$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa File: cf1e3177-28b4-3037-9544-789bed6a62ed.roa (raw, json) Hash identifier: i43QpcGzPznBPD5MaktF3GnF358cxTM5Mu1vxEyENZk= Subject key identifier: AA:20:CB:14:91:45:8B:75:B2:5B:C9:0B:6B:6C:34:90:4E:4A:91:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB6A6F0E48E58C723B200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.33.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b6:a6:f0:e4:8e:58:c7:23:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=4f032609-67a1-4853-a7cc-56daed2dfb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:14:1a:3e:84:46:78:46:05:5f:72:19:e2: ec:9d:29:31:a2:a9:3d:ac:3b:c0:c8:2e:36:35:68: d7:66:2d:f0:26:28:42:fe:9d:b0:f8:7c:eb:81:f7: 7a:63:c0:bd:62:da:32:f1:da:c4:67:79:0c:20:aa: 95:0f:55:07:c2:9b:94:44:fa:58:e6:0e:32:c3:d9: 90:69:40:12:51:a8:d2:70:60:04:44:c8:c0:04:85: a1:28:8b:97:6f:fb:cc:ae:e0:3b:bc:4a:91:ff:6b: b0:bc:1b:c2:8b:0b:09:d2:b0:b9:59:f1:b8:18:b9: 99:41:9b:22:71:1d:53:f7:cf:f8:b4:5a:d5:8e:79: 37:85:14:e1:d0:39:0c:05:8a:6e:84:e4:1b:d0:73: 4c:5f:28:84:89:f8:85:72:b9:01:69:90:00:4b:84: 02:03:52:3d:44:f6:47:e6:6f:4e:b0:e1:58:3f:62: 5c:58:6e:40:01:9b:bd:14:3f:51:8d:13:8d:d6:65: cc:4d:5b:ae:43:66:64:c8:7f:b5:a5:cc:63:39:b5: e8:11:b3:74:7b:48:44:23:10:95:b0:9f:ce:38:a4: ac:19:70:9f:c7:bd:6e:9f:46:0d:a3:87:ef:d6:19: 3f:eb:16:ba:92:d7:10:c7:b4:d6:42:d9:e4:b8:c4: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:CB:14:91:45:8B:75:B2:5B:C9:0B:6B:6C:34:90:4E:4A:91:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ec:17:90:4e:9f:f0:27:9a:1f:e4:f0:62:a6:54:8a:04:69: 3c:4c:b0:18:ec:bf:92:57:aa:20:39:65:36:46:94:56:0e:9a: 04:f6:d2:d5:19:dc:9c:99:41:b3:dd:72:85:a6:50:13:0e:58: b1:26:92:01:2b:e4:d8:24:5f:87:03:09:18:10:53:cb:3e:2a: fc:93:43:12:d3:60:56:29:da:41:2f:c0:52:6a:3b:50:b6:4f: ab:63:d7:58:46:c3:47:22:00:43:f3:bf:cd:3e:a4:cb:16:de: 78:d2:cc:5e:47:0b:17:51:c4:65:07:30:2b:62:7c:66:80:ba: bf:e4:8e:66:fa:ce:8f:c1:a4:4e:01:0e:64:c9:01:0a:64:c0: ed:82:ee:c1:52:55:66:05:ed:99:19:1d:53:49:5c:43:71:31: df:db:17:d6:f3:d7:be:7c:d3:d7:da:2b:00:39:37:d7:79:c5: 2d:fb:b1:bd:89:ca:38:3a:a8:1e:35:28:82:7d:d6:e6:34:22: 49:1e:54:45:cf:52:aa:70:09:cb:42:fa:d3:c1:dc:b2:03:c3: ea:a8:c7:8c:b1:43:e5:9d:d8:bf:e4:f5:fc:0e:70:70:53:4c: 78:55:a7:26:20:fa:2d:d1:c6:f0:50:01:20:6a:fa:cd:dc:84: 05:cf:dd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLram8OSOWMcjsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NGYwMzI2MDktNjdhMS00ODUzLWE3Y2MtNTZkYWVkMmRmYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLAUGj6ERnhGBV9yGeLsnSkxoqk9rDvAyC42 NWjXZi3wJihC/p2w+Hzrgfd6Y8C9Ytoy8drEZ3kMIKqVD1UHwpuURPpY5g4yw9mQ aUASUajScGAERMjABIWhKIuXb/vMruA7vEqR/2uwvBvCiwsJ0rC5WfG4GLmZQZsi cR1T98/4tFrVjnk3hRTh0DkMBYpuhOQb0HNMXyiEifiFcrkBaZAAS4QCA1I9RPZH 5m9OsOFYP2JcWG5AAZu9FD9RjRON1mXMTVuuQ2ZkyH+1pcxjObXoEbN0e0hEIxCV sJ/OOKSsGXCfx71un0YNo4fv1hk/6xa6ktcQx7TWQtnkuMTsFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKogyxSRRYt1slvJC2tsNJBOSpGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YxZTMxNzctMjhiNC0z MDM3LTk1NDQtNzg5YmVkNmE2MmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrsF5BOn/Anmh/k8GKmVIoEaTxMsBjsv5JXqiA5ZTZGlFYOmgT20tUZ 3JyZQbPdcoWmUBMOWLEmkgEr5NgkX4cDCRgQU8s+KvyTQxLTYFYp2kEvwFJqO1C2 T6tj11hGw0ciAEPzv80+pMsW3njSzF5HCxdRxGUHMCtifGaAur/kjmb6zo/BpE4B DmTJAQpkwO2C7sFSVWYF7ZkZHVNJXENxMd/bF9bz175809faKwA5N9d5xS37sb2J yjg6qB41KIJ91uY0IkkeVEXPUqpwCctC+tPB3LIDw+qox4yxQ+Wd2L/k9fwOcHBT THhVpyYg+i3RxvBQASBq+s3chAXP3R0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:20 2025 by rpki-client