$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa File: cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa (raw, json) Hash identifier: 1MrEz4iFQ5RhwW7sWs+NiF/u1zof2FrRbann87cGl4A= Subject key identifier: 31:18:F5:A7:3E:48:43:40:FA:B4:DF:11:DA:B2:62:30:5E:BA:CD:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C0935BFB3DEE47BD19CC7A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7713 IP address blocks: 23.32.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:35:bf:b3:de:e4:7b:d1:9c:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=28df21f4-c507-4089-b6ed-1905ac9c1e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:27:2b:f4:82:7e:7e:fb:1e:4f:fa:79:5f: a0:1c:c4:ea:62:aa:47:a4:a2:46:5b:d4:6e:50:be: ee:9e:50:4a:12:9b:24:9b:f5:5d:28:64:5b:55:c3: 76:f4:c2:6c:df:4f:dd:cd:11:fa:a0:d5:68:46:36: 80:ae:cc:ab:13:d4:b6:8a:0c:75:64:c5:f1:67:dc: bf:d5:fd:81:22:60:8c:21:bb:b1:49:c6:63:c4:8d: bb:da:6c:5d:e7:3a:b3:67:12:e8:38:ea:42:45:2b: a1:fa:ea:d9:97:28:3a:0d:a2:7d:a1:62:87:00:c1: 61:82:42:ec:d2:bf:e4:f9:1b:8b:12:c3:bd:ce:3a: 80:38:c5:8a:6a:da:f9:7a:2e:dd:ee:89:87:51:0c: 59:bc:79:90:eb:94:f8:a7:06:22:c9:4d:c3:5f:6e: 0b:3c:0a:96:d7:93:ef:87:ae:38:7b:91:f2:19:05: 1b:e5:9f:62:90:bf:37:e7:ad:8a:6f:f1:af:2c:74: 33:d7:93:45:35:08:bb:b6:96:9d:8a:fe:97:18:63: a7:9e:35:09:bd:b5:45:dd:66:51:8b:66:33:a3:08: 82:41:92:51:fe:11:75:97:b2:53:6a:1b:ca:cf:62: 31:fc:3c:98:c6:ee:67:0d:1d:13:e5:83:87:9d:c4: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:F5:A7:3E:48:43:40:FA:B4:DF:11:DA:B2:62:30:5E:BA:CD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfac125a-9920-36a4-9fb1-cba77fa1ead6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c8:66:e2:83:42:63:79:18:09:78:72:13:f9:8b:92:29:f6: 46:42:ef:55:fe:d5:83:c7:86:97:76:59:c3:88:63:7d:85:59: ae:06:0d:ec:ea:6f:53:03:06:d3:40:59:37:d2:37:18:76:02: e1:14:39:37:96:5d:2c:bc:58:8f:5d:30:3a:a6:6d:d3:90:f5: c0:1d:f9:23:90:2d:23:1c:10:47:7a:9f:12:a7:ea:95:00:20: d1:5d:96:ef:01:d8:31:f7:8d:26:4c:71:5d:30:01:10:80:b7: 44:80:23:a6:64:13:9e:31:76:f6:e3:8a:46:37:4c:ad:5c:a5: e9:d4:ba:b7:2b:e6:3b:b4:47:de:74:a2:fd:da:2a:3e:ea:dc: 12:50:f9:8c:5c:6f:33:a9:82:f4:3d:72:e1:d0:6e:a9:56:47: 52:99:3b:a0:a2:0b:c8:53:a7:25:f5:80:1d:48:b1:2a:9b:81: 4d:38:bc:08:99:ec:d5:e2:59:15:71:43:95:c7:98:18:77:d4: f7:48:1e:c8:5e:b2:47:32:db:fb:0f:91:2a:e4:89:de:61:8b: 2d:ed:b6:f6:2a:12:2d:8b:78:6f:0f:ab:3c:51:3d:d7:c4:cd: 26:fd:f4:4d:ba:19:aa:d0:d6:5c:3f:94:ee:d1:93:4b:cd:f1: c2:ce:65:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTW/s97ke9Gcx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjhkZjIxZjQtYzUwNy00MDg5LWI2ZWQtMTkwNWFjOWMxZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJsnK/SCfn77Hk/6eV+gHMTqYqpHpKJGW9Ru UL7unlBKEpskm/VdKGRbVcN29MJs30/dzRH6oNVoRjaArsyrE9S2igx1ZMXxZ9y/ 1f2BImCMIbuxScZjxI272mxd5zqzZxLoOOpCRSuh+urZlyg6DaJ9oWKHAMFhgkLs 0r/k+RuLEsO9zjqAOMWKatr5ei7d7omHUQxZvHmQ65T4pwYiyU3DX24LPAqW15Pv h644e5HyGQUb5Z9ikL83562Kb/GvLHQz15NFNQi7tpadiv6XGGOnnjUJvbVF3WZR i2YzowiCQZJR/hF1l7JTahvKz2Ix/DyYxu5nDR0T5YOHncR4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEY9ac+SENA+rTfEdqyYjBeus2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZhYzEyNWEtOTkyMC0z NmE0LTlmYjEtY2JhNzdmYTFlYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvIZuKDQmN5GAl4chP5i5Ip9kZC71X+1YPHhpd2WcOIY32FWa4GDezq b1MDBtNAWTfSNxh2AuEUOTeWXSy8WI9dMDqmbdOQ9cAd+SOQLSMcEEd6nxKn6pUA INFdlu8B2DH3jSZMcV0wARCAt0SAI6ZkE54xdvbjikY3TK1cpenUurcr5ju0R950 ov3aKj7q3BJQ+YxcbzOpgvQ9cuHQbqlWR1KZO6CiC8hTpyX1gB1IsSqbgU04vAiZ 7NXiWRVxQ5XHmBh31PdIHsheskcy2/sPkSrkid5hiy3ttvYqEi2LeG8PqzxRPdfE zSb99E26GarQ1lw/lO7Rk0vN8cLOZSY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:33 2025 by rpki-client