$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f372d951-2414-37fb-9ae9-8c3a335f5548.roa File: f372d951-2414-37fb-9ae9-8c3a335f5548.roa (raw, json) Hash identifier: dp2ArWoFDH2cy9RIBk/kgbXbdvWv+fP4IQd+Z3t2Y6c= Subject key identifier: 03:07:93:2B:18:14:FC:9B:84:4C:53:22:D1:C7:94:E5:1E:7F:6E:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340BE3E724AF5BD380B2580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f372d951-2414-37fb-9ae9-8c3a335f5548.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 35994 IP address blocks: 23.213.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:be:3e:72:4a:f5:bd:38:0b:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=b1739ec2-e3a0-4bb4-89b7-c7de5ef321a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:58:b9:ad:83:b2:0e:6c:6f:a5:cc:90:d6: 10:95:f8:42:93:b9:d7:b2:bf:23:ba:5d:92:10:f3: f9:28:45:bd:75:cf:2e:41:42:39:1a:08:28:10:fb: 63:2a:b2:1d:ed:f0:3c:31:b7:3c:f0:71:52:2b:b1: 74:1b:7e:d5:b0:cd:71:2d:05:f7:37:70:8b:46:59: 67:cb:fb:45:c4:5c:18:b0:d3:d7:8d:b9:25:82:9b: de:ea:34:79:9a:d7:a2:45:47:d2:74:14:fd:8c:f3: 7e:17:20:63:10:ee:18:a2:00:bb:6d:76:2d:15:e6: 31:15:6b:98:a0:13:14:a2:88:da:97:0e:05:e6:f2: 13:e3:aa:cb:1d:ee:0a:f8:38:e8:d0:73:8b:da:b7: 66:0f:66:7e:5c:ea:d0:50:06:1e:88:83:9c:c6:b0: 5b:8f:eb:97:3d:71:96:4f:39:55:1f:1d:02:81:82: e9:60:7e:4f:19:d7:1c:89:68:fe:f6:ed:8a:bd:6f: 99:3d:46:f4:53:77:b5:ac:7d:9d:6b:cc:f2:54:5e: 7b:b9:70:6a:a2:36:36:ce:0e:2b:72:66:0f:df:59: a1:c2:79:2f:9a:f2:78:4e:d4:bc:ba:47:9b:47:bd: 12:bb:69:a3:42:e8:fa:ad:ed:e1:d0:64:36:79:de: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:93:2B:18:14:FC:9B:84:4C:53:22:D1:C7:94:E5:1E:7F:6E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f372d951-2414-37fb-9ae9-8c3a335f5548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e9:21:a7:69:3e:b3:34:7e:95:d3:59:7c:46:a2:03:ea:48: c1:c3:aa:d9:d0:a1:61:1c:2a:43:08:b9:4e:e7:72:84:e7:16: 0e:ec:aa:35:a2:64:b2:9f:30:ed:4c:94:d1:80:9b:d6:8f:dd: 1d:97:92:33:76:11:06:5e:18:40:fd:e1:e5:9f:69:4c:cd:42: 1d:f4:00:e2:d1:5e:07:74:dd:4c:ac:17:ce:53:4b:f5:2e:2d: df:35:c8:8f:99:74:02:c3:bc:a9:82:b6:37:d2:e4:3e:d1:e8: cc:0f:31:fd:3d:c4:b2:a4:73:28:96:06:a6:06:36:67:c3:9f: f9:91:56:7c:c6:84:ed:c4:c5:01:87:30:e5:25:c4:57:3f:a4: e4:e5:0d:9a:eb:33:5b:4c:86:9d:58:f8:77:68:73:44:f9:80: 0e:97:e7:c6:d7:0b:6c:0a:12:e8:bf:88:b1:49:ca:35:f7:55: 1c:dd:13:91:63:cd:9d:55:bc:b7:3c:4a:05:0b:65:b8:7c:4b: a2:70:dc:8f:f0:74:19:05:e4:ee:8f:cf:f1:1b:99:d1:0b:30: 99:68:c1:a8:ae:67:d7:fd:30:c8:97:1a:01:74:8a:f6:a6:c0: 23:6a:c4:c0:44:c9:df:43:9c:3f:5d:b2:0a:73:ab:49:a6:39: a9:d8:e7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQL4+ckr1vTgLJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk YjE3MzllYzItZTNhMC00YmI0LTg5YjctYzdkZTVlZjMyMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX9Yua2Dsg5sb6XMkNYQlfhCk7nXsr8jul2S EPP5KEW9dc8uQUI5GggoEPtjKrId7fA8Mbc88HFSK7F0G37VsM1xLQX3N3CLRlln y/tFxFwYsNPXjbklgpve6jR5mteiRUfSdBT9jPN+FyBjEO4YogC7bXYtFeYxFWuY oBMUoojalw4F5vIT46rLHe4K+Djo0HOL2rdmD2Z+XOrQUAYeiIOcxrBbj+uXPXGW TzlVHx0CgYLpYH5PGdcciWj+9u2KvW+ZPUb0U3e1rH2da8zyVF57uXBqojY2zg4r cmYP31mhwnkvmvJ4TtS8ukebR70Su2mjQuj6re3h0GQ2ed6M8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMHkysYFPybhExTItHHlOUef26UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjM3MmQ5NTEtMjQxNC0z N2ZiLTlhZTktOGMzYTMzNWY1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrpIadpPrM0fpXTWXxGogPqSMHDqtnQoWEcKkMIuU7ncoTnFg7sqjWi ZLKfMO1MlNGAm9aP3R2XkjN2EQZeGED94eWfaUzNQh30AOLRXgd03UysF85TS/Uu Ld81yI+ZdALDvKmCtjfS5D7R6MwPMf09xLKkcyiWBqYGNmfDn/mRVnzGhO3ExQGH MOUlxFc/pOTlDZrrM1tMhp1Y+Hdoc0T5gA6X58bXC2wKEui/iLFJyjX3VRzdE5Fj zZ1VvLc8SgULZbh8S6Jw3I/wdBkF5O6Pz/EbmdELMJlowaiuZ9f9MMiXGgF0ivam wCNqxMBEyd9DnD9dsgpzq0mmOanY59E= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:33 2025 by rpki-client