$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa File: ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa (raw, json) Hash identifier: 7sti9uk/surFCmRVqPUVH1oNO34zEpaALnetLrEswJQ= Subject key identifier: 5F:C4:73:25:5D:6D:A4:AF:7B:1C:B2:33:08:50:BA:C8:F6:8C:4B:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584910E17D2D18972D128108CE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.34.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7d:2d:18:97:2d:12:81:08:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=5fe4d5de-7650-4552-bd1f-92e6f15e7cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:d6:25:f9:7f:2c:80:73:f8:a2:41:e1:35: a3:8d:f6:f2:b6:31:07:af:e6:b4:4b:88:6a:b4:96: 8b:30:5b:44:e9:24:3b:e0:f5:28:73:49:bc:be:7f: 1f:b1:43:17:ea:d9:5a:95:a7:03:4f:82:61:ba:6e: 2b:d1:65:06:52:9f:81:64:79:4f:89:3d:6e:cf:bd: 7e:18:bc:45:e5:18:84:51:da:1a:db:75:08:2d:b5: 53:8f:c4:12:b7:fd:1b:dd:e1:90:ea:06:02:e3:43: 0b:9f:1f:4d:26:a9:0b:3e:1e:4b:f5:e2:54:0b:d4: a0:99:70:54:e7:86:17:5c:4d:c2:86:34:33:25:fc: 9b:ce:f2:a8:70:c3:cd:c4:1c:8e:56:7b:53:a0:b9: b1:03:c6:36:99:e0:32:96:db:76:bf:25:33:25:5f: ba:56:f2:7e:b4:0a:93:dc:1b:26:7c:b6:0f:f1:8a: 37:f4:56:5a:c1:a4:6e:fc:35:06:fc:15:31:dc:ba: 02:73:dd:eb:7c:7f:7f:5d:c6:ed:38:ed:c1:93:bc: 49:a2:0b:68:0b:db:98:38:00:14:d5:a6:78:d5:fe: 9e:ff:9c:fb:31:8f:61:d7:8f:4c:be:f6:c8:cc:ec: 19:c8:c4:30:b0:af:29:0e:8b:be:3a:9e:03:c3:84: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C4:73:25:5D:6D:A4:AF:7B:1C:B2:33:08:50:BA:C8:F6:8C:4B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfd7ffd-990f-391c-a9b8-bebe18389e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ce:df:38:c2:20:de:01:70:8c:95:9b:31:cc:d6:ad:85:81: ef:ea:85:21:2e:4b:27:32:76:e3:ba:c2:3d:38:39:f8:8d:e8: da:aa:dc:8b:6f:33:5d:1f:6a:1a:f2:ec:58:37:ac:b0:6e:31: 62:0b:4c:65:25:f2:9a:56:95:36:11:52:42:ee:25:a5:7c:7e: 5b:35:c1:7c:10:6d:95:a7:44:15:70:ee:60:dd:a4:64:8a:a4: 35:ab:33:17:f0:5a:57:33:51:3a:04:86:c4:ce:31:51:04:00: 92:41:67:31:35:fb:e5:c0:fc:0e:64:58:2a:a9:cd:01:e2:17: 6f:c7:f1:8a:79:24:45:5d:d9:84:5b:65:72:cd:39:f5:7c:50: 38:e6:5e:a2:d6:33:67:44:d0:13:7c:56:e7:1f:e9:15:77:e4: a3:21:52:d4:64:fc:ef:25:15:ec:f4:8f:12:fc:e7:1b:9a:0a: 3b:e9:17:cc:50:73:79:28:87:2e:4d:b1:33:a8:83:e0:bc:99: de:dc:39:6c:33:bc:5a:ce:18:aa:fd:5c:fe:1a:62:c1:c2:e0: 43:72:d3:38:f7:45:7c:40:13:11:0a:d8:ca:9d:21:a8:58:87: 3f:0f:1c:2b:27:83:ed:60:8d:71:71:b2:e7:a4:22:70:a8:05: 6b:94:90:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4X0tGJctEoEIzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NWZlNGQ1ZGUtNzY1MC00NTUyLWJkMWYtOTJlNmYxNWU3Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG3WJfl/LIBz+KJB4TWjjfbytjEHr+a0S4hq tJaLMFtE6SQ74PUoc0m8vn8fsUMX6tlalacDT4Jhum4r0WUGUp+BZHlPiT1uz71+ GLxF5RiEUdoa23UILbVTj8QSt/0b3eGQ6gYC40MLnx9NJqkLPh5L9eJUC9SgmXBU 54YXXE3ChjQzJfybzvKocMPNxByOVntToLmxA8Y2meAyltt2vyUzJV+6VvJ+tAqT 3BsmfLYP8Yo39FZawaRu/DUG/BUx3LoCc93rfH9/XcbtOO3Bk7xJogtoC9uYOAAU 1aZ41f6e/5z7MY9h149MvvbIzOwZyMQwsK8pDou+Op4Dw4QtKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/EcyVdbaSvexyyMwhQusj2jEugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRmZDdmZmQtOTkwZi0z OTFjLWE5YjgtYmViZTE4Mzg5ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7O3zjCIN4BcIyVmzHM1q2Fge/qhSEuSycyduO6wj04OfiN6Nqq3Itv M10fahry7Fg3rLBuMWILTGUl8ppWlTYRUkLuJaV8fls1wXwQbZWnRBVw7mDdpGSK pDWrMxfwWlczUToEhsTOMVEEAJJBZzE1++XA/A5kWCqpzQHiF2/H8Yp5JEVd2YRb ZXLNOfV8UDjmXqLWM2dE0BN8Vucf6RV35KMhUtRk/O8lFez0jxL85xuaCjvpF8xQ c3kohy5NsTOog+C8md7cOWwzvFrOGKr9XP4aYsHC4ENy0zj3RXxAExEK2MqdIahY hz8PHCsng+1gjXFxsuekInCoBWuUkJs= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:53 2025 by rpki-client