$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4914789-4d3a-3a12-8adb-dce2d53b7689.roa File: d4914789-4d3a-3a12-8adb-dce2d53b7689.roa (raw, json) Hash identifier: mj3xLTQhUWJgO9pHiuTUquq3wfvgbEJv4Ua/aWOTl+0= Subject key identifier: 77:46:16:D5:3B:04:8C:59:3B:40:5D:8B:01:53:30:E0:23:FF:EF:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABECF15EC012A693D3E5D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4914789-4d3a-3a12-8adb-dce2d53b7689.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 35994 IP address blocks: 23.36.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:cf:15:ec:01:2a:69:3d:3e:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=0b595017-f1f9-4e9c-912a-dfbae862dc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:06:e6:0c:60:a8:1e:43:3d:c3:28:fe:69: db:d3:b4:0d:ab:55:b6:fe:b1:3b:3e:bf:7b:bd:66: 56:06:cf:f8:f8:74:1f:89:77:61:e9:7c:26:c7:4b: 56:6b:fa:94:e6:13:c1:e8:1f:43:47:75:26:36:07: 87:9b:18:7e:01:f3:42:4d:96:c3:c7:39:88:54:cb: 32:08:59:2d:6b:1a:cd:c1:a9:cf:5a:eb:63:4a:f4: 78:b2:66:4b:3a:49:73:64:db:46:0d:6e:c9:33:e2: 82:ed:21:82:5d:60:75:2b:06:17:dd:02:6e:e2:66: 13:8e:b8:ee:76:c6:b3:6a:80:17:99:c8:32:2d:86: 17:bd:a4:ea:fd:8d:09:16:1a:f0:f9:38:b4:93:e6: 1d:66:6a:c4:3a:e0:dd:71:e3:99:97:e4:9e:d6:9a: 1d:66:d4:cd:05:57:af:58:6d:2b:c3:fd:10:89:2a: cf:30:ef:2c:de:36:3b:71:59:71:d8:3e:61:ac:e7: 99:d4:70:04:27:d2:ec:43:d2:6f:21:d2:5e:8d:44: 28:ad:19:29:96:12:bf:47:87:bc:4e:01:3f:1c:a0: 12:4e:6d:1b:6a:6d:d8:b4:ca:80:f9:26:3b:98:c0: 72:b6:6d:a4:79:1a:46:07:d2:39:37:40:23:2f:42: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:46:16:D5:3B:04:8C:59:3B:40:5D:8B:01:53:30:E0:23:FF:EF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4914789-4d3a-3a12-8adb-dce2d53b7689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4b:55:78:bf:54:d0:fe:d9:b6:c8:bd:a4:5a:3c:a7:1b:dc: af:a2:b4:26:a9:2b:42:2f:6a:07:d0:49:11:0e:56:42:40:47: 43:5b:78:e8:4d:f2:80:f6:73:5e:17:02:18:58:2d:19:6f:f2: 34:ee:44:b9:4e:dc:37:dc:3c:54:e0:88:8e:36:ee:25:5a:e8: 9c:d4:74:28:3b:39:42:5b:10:fc:d8:7c:3a:83:c2:54:7f:78: 78:bb:94:d7:e0:e2:c9:47:9c:e7:f0:15:f8:c9:e2:2b:1d:71: 2b:9a:59:73:31:df:7c:9e:f9:57:6f:e7:8d:00:a5:f3:97:99: 2c:b1:19:3a:f1:40:15:99:2e:33:d9:81:0c:68:e7:fb:1f:61: 16:6b:2a:66:e3:7d:e0:c7:f2:f0:de:d6:9c:51:f8:b1:c2:d3: f9:8f:a6:81:3f:94:7b:01:cf:05:34:b6:00:76:33:13:9d:54: be:b2:97:62:47:e9:e8:76:cb:b0:76:cb:13:6c:48:5c:dc:b3: df:d5:3c:e1:d4:0e:55:02:e5:9b:64:db:6c:f7:26:d4:e6:88: ae:e0:ee:05:ef:a9:4c:40:56:67:8f:30:ff:93:71:b6:a8:9f: d1:06:d9:e8:42:b6:11:c1:06:de:91:e8:23:54:64:f6:65:70: e7:f0:cf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavs8V7AEqaT0+XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MGI1OTUwMTctZjFmOS00ZTljLTkxMmEtZGZiYWU4NjJkYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuAG5gxgqB5DPcMo/mnb07QNq1W2/rE7Pr97 vWZWBs/4+HQfiXdh6Xwmx0tWa/qU5hPB6B9DR3UmNgeHmxh+AfNCTZbDxzmIVMsy CFktaxrNwanPWutjSvR4smZLOklzZNtGDW7JM+KC7SGCXWB1KwYX3QJu4mYTjrju dsazaoAXmcgyLYYXvaTq/Y0JFhrw+Ti0k+YdZmrEOuDdceOZl+Se1podZtTNBVev WG0rw/0QiSrPMO8s3jY7cVlx2D5hrOeZ1HAEJ9LsQ9JvIdJejUQorRkplhK/R4e8 TgE/HKASTm0bam3YtMqA+SY7mMBytm2keRpGB9I5N0AjL0KTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdGFtU7BIxZO0BdiwFTMOAj/+8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ5MTQ3ODktNGQzYS0z YTEyLThhZGItZGNlMmQ1M2I3Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5LVXi/VND+2bbIvaRaPKcb3K+itCapK0IvagfQSREOVkJAR0NbeOhN 8oD2c14XAhhYLRlv8jTuRLlO3DfcPFTgiI427iVa6JzUdCg7OUJbEPzYfDqDwlR/ eHi7lNfg4slHnOfwFfjJ4isdcSuaWXMx33ye+Vdv540ApfOXmSyxGTrxQBWZLjPZ gQxo5/sfYRZrKmbjfeDH8vDe1pxR+LHC0/mPpoE/lHsBzwU0tgB2MxOdVL6yl2JH 6eh2y7B2yxNsSFzcs9/VPOHUDlUC5Ztk22z3JtTmiK7g7gXvqUxAVmePMP+Tcbao n9EG2ehCthHBBt6R6CNUZPZlcOfwzwo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:51 2025 by rpki-client