$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa File: e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa (raw, json) Hash identifier: NsOCEN8yszf1FDmbgRoVwjM8Tz5dHaYD8wrsroF0X5Y= Subject key identifier: E9:EE:86:10:50:99:99:A0:7A:2F:EF:22:0C:5C:3A:AB:C7:85:1E:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBD647512ED72C675D580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.34.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bd:64:75:12:ed:72:c6:75:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=b8103e30-4693-4acb-9ac8-8362d16512b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:6c:0a:cc:4a:72:ed:aa:c3:49:99:12:5a: ec:5c:87:76:1e:59:dd:0d:38:57:b4:82:93:cb:75: 34:6c:3a:80:cc:84:ba:c0:b5:3c:67:ae:c9:00:c1: ab:de:ce:83:4f:d6:ab:b7:ab:10:ad:ac:ee:5e:1e: 63:e5:e1:9a:34:58:42:39:60:57:3d:03:54:bc:f4: 0b:36:d0:a9:41:b9:c7:35:67:13:bc:76:e8:66:03: 02:9b:e2:23:5a:cc:ce:e8:9f:e1:69:c6:e3:d0:55: 2c:c3:ee:00:d9:8b:8b:21:af:8b:93:3d:7e:92:6e: 60:20:dd:a6:fb:dd:08:17:ba:69:a9:c5:01:e3:05: 31:82:6e:e4:a4:96:45:a4:65:84:e3:b0:7d:79:7b: 21:b6:6a:1a:91:62:9c:10:90:b1:6a:57:2e:05:ef: 8e:62:02:f2:6a:3b:16:06:61:da:2c:23:04:9f:bf: f6:47:0c:76:17:67:90:c3:01:44:99:55:e3:e5:f7: 2a:d1:93:a7:15:fc:f8:c0:a5:ab:8b:f0:5f:5c:c0: a9:e8:3b:cc:37:f2:e4:9a:35:a2:75:73:3f:bd:04: 1c:1e:7a:62:ff:aa:dc:6e:c2:ca:1b:66:ec:45:40: e0:02:b0:20:f4:24:4c:b8:e8:2c:69:8a:1f:2c:62: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EE:86:10:50:99:99:A0:7A:2F:EF:22:0C:5C:3A:AB:C7:85:1E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e49a1991-fef0-3406-803c-c6f5a2bf64ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ef:55:c1:90:f0:0a:66:56:ae:ce:4b:60:9b:38:46:44:0f: dd:43:2e:34:b0:02:b8:6c:19:fc:1f:d2:97:00:ba:95:11:a8: 4e:8f:1d:55:df:ab:29:59:02:22:6a:47:4b:4e:23:01:c7:93: ec:5d:da:06:a7:cd:f5:e3:29:1a:fc:b2:8b:ee:e8:74:21:e8: 65:25:89:52:20:b4:73:cc:12:35:95:f1:ba:cf:4a:8b:ba:df: 14:fc:a1:a4:97:f6:e4:a2:ee:0e:c5:ce:3d:ce:32:78:39:3d: 51:92:a6:a2:12:87:19:a5:6c:80:74:a1:8f:8c:78:e1:ad:f1: 2c:36:17:68:ca:0a:ef:75:96:54:54:22:bf:15:73:64:57:90: 5b:39:a5:ca:91:73:3f:e9:1d:f1:57:4a:6d:07:03:e1:0e:33: 3a:9f:d5:d9:0d:6d:af:f6:b0:de:ea:96:ef:11:21:88:6c:95: fb:ca:d9:3f:03:fc:06:73:42:c6:f3:60:65:21:72:3f:41:55: 13:2d:f5:76:4f:ae:82:3c:0e:10:f9:82:97:16:da:d6:0d:07: 4b:ff:83:b8:88:0b:a2:8b:c4:bf:30:06:84:a3:64:7c:d8:6f: 19:47:1a:45:cb:54:7a:14:d7:7f:5b:99:98:0d:db:c1:5c:dd: 19:86:c3:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLr1kdRLtcsZ11YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk YjgxMDNlMzAtNDY5My00YWNiLTlhYzgtODM2MmQxNjUxMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoolsCsxKcu2qw0mZElrsXId2HlndDThXtIKT y3U0bDqAzIS6wLU8Z67JAMGr3s6DT9art6sQrazuXh5j5eGaNFhCOWBXPQNUvPQL NtCpQbnHNWcTvHboZgMCm+IjWszO6J/hacbj0FUsw+4A2YuLIa+Lkz1+km5gIN2m +90IF7ppqcUB4wUxgm7kpJZFpGWE47B9eXshtmoakWKcEJCxalcuBe+OYgLyajsW BmHaLCMEn7/2Rwx2F2eQwwFEmVXj5fcq0ZOnFfz4wKWri/BfXMCp6DvMN/LkmjWi dXM/vQQcHnpi/6rcbsLKG2bsRUDgArAg9CRMuOgsaYofLGKflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnuhhBQmZmgei/vIgxcOqvHhR5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ5YTE5OTEtZmVmMC0z NDA2LTgwM2MtYzZmNWEyYmY2NGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnvVcGQ8ApmVq7OS2CbOEZED91DLjSwArhsGfwf0pcAupURqE6PHVXf qylZAiJqR0tOIwHHk+xd2ganzfXjKRr8sovu6HQh6GUliVIgtHPMEjWV8brPSou6 3xT8oaSX9uSi7g7Fzj3OMng5PVGSpqIShxmlbIB0oY+MeOGt8Sw2F2jKCu91llRU Ir8Vc2RXkFs5pcqRcz/pHfFXSm0HA+EOMzqf1dkNba/2sN7qlu8RIYhslfvK2T8D /AZzQsbzYGUhcj9BVRMt9XZProI8DhD5gpcW2tYNB0v/g7iIC6KLxL8wBoSjZHzY bxlHGkXLVHoU139bmZgN28Fc3RmGw1Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:55 2025 by rpki-client