$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa File: c96909b2-99ca-31d9-90ff-7962438db4ab.roa (raw, json) Hash identifier: i8jpTV3n5aILYlNuW1eiupLmnVuL9Ai1Frk4r5xifIw= Subject key identifier: 6E:0A:C8:4C:75:D1:7D:5E:FD:D2:02:19:F5:A9:27:68:51:35:EE:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBBDD0E3706A70E378700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bb:dd:0e:37:06:a7:0e:37:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=98b51a64-290c-4007-9a9a-3f94d18674da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:65:9d:1e:ea:ad:54:1f:84:6d:c5:61:c8: ba:e4:d6:c2:b4:77:e4:07:10:dc:41:35:ac:29:b2: 71:dc:26:3a:0e:08:25:bf:c4:87:3a:ca:95:a3:cc: 8e:0d:5e:ee:d7:75:88:04:32:24:69:f5:78:cd:2d: b5:64:2e:f3:e8:eb:a4:9e:b2:45:f9:a2:6e:25:8e: 34:ac:f1:6d:8f:8a:39:83:ee:2f:a8:f8:bd:45:c2: fe:8c:a0:8a:15:5d:b6:40:d8:48:74:67:2e:ea:fd: 88:8b:67:01:c7:b9:b6:cb:ee:41:75:50:f8:d3:c9: 68:06:99:1c:9c:09:d4:83:bc:ce:b0:92:4c:19:e8: 02:bc:34:97:89:82:c8:97:79:00:d7:cf:b4:2a:36: 50:0e:8a:09:2b:63:df:4a:8b:8a:7c:03:90:87:65: 96:d3:9a:4d:6f:c5:13:3e:c3:c7:30:0a:4a:0c:bc: 98:7b:4d:c7:ef:de:21:84:64:e8:4f:6a:5b:d6:16: 56:88:84:f4:b9:97:97:ae:f6:f1:35:04:2f:cb:96: e1:2c:a8:c1:bb:d6:6d:b8:27:62:23:65:94:4a:bb: 36:a3:9b:9e:c2:10:18:5b:36:0a:a5:62:36:8f:66: 43:27:6c:d1:fa:80:1a:b5:b5:62:93:11:a0:4d:bb: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0A:C8:4C:75:D1:7D:5E:FD:D2:02:19:F5:A9:27:68:51:35:EE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:11:43:1d:78:b4:2c:93:55:db:a8:b8:78:50:ce:99:b7:3c: 6a:7a:98:f1:36:fa:43:38:1a:2c:17:3d:7c:61:4a:8e:6c:72: 38:a7:3f:f1:82:b8:64:96:0a:43:31:7b:d6:73:4b:7c:24:47: 46:70:89:47:f0:bc:65:2b:cc:60:c2:a7:4a:b2:ea:34:06:17: f6:59:ce:31:0a:4a:df:b1:f1:cd:a5:3e:e7:e7:f7:7b:c8:2c: 70:70:ad:54:63:84:70:02:25:bf:94:85:e0:f4:05:f4:05:4c: a9:e1:a3:85:fe:59:8f:1d:4e:85:ab:a5:2a:15:0e:ad:20:6e: 79:6b:ee:b0:2e:3f:9c:e1:d8:7e:85:06:5c:51:dd:7a:57:ad: 46:f0:4f:d8:93:14:4d:e5:68:58:78:46:57:a6:3a:ca:80:11: 4c:4d:e0:a9:e3:cc:1b:78:95:b8:f3:4c:cc:d9:b0:80:b8:2a: b1:d0:be:d9:6c:66:37:f0:03:74:f2:99:74:df:60:5b:13:a5: 61:cf:09:4d:8b:8a:56:07:13:e8:ac:15:2e:ea:b5:32:b9:da: 83:b2:2b:cc:97:40:e6:52:d3:1a:21:4d:e8:9b:a1:50:48:05: 32:da:98:0e:0a:51:bc:ef:d8:4b:33:98:69:63:65:55:2d:66: ba:5e:52:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrvdDjcGpw43hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk OThiNTFhNjQtMjkwYy00MDA3LTlhOWEtM2Y5NGQxODY3NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDtlnR7qrVQfhG3FYci65NbCtHfkBxDcQTWs KbJx3CY6Dgglv8SHOsqVo8yODV7u13WIBDIkafV4zS21ZC7z6OuknrJF+aJuJY40 rPFtj4o5g+4vqPi9RcL+jKCKFV22QNhIdGcu6v2Ii2cBx7m2y+5BdVD408loBpkc nAnUg7zOsJJMGegCvDSXiYLIl3kA18+0KjZQDooJK2PfSouKfAOQh2WW05pNb8UT PsPHMApKDLyYe03H794hhGToT2pb1hZWiIT0uZeXrvbxNQQvy5bhLKjBu9ZtuCdi I2WUSrs2o5uewhAYWzYKpWI2j2ZDJ2zR+oAatbVikxGgTbsO5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4KyEx10X1e/dICGfWpJ2hRNe7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk2OTA5YjItOTljYS0z MWQ5LTkwZmYtNzk2MjQzOGRiNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsRQx14tCyTVduouHhQzpm3PGp6mPE2+kM4GiwXPXxhSo5scjinP/GC uGSWCkMxe9ZzS3wkR0ZwiUfwvGUrzGDCp0qy6jQGF/ZZzjEKSt+x8c2lPufn93vI LHBwrVRjhHACJb+UheD0BfQFTKnho4X+WY8dToWrpSoVDq0gbnlr7rAuP5zh2H6F BlxR3XpXrUbwT9iTFE3laFh4RlemOsqAEUxN4KnjzBt4lbjzTMzZsIC4KrHQvtls ZjfwA3TymXTfYFsTpWHPCU2LilYHE+isFS7qtTK52oOyK8yXQOZS0xohTeiboVBI BTLamA4KUbzv2EszmGljZVUtZrpeUn4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:46 2025 by rpki-client