$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00949c0-a6fb-3c06-8198-5125508ef528.roa File: f00949c0-a6fb-3c06-8198-5125508ef528.roa (raw, json) Hash identifier: R9X+11oHEBTiCS4aRReeEWxn5gTu57Y1CgWukR+iGs0= Subject key identifier: C5:AB:2B:4A:2C:A1:E8:BA:A1:FB:DA:D0:E5:3A:30:66:2B:71:E8:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF612EF3C7CF33F6D4D94FD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00949c0-a6fb-3c06-8198-5125508ef528.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 0 IP address blocks: 23.4.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:2e:f3:c7:cf:33:f6:d4:d9:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=aa0ffd1f-7b8a-4adf-bb50-e5a7ebada8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:e9:b7:e0:7d:17:c4:65:2b:64:92:23:38: 51:6e:9f:8a:03:84:2e:45:45:ed:72:c9:f5:97:a0: c4:a2:a6:0b:03:7f:46:96:8c:44:5f:54:69:2d:c5: d7:59:a6:f2:43:7e:e3:7e:c1:ec:e1:05:cb:8a:90: eb:d9:45:fc:d7:8f:1a:62:69:a8:3f:8e:6c:0f:3d: 9e:db:ff:0d:02:5c:87:c5:e1:5d:49:59:77:58:1d: 59:31:c0:81:ce:0d:0b:e0:c1:91:58:1f:06:e6:9e: 0d:55:03:4c:4a:c1:8e:64:71:d9:8e:ef:1e:a0:69: f1:68:d5:03:54:83:dd:49:81:84:a8:73:7a:ff:1e: f6:0a:54:60:6a:d8:94:f3:d2:61:57:64:8a:8e:35: 72:50:1e:b6:a9:1c:cc:5b:98:d3:f8:31:c5:96:0f: 9e:77:5e:e7:14:73:77:4d:4e:4e:a3:dd:eb:1b:a9: 3a:a2:74:40:92:26:fc:b2:60:3b:90:88:64:72:1a: ac:e9:89:81:de:e3:85:07:82:b0:0d:e9:b4:f3:24: 80:c6:8f:5f:b9:c4:e0:e8:74:ea:99:93:e3:a2:bc: 1e:45:94:8a:c5:f7:c1:bc:d5:76:02:60:3e:88:e1: c1:50:d9:b6:a7:75:cb:90:a2:64:15:26:5d:8a:ce: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AB:2B:4A:2C:A1:E8:BA:A1:FB:DA:D0:E5:3A:30:66:2B:71:E8:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00949c0-a6fb-3c06-8198-5125508ef528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e7:9c:8f:eb:fd:ce:97:e1:1c:ab:8f:6d:c2:0d:cd:93:04: ce:60:78:5f:90:8f:84:6c:6e:50:d8:a5:c2:85:11:77:e5:b8: fa:ce:d5:a3:df:59:02:e8:a8:dd:8c:df:70:73:a5:62:7b:2a: 95:92:fa:ea:c6:2c:6c:a5:d2:8e:62:29:c1:54:e2:45:1a:79: 47:ff:72:b3:a1:5c:84:c4:68:68:23:11:c5:20:51:ec:f1:5d: b9:87:14:10:f8:1b:d2:ba:47:87:f9:27:35:78:1c:07:c1:a2: b5:dc:18:23:a8:cc:e6:d8:e0:6d:3f:76:ef:7b:60:83:89:71: 05:5d:9a:06:8c:6e:22:6d:ab:9e:6c:85:70:1c:ab:12:e9:e2: 70:8e:5a:85:14:69:4f:46:49:e8:63:34:1b:b6:c3:ce:9f:37: 60:08:9e:1d:a5:4d:77:3b:ab:58:32:59:f1:e9:53:fd:0b:d1: ac:35:65:4c:e0:3a:14:4c:3b:80:22:5a:88:59:5c:f3:89:b3: 76:18:e7:27:01:b8:70:ab:7a:c4:79:de:9d:50:14:f7:a9:52: 48:ae:2f:e0:a3:a1:5c:be:a1:0b:b3:d8:09:26:c0:fb:b2:b2: 27:03:63:f4:b3:36:92:d0:a4:71:b3:31:ad:66:d2:c1:f0:70: dd:f9:d4:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYS7zx88z9tTZT9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWEwZmZkMWYtN2I4YS00YWRmLWJiNTAtZTVhN2ViYWRhOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstTpt+B9F8RlK2SSIzhRbp+KA4QuRUXtcsn1 l6DEoqYLA39GloxEX1RpLcXXWabyQ37jfsHs4QXLipDr2UX8148aYmmoP45sDz2e 2/8NAlyHxeFdSVl3WB1ZMcCBzg0L4MGRWB8G5p4NVQNMSsGOZHHZju8eoGnxaNUD VIPdSYGEqHN6/x72ClRgatiU89JhV2SKjjVyUB62qRzMW5jT+DHFlg+ed17nFHN3 TU5Oo93rG6k6onRAkib8smA7kIhkchqs6YmB3uOFB4KwDem08ySAxo9fucTg6HTq mZPjorweRZSKxffBvNV2AmA+iOHBUNm2p3XLkKJkFSZdis4KnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWrK0osoei6ofva0OU6MGYrceiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwOTQ5YzAtYTZmYi0z YzA2LTgxOTgtNTEyNTUwOGVmNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7nnI/r/c6X4Ryrj23CDc2TBM5geF+Qj4RsblDYpcKFEXfluPrO1aPf WQLoqN2M33BzpWJ7KpWS+urGLGyl0o5iKcFU4kUaeUf/crOhXITEaGgjEcUgUezx XbmHFBD4G9K6R4f5JzV4HAfBorXcGCOozObY4G0/du97YIOJcQVdmgaMbiJtq55s hXAcqxLp4nCOWoUUaU9GSehjNBu2w86fN2AInh2lTXc7q1gyWfHpU/0L0aw1ZUzg OhRMO4AiWohZXPOJs3YY5ycBuHCresR53p1QFPepUkiuL+CjoVy+oQuz2AkmwPuy sicDY/SzNpLQpHGzMa1m0sHwcN351KA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:29 2025 by rpki-client