$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d59aff26-3328-334a-96b5-ed5b57e52d63.roa File: d59aff26-3328-334a-96b5-ed5b57e52d63.roa (raw, json) Hash identifier: KMgxspBlhhCQ4NWlBGVOyd1bsmxO43yXqoG3KFE/Q7Q= Subject key identifier: B3:F8:F7:FB:D9:67:A5:9D:2D:A3:4F:00:E8:5B:57:A4:BE:9E:51:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D90BB9052CA6E7E4C2350800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d59aff26-3328-334a-96b5-ed5b57e52d63.roa Signing time: Tue 11 Feb 2025 14:00:52 +0000 ROA not before: Tue 11 Feb 2025 14:00:52 +0000 ROA not after: Mon 12 May 2025 13:00:52 +0000 asID: 4761 IP address blocks: 23.3.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:0b:b9:05:2c:a6:e7:e4:c2:35:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 11 14:00:52 2025 GMT Not After : May 12 13:00:52 2025 GMT Subject: CN=3d5d714b-4bde-4ddb-baab-4eeb01e97b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:cc:00:64:33:86:04:71:19:0d:ea:dd:06: 12:d6:25:ca:e7:0e:37:ba:eb:b3:85:5b:6d:7b:6e: 30:86:fd:f6:c8:df:be:4d:f4:ba:13:4d:26:6a:ca: 54:17:f7:19:ea:e2:c3:6e:4b:4f:7c:82:22:6b:c8: a2:f4:50:b2:3c:ca:57:6b:ed:b5:20:94:9b:61:6b: 75:65:bf:77:1b:b2:23:7e:6f:8d:8e:63:d1:ff:c9: 84:46:81:89:c1:ab:2b:12:fe:6c:e6:98:71:51:f1: 66:d2:d0:f1:1f:65:ae:a0:ef:18:3a:89:b0:93:50: 02:3f:51:ae:98:f2:02:2b:5c:78:f3:ad:a9:93:0e: 02:6b:8a:89:83:fe:11:2e:ef:f8:ac:6a:0f:4d:d6: cf:d9:bd:10:b6:ff:dd:f5:63:b0:c5:29:ae:db:4a: 3b:a0:14:cd:82:b3:83:53:eb:3d:fc:b1:e9:9b:30: 2e:09:0d:be:c8:ac:b1:37:90:61:ee:6d:de:40:31: d2:cf:2d:9c:8b:4f:d2:81:6b:2c:7e:c1:74:31:e9: 6b:e5:ab:03:b4:e5:5f:46:be:5f:d2:a7:0d:be:02: 36:25:90:81:eb:ff:93:1b:05:2d:f0:74:95:49:4a: 8a:92:1a:11:f0:41:e7:73:48:63:20:fe:02:6b:82: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F8:F7:FB:D9:67:A5:9D:2D:A3:4F:00:E8:5B:57:A4:BE:9E:51:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d59aff26-3328-334a-96b5-ed5b57e52d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b9:d6:1d:bc:40:9f:1e:8c:1e:3b:03:32:98:6f:9b:25:c0: 35:d2:d0:69:8a:a1:80:c0:ed:2a:da:c9:76:e0:cd:c7:0d:b6: e6:4a:47:00:9e:c7:4c:b9:11:63:2b:fa:1a:a3:1e:3d:77:53: f0:1d:2c:c4:65:f0:83:df:3b:ad:20:3f:6b:20:bd:4b:54:ed: 2a:77:89:fc:f6:ce:5c:c1:3a:3b:2d:24:88:58:b0:c4:72:c7: ee:90:b6:41:ac:84:c4:96:c5:b0:f5:de:87:4d:09:f3:fb:92: 1b:d2:2e:11:c8:a7:bd:27:db:ad:6e:c6:a9:b9:6a:f3:fa:b4: 92:15:f2:22:3a:5b:7a:1b:55:d9:9f:b8:2f:5a:ce:fa:36:5d: 95:a2:75:e4:3f:90:de:17:8c:bf:cb:87:0e:45:7f:f1:03:45: f9:8a:23:77:8d:2d:4c:ea:ed:a0:12:ce:79:bf:c9:bc:c5:98: 35:70:eb:cd:3d:ec:37:ee:90:83:1c:10:1e:09:b3:08:c2:fe: 89:85:bd:d1:34:c4:ed:0f:9d:4a:ee:5e:2d:fc:12:59:6a:a5: d0:a9:2b:e8:f7:a0:3c:53:f2:69:5b:a4:b8:88:7f:ae:ca:ae: 4d:1f:78:0c:08:6b:e3:e5:4e:b3:b1:0e:5d:95:f2:75:65:e1: 33:a0:ba:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZC7kFLKbn5MI1CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMTE0MDA1MloXDTI1MDUxMjEzMDA1MlowLzEtMCsGA1UEAxMk M2Q1ZDcxNGItNGJkZS00ZGRiLWJhYWItNGVlYjAxZTk3YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNjMAGQzhgRxGQ3q3QYS1iXK5w43uuuzhVtt e24whv32yN++TfS6E00maspUF/cZ6uLDbktPfIIia8ii9FCyPMpXa+21IJSbYWt1 Zb93G7Ijfm+NjmPR/8mERoGJwasrEv5s5phxUfFm0tDxH2WuoO8YOomwk1ACP1Gu mPICK1x4862pkw4Ca4qJg/4RLu/4rGoPTdbP2b0Qtv/d9WOwxSmu20o7oBTNgrOD U+s9/LHpmzAuCQ2+yKyxN5Bh7m3eQDHSzy2ci0/SgWssfsF0Melr5asDtOVfRr5f 0qcNvgI2JZCB6/+TGwUt8HSVSUqKkhoR8EHnc0hjIP4Ca4KyrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP49/vZZ6WdLaNPAOhbV6S+nlGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDU5YWZmMjYtMzMyOC0z MzRhLTk2YjUtZWQ1YjU3ZTUyZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC51h28QJ8ejB47AzKYb5slwDXS0GmKoYDA7SrayXbgzccNtuZKRwCe x0y5EWMr+hqjHj13U/AdLMRl8IPfO60gP2sgvUtU7Sp3ifz2zlzBOjstJIhYsMRy x+6QtkGshMSWxbD13odNCfP7khvSLhHIp70n261uxqm5avP6tJIV8iI6W3obVdmf uC9azvo2XZWideQ/kN4XjL/Lhw5Ff/EDRfmKI3eNLUzq7aASznm/ybzFmDVw6809 7DfukIMcEB4JswjC/omFvdE0xO0PnUruXi38EllqpdCpK+j3oDxT8mlbpLiIf67K rk0feAwIa+PlTrOxDl2V8nVl4TOguu0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:22 2025 by rpki-client