$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e16fa338-6aae-3ddd-89e2-6b8184aa0a5b.roa File: e16fa338-6aae-3ddd-89e2-6b8184aa0a5b.roa (raw, json) Hash identifier: SL8a7PjEpsHx65JwPIk8edlY2rxQan4f5QSQSDXEWZw= Subject key identifier: B7:AA:1A:97:E3:83:04:7F:35:B7:A0:43:C2:13:65:2E:5E:0D:F7:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC9577DE3AD82E4B7B1C480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e16fa338-6aae-3ddd-89e2-6b8184aa0a5b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:57:7d:e3:ad:82:e4:b7:b1:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=58f04cf8-a5d7-46e7-9080-54acecf766ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:b9:62:6b:f6:aa:6b:13:22:97:e1:c0:20: 83:30:18:15:a1:9b:fd:2a:03:c7:b1:6b:a5:46:6f: 78:47:32:dc:db:67:e3:2d:ff:53:a6:f7:40:19:be: 26:ad:86:d2:ed:25:94:95:8b:7e:e1:5d:20:64:48: 88:17:3c:a1:52:be:85:2f:e6:a7:04:07:cb:5e:66: c3:a9:c2:6d:ea:88:4b:b9:1a:5d:38:21:68:fd:71: d0:43:af:d3:a8:07:60:20:2b:0d:77:95:26:23:1b: d6:60:cd:f0:bf:ef:ff:c9:0c:f0:89:31:10:fe:7f: da:52:f6:34:70:76:be:1f:15:bc:4b:97:53:aa:46: b7:49:81:2e:19:3d:3a:f1:72:97:92:8e:16:ae:c9: 02:12:b7:2e:20:58:de:dd:9e:ba:9e:25:f3:72:0d: 8f:7b:cf:2c:9c:b3:db:13:02:23:0c:f1:c5:55:89: d8:0d:6b:ec:8d:76:30:bc:58:41:d7:77:4b:3b:97: da:64:40:06:6e:6e:fe:14:a4:57:41:f9:db:db:8f: 88:70:55:08:d6:84:37:d4:67:23:1e:b5:25:f3:fc: 72:d0:d5:36:c3:0a:37:e4:f6:a5:60:0d:6f:fb:43: a2:35:79:de:bb:c4:64:30:c4:7e:d4:8d:0a:db:2b: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AA:1A:97:E3:83:04:7F:35:B7:A0:43:C2:13:65:2E:5E:0D:F7:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e16fa338-6aae-3ddd-89e2-6b8184aa0a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:24:b1:4a:2c:b6:72:86:1c:54:6d:9b:80:35:41:ff:b2:9a: 77:74:2b:ea:b1:50:06:98:95:bf:7a:cf:c1:cb:f3:79:32:b7: 7d:27:47:4e:50:90:54:1b:e6:23:fd:b9:e8:3f:dd:a5:e5:f9: b7:92:f5:13:56:77:0a:09:e0:df:e0:66:eb:a3:4f:4f:66:ca: b4:bf:0c:a7:dc:cc:bd:0f:4f:7c:03:a5:1e:42:34:6e:34:dc: 4d:1c:dc:64:1b:f9:e7:b8:b9:ac:57:ef:8d:e5:0f:56:a8:cd: d3:ea:a4:b8:89:c0:c7:2f:d7:61:34:b4:70:02:13:a1:f2:be: 76:99:51:f7:3e:99:93:6b:6f:9a:38:fc:ee:da:0a:a5:fb:37: 50:29:a7:6d:8d:e5:9b:8a:ea:e2:4c:eb:90:2c:00:f0:dd:fc: e7:7d:77:9b:40:5e:dd:80:56:75:8a:c1:19:d0:57:a4:81:fb: 84:47:c3:97:6e:be:1e:f0:63:8d:90:76:e9:89:b4:9b:45:8e: 5b:bd:5a:1d:9e:a8:70:67:a7:fc:26:fc:62:e1:86:dd:39:e3: 74:82:48:5e:95:9e:e0:4b:c3:57:7e:7a:a8:0d:15:7a:c5:ca: a8:1a:78:9a:e9:fb:cd:b3:04:1a:8b:fc:44:0e:b5:8d:61:3d: 46:73:48:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVd9462C5LexxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NThmMDRjZjgtYTVkNy00NmU3LTkwODAtNTRhY2VjZjc2NmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw25Ymv2qmsTIpfhwCCDMBgVoZv9KgPHsWul Rm94RzLc22fjLf9TpvdAGb4mrYbS7SWUlYt+4V0gZEiIFzyhUr6FL+anBAfLXmbD qcJt6ohLuRpdOCFo/XHQQ6/TqAdgICsNd5UmIxvWYM3wv+//yQzwiTEQ/n/aUvY0 cHa+HxW8S5dTqka3SYEuGT068XKXko4WrskCErcuIFje3Z66niXzcg2Pe88snLPb EwIjDPHFVYnYDWvsjXYwvFhB13dLO5faZEAGbm7+FKRXQfnb24+IcFUI1oQ31Gcj HrUl8/xy0NU2wwo35PalYA1v+0OiNXneu8RkMMR+1I0K2ysi1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeqGpfjgwR/NbegQ8ITZS5eDfcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTE2ZmEzMzgtNmFhZS0z ZGRkLTg5ZTItNmI4MTg0YWEwYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0ksUostnKGHFRtm4A1Qf+ymnd0K+qxUAaYlb96z8HL83kyt30nR05Q kFQb5iP9ueg/3aXl+beS9RNWdwoJ4N/gZuujT09myrS/DKfczL0PT3wDpR5CNG40 3E0c3GQb+ee4uaxX743lD1aozdPqpLiJwMcv12E0tHACE6HyvnaZUfc+mZNrb5o4 /O7aCqX7N1App22N5ZuK6uJM65AsAPDd/Od9d5tAXt2AVnWKwRnQV6SB+4RHw5du vh7wY42QdumJtJtFjlu9Wh2eqHBnp/wm/GLhht0543SCSF6VnuBLw1d+eqgNFXrF yqgaeJrp+82zBBqL/EQOtY1hPUZzSJE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:47 2025 by rpki-client