk OWRlY2JjNTMtN2MxOC00YmQyLTk4NzYtOWNmZTc2NDMyMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEJCm7XUfWyRektLvfLinw88IKWDVpXrpfJD bd503Jprz0uVu4vxP43Am+kw/oFGY9oaAIUV7+AAUhyjoUOF/rY5dmLisCbPTSe5 NY6hg/wjaBKj3C1iZtpsZDgYv7fLSUxUuxPCtkIZ8jwpi3nq5g2onr0IReUEyR4X XXGBOIme4rJW/j4qJJb4XsQPDYFRqPFD7eB9geUcFREy+5dbf3UoZ37GbY12KYE1 buuzb2sksdeBBvcKkJg5AIZ3/asqg2/y7D3xYg0+gW8AAqlKzh52JaixinNKGZiV MEkNTgivsUB0BXt2MuPK8GfJT8Jpq2hrmVRD/B0Z+nkKU/xmyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLEL71VwGxDYjNnDDVm8F+fQAM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzExZDU2ZDktMjYwZS0z YzkzLTk0ZjQtOGFhYzJiOTY3NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJNs2HAUeBgvhu14Kq3Sg80sJbpBUb8in+m9H1QL5ba8M9B4dkm7WyU ENJF9aJGn4bixAUrJ5tZ2Szj09qwRi2RZm1fAlo09bY+pLRO3FWHd5nBor8Iq9x9 8y9KFzH//yyWx0PKpiTnBbpMOcyh3U1aTt+aXhMfoFQMNvdr5mQto5dWnGpBprGP 7HdMYklZtuVa68Gm3KISecSkZ6P72HHo64HKfOOxHXsPd/fNau+PH2I5jMSLJ2+9 D0ebMs/Ui7C5Kf5J+lCrxhTD6qAwkJh0vcLN2R3eJ1MBfwgFLY2UtHCSnT4aB6tY on5noz6yya3f+Z3J2WjHS0Tc5PFoq4Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:04 2025 by rpki-client