$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa File: e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa (raw, json) Hash identifier: 3VjHhbQiqtwm1gLRN1cG4y4QhUarNTXMK//H/I0piCk= Subject key identifier: BE:D8:5B:FE:83:A8:8E:D1:46:94:39:77:F3:8B:F2:73:1C:B8:88:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB76395336C70E1584CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.33.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b7:63:95:33:6c:70:e1:58:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=5f1a3b90-3383-406a-9823-381aa2ec7d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:83:00:8f:06:81:56:d1:69:23:94:3b:7c: 98:a4:65:e7:5c:f1:b5:a0:94:3c:d9:c6:d9:e5:ef: db:23:e0:f9:57:58:50:66:f6:40:b4:44:34:ec:e6: 29:7c:5c:b5:24:c5:9f:f6:f5:ee:11:07:6c:d5:1e: a0:61:e3:b0:e8:cb:b0:b6:3b:7a:a7:30:c0:73:d0: da:35:a1:bf:de:8c:50:d9:18:37:59:fd:03:d3:4f: d8:cc:c8:45:5e:06:49:68:b8:27:25:94:a0:ac:62: 29:bb:7d:61:37:74:58:e2:58:2b:fe:9c:d2:98:c4: ef:89:a1:63:fb:58:96:ec:74:58:d6:12:34:09:83: 39:69:27:60:44:30:dc:05:50:bd:d0:f5:4b:64:1b: 46:28:29:65:42:b0:92:7b:a1:bb:3d:1f:48:7f:ec: 7a:70:27:d2:63:84:9c:2a:68:4f:b8:3b:f4:39:c0: 10:b3:0f:07:d1:98:21:1c:60:88:41:bf:f1:08:09: 6f:4b:31:e4:1b:ba:bc:ea:ef:be:1d:ef:07:63:c5: 7b:f3:e1:59:bb:e6:76:d0:65:b7:a2:2e:42:3a:03: 74:9f:6a:7d:ee:e5:eb:0b:f6:39:2b:46:ec:bf:e2: e3:72:cf:d5:2c:f2:a1:a0:b5:eb:2a:fd:ae:f8:6e: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D8:5B:FE:83:A8:8E:D1:46:94:39:77:F3:8B:F2:73:1C:B8:88:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2630f6e-eba6-3078-8dd5-eafc3069a1f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:67:23:f5:7b:f1:53:89:70:09:30:2f:df:5b:92:0c:5e:d2: db:0e:04:c4:cf:04:99:ab:24:2f:14:f3:56:3f:6b:e4:f2:a7: 8a:03:1a:01:71:21:dc:4b:56:73:8f:4a:7d:5b:4f:b8:8c:e3: 58:73:59:6c:25:48:54:8d:86:f2:98:f9:2c:28:63:88:aa:67: 5f:d7:02:1a:ce:4e:6d:58:67:ab:c4:62:9f:08:5a:4f:27:ce: 5a:77:ed:3d:2d:c1:59:60:33:d7:ee:4c:da:68:61:26:6a:70: f6:98:5e:ae:ca:f1:c4:ee:75:34:73:96:53:3f:62:93:8d:e6: 33:6b:e8:23:3a:3e:e3:3e:d0:c8:68:46:40:e2:be:07:2e:28: d9:fe:87:ce:35:4e:b8:11:cf:a3:28:2b:4c:0c:ab:3a:9a:2e: 91:24:dd:c3:01:a0:ac:fc:3e:e0:36:a0:51:44:0c:b9:93:72: cf:68:9c:ed:b9:48:95:2a:5f:88:9c:e1:6b:8e:66:a0:10:e9: 84:2b:0c:79:09:82:de:09:23:28:86:e9:66:f7:1f:8b:86:5a: 73:3f:d6:ed:45:b3:98:f3:62:70:f3:04:a7:67:1f:d7:08:91: 58:50:ad:1e:7c:4a:83:a7:e9:fa:22:1b:b5:e8:55:db:5f:2b: e2:f6:07:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrdjlTNscOFYTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NWYxYTNiOTAtMzM4My00MDZhLTk4MjMtMzgxYWEyZWM3ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoweDAI8GgVbRaSOUO3yYpGXnXPG1oJQ82cbZ 5e/bI+D5V1hQZvZAtEQ07OYpfFy1JMWf9vXuEQds1R6gYeOw6Muwtjt6pzDAc9Da NaG/3oxQ2Rg3Wf0D00/YzMhFXgZJaLgnJZSgrGIpu31hN3RY4lgr/pzSmMTviaFj +1iW7HRY1hI0CYM5aSdgRDDcBVC90PVLZBtGKCllQrCSe6G7PR9If+x6cCfSY4Sc KmhPuDv0OcAQsw8H0ZghHGCIQb/xCAlvSzHkG7q86u++He8HY8V78+FZu+Z20GW3 oi5COgN0n2p97uXrC/Y5K0bsv+Ljcs/VLPKhoLXrKv2u+G6t/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7YW/6DqI7RRpQ5d/OL8nMcuIjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI2MzBmNmUtZWJhNi0z MDc4LThkZDUtZWFmYzMwNjlhMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFnI/V78VOJcAkwL99bkgxe0tsOBMTPBJmrJC8U81Y/a+Typ4oDGgFx IdxLVnOPSn1bT7iM41hzWWwlSFSNhvKY+SwoY4iqZ1/XAhrOTm1YZ6vEYp8IWk8n zlp37T0twVlgM9fuTNpoYSZqcPaYXq7K8cTudTRzllM/YpON5jNr6CM6PuM+0Mho RkDivgcuKNn+h841TrgRz6MoK0wMqzqaLpEk3cMBoKz8PuA2oFFEDLmTcs9onO25 SJUqX4ic4WuOZqAQ6YQrDHkJgt4JIyiG6Wb3H4uGWnM/1u1Fs5jzYnDzBKdnH9cI kVhQrR58SoOn6foiG7XoVdtfK+L2Bx0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:26 2025 by rpki-client