$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91409db-8469-3ec6-823c-d2dc2431ffc3.roa File: c91409db-8469-3ec6-823c-d2dc2431ffc3.roa (raw, json) Hash identifier: XUA0ytcpmXfevxMmrVYnPx2A5HI8tFEzs3lM0pLXZlI= Subject key identifier: FB:B6:5F:20:80:5C:FA:71:8D:F6:D5:B4:75:C3:09:E6:72:CE:D2:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F22C67C8A85D96777FC4C7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91409db-8469-3ec6-823c-d2dc2431ffc3.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 21342 IP address blocks: 23.63.98.0/24 maxlen: 24 23.63.99.0/24 maxlen: 24 104.102.245.0/24 maxlen: 24 2600:14c0:4::/48 maxlen: 48 2600:14c0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:67:c8:a8:5d:96:77:7f:c4:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=3d1a85bd-51d9-45b1-8e92-94de6350c775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:69:35:1e:db:1d:75:5c:3e:87:38:32:73:3a: 3f:62:5e:8e:c1:ee:5e:ef:95:55:3a:a7:86:79:c2: 4c:71:fc:8b:90:83:02:d8:dc:4c:83:53:48:fc:96: 75:59:dd:85:d7:e0:99:d0:19:e0:fe:7d:5e:50:17: a7:60:1b:44:68:55:e2:1a:1c:30:a7:bb:97:45:24: 45:e6:60:80:55:df:9f:73:48:be:67:82:e6:b0:2f: 66:2a:77:32:68:c7:6f:db:67:eb:76:45:0f:e8:a8: 93:d7:af:e4:c5:1b:79:f8:e7:d1:4e:df:e9:08:4f: 17:c0:17:fa:8f:93:5b:88:93:61:e4:be:b2:95:3c: 71:9a:cf:76:58:5d:96:89:2f:e0:d9:7a:f8:9d:3c: fd:b2:ce:6b:52:03:2a:44:a9:40:9b:9e:52:1d:f6: 90:74:2d:ba:66:74:ab:ff:05:83:5b:c8:91:46:0a: a0:23:a7:f1:68:03:d9:a9:c7:99:e6:7c:0b:3c:08: ef:1c:8c:ec:46:ba:48:16:40:b6:ab:50:fb:a8:d0: 56:58:ce:86:fb:24:64:d9:ff:48:b0:ca:a2:ab:3d: c5:8d:e8:d0:89:72:84:8c:95:0a:90:28:7e:c3:3d: 6d:be:8d:89:09:95:27:a1:23:f8:e3:d9:72:92:51: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B6:5F:20:80:5C:FA:71:8D:F6:D5:B4:75:C3:09:E6:72:CE:D2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c91409db-8469-3ec6-823c-d2dc2431ffc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.98.0/23 104.102.245.0/24 IPv6: 2600:14c0:4::/48 2600:14c0:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:39:bd:09:d7:4a:8f:73:9a:3e:7d:ac:bf:99:bb:78:3b:42: a3:06:01:d6:4c:4c:7c:9d:1d:c3:b1:a6:61:29:02:a7:f2:00: 6c:bb:62:fe:5c:b5:f8:0d:c5:73:3e:02:a8:05:89:b0:5e:e0: 0f:25:54:ec:ca:71:3c:7e:ef:ab:0c:e1:23:4b:4e:84:0f:e7: b3:c0:08:cd:59:33:af:b8:80:5f:73:89:89:b8:ec:8a:f0:6f: ff:d3:e6:0f:ee:a8:4f:0b:80:95:3d:9e:2e:98:e6:ad:11:30: 1f:00:ca:20:8d:8a:f4:0a:75:65:8b:58:82:6b:f1:8d:05:7b: 0c:7f:e8:ec:30:64:29:15:df:25:15:2a:74:e9:59:a7:18:c4: 16:c6:f4:be:f9:aa:59:73:79:9f:fb:db:5c:41:a7:a3:1f:af: b6:78:d6:55:5b:05:1c:14:9d:b7:cd:ef:92:44:e3:7d:f0:e3: ea:3f:eb:34:e6:24:87:cf:34:2c:67:fe:5c:63:61:d4:fc:e3: df:5b:b6:52:b1:3d:e3:61:56:93:7b:23:2c:48:a0:d8:1b:e8: 04:bc:c0:1d:cf:45:4b:74:81:fe:bb:9d:4c:d8:ef:54:2d:e6: a6:ff:68:9a:49:cf:33:2c:7c:7c:a5:38:c4:e7:62:9e:57:5c: 28:b1:2e:62 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEjyLGfIqF2Wd3/Ex8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk M2QxYTg1YmQtNTFkOS00NWIxLThlOTItOTRkZTYzNTBjNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGk1HtsddVw+hzgyczo/Yl6Owe5e75VVOqeG ecJMcfyLkIMC2NxMg1NI/JZ1Wd2F1+CZ0Bng/n1eUBenYBtEaFXiGhwwp7uXRSRF 5mCAVd+fc0i+Z4LmsC9mKncyaMdv22frdkUP6KiT16/kxRt5+OfRTt/pCE8XwBf6 j5NbiJNh5L6ylTxxms92WF2WiS/g2Xr4nTz9ss5rUgMqRKlAm55SHfaQdC26ZnSr /wWDW8iRRgqgI6fxaAPZqceZ5nwLPAjvHIzsRrpIFkC2q1D7qNBWWM6G+yRk2f9I sMqiqz3FjejQiXKEjJUKkCh+wz1tvo2JCZUnoSP449lyklGJ2QIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFPu2XyCAXPpxjfbVtHXDCeZyztJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzkxNDA5ZGItODQ2OS0z ZWM2LTgyM2MtZDJkYzI0MzFmZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBFz9iAwQA aGb1MBgEAgACMBIDBwAmABTAAAQDBwAmABTAAAgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABTm9CddKj3Oa Pn2sv5m7eDtCowYB1kxMfJ0dw7GmYSkCp/IAbLti/ly1+A3Fcz4CqAWJsF7gDyVU 7MpxPH7vqwzhI0tOhA/ns8AIzVkzr7iAX3OJibjsivBv/9PmD+6oTwuAlT2eLpjm rREwHwDKII2K9Ap1ZYtYgmvxjQV7DH/o7DBkKRXfJRUqdOlZpxjEFsb0vvmqWXN5 n/vbXEGnox+vtnjWVVsFHBSdt83vkkTjffDj6j/rNOYkh880LGf+XGNh1Pzj31u2 UrE942FWk3sjLEig2BvoBLzAHc9FS3SB/rudTNjvVC3mpv9omknPMyx8fKU4xOdi nldcKLEuYg== -----END CERTIFICATE-----Generated at Tue Apr 8 14:34:29 2025 by rpki-client