$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa File: f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa (raw, json) Hash identifier: NsqttR8Zatstf6DYIDfJvWhTa55l4YLdX85KeeGRJ+8= Subject key identifier: 19:04:3E:22:29:F4:3D:5E:C9:B0:11:DC:CA:5D:01:97:7C:13:A6:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBD1E7D41C081600A1D20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bd:1e:7d:41:c0:81:60:0a:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=37745e4a-d741-4073-bd9c-bf443919fc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:87:da:81:59:b1:40:64:c0:b5:fc:b2:07: d0:f2:cb:e6:95:13:e8:7c:59:1e:40:e0:4c:f3:22: 08:b8:d2:83:fb:4b:7f:34:f0:f5:cf:30:fc:cd:41: a8:c9:85:9b:4e:d6:31:ab:fa:40:fd:9b:77:e2:9c: d0:8e:d7:93:8e:49:69:18:89:3c:69:2b:ca:b2:9f: 04:58:58:23:34:29:0c:f1:5c:e6:e1:8c:36:d6:8a: 51:b0:47:8d:91:5f:69:e0:5b:3f:9e:fa:67:25:51: 00:24:57:74:71:65:f2:86:85:00:c5:3d:15:29:b1: 05:ee:22:1d:af:c5:8a:bf:7d:31:e4:b1:19:86:35: 68:5a:d7:70:4e:6b:f6:1a:1f:67:a2:49:a9:43:ff: fa:74:a6:4e:97:86:57:6d:13:02:48:ac:59:a0:b5: d2:a9:b7:c3:71:c8:80:a0:ba:ec:c3:c1:02:ad:08: 61:2a:5e:a0:f3:52:4c:27:b2:87:83:2a:00:2e:d7: 45:70:43:73:5e:8d:b7:61:bc:04:00:0d:39:8f:32: 9c:4f:67:d6:8c:4e:72:68:51:79:6b:4f:fa:91:e8: 79:7c:ef:25:72:c3:e1:22:a0:1c:6a:3c:eb:f7:7e: 84:d2:95:71:4b:81:86:5e:ed:20:a9:bd:d5:80:ae: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:04:3E:22:29:F4:3D:5E:C9:B0:11:DC:CA:5D:01:97:7C:13:A6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7c:07:94:57:bc:8a:c9:72:1e:67:ce:a0:bb:06:4b:be:7f: f5:ff:e5:00:e1:78:e8:67:0b:60:5d:20:e6:24:ec:a7:28:97: 1b:34:42:09:0b:36:43:ee:33:c1:e5:b0:45:07:4e:e2:3b:dd: a3:95:8c:92:39:0a:46:a7:0c:6c:1b:75:b5:09:57:49:5e:1f: f1:92:59:59:43:bb:64:3e:d0:38:61:4f:ae:5b:3b:8b:a2:ae: 31:ad:c9:8f:39:db:58:dc:66:f8:d7:ef:86:38:ec:ac:37:c5: 59:6e:78:be:d5:32:32:eb:00:96:39:2a:00:ff:77:f6:58:48: 23:36:d7:f3:b0:90:c8:e4:df:27:d0:bf:c4:0f:62:c8:4e:a9: c9:a0:b8:c0:ba:d5:50:ab:c0:73:47:63:93:f0:b8:82:b1:59: 36:b9:df:e3:29:51:6d:43:a8:51:f0:35:5a:ee:bb:0d:4b:a9: d3:eb:5a:34:f4:af:12:98:81:5a:d8:63:9f:c9:30:b0:64:5c: 89:6e:f4:f5:ac:50:75:22:05:c0:10:75:0e:d1:3f:03:22:98: 0d:36:62:2f:51:aa:73:94:ac:d5:94:19:04:1b:3c:df:59:dc: eb:38:72:7d:7b:ca:64:53:8f:37:f4:02:eb:ba:8a:ea:95:d5: 0e:be:7c:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLr0efUHAgWAKHSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk Mzc3NDVlNGEtZDc0MS00MDczLWJkOWMtYmY0NDM5MTlmYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xqH2oFZsUBkwLX8sgfQ8svmlRPofFkeQOBM 8yIIuNKD+0t/NPD1zzD8zUGoyYWbTtYxq/pA/Zt34pzQjteTjklpGIk8aSvKsp8E WFgjNCkM8Vzm4Yw21opRsEeNkV9p4Fs/nvpnJVEAJFd0cWXyhoUAxT0VKbEF7iId r8WKv30x5LEZhjVoWtdwTmv2Gh9nokmpQ//6dKZOl4ZXbRMCSKxZoLXSqbfDcciA oLrsw8ECrQhhKl6g81JMJ7KHgyoALtdFcENzXo23YbwEAA05jzKcT2fWjE5yaFF5 a0/6keh5fO8lcsPhIqAcajzr936E0pVxS4GGXu0gqb3VgK46hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkEPiIp9D1eybAR3MpdAZd8E6Y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjRhYzlkNDQtNzUyNC0z NmQ1LTlhNmYtZjA5NDIwODVmNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC58B5RXvIrJch5nzqC7Bku+f/X/5QDheOhnC2BdIOYk7Kcolxs0QgkL NkPuM8HlsEUHTuI73aOVjJI5CkanDGwbdbUJV0leH/GSWVlDu2Q+0DhhT65bO4ui rjGtyY8521jcZvjX74Y47Kw3xVlueL7VMjLrAJY5KgD/d/ZYSCM21/OwkMjk3yfQ v8QPYshOqcmguMC61VCrwHNHY5PwuIKxWTa53+MpUW1DqFHwNVruuw1LqdPrWjT0 rxKYgVrYY5/JMLBkXIlu9PWsUHUiBcAQdQ7RPwMimA02Yi9RqnOUrNWUGQQbPN9Z 3Os4cn17ymRTjzf0Auu6iuqV1Q6+fC4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:37 2025 by rpki-client