$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f94263e0-6497-3dee-aa0a-893a815de5b0.roa File: f94263e0-6497-3dee-aa0a-893a815de5b0.roa (raw, json) Hash identifier: C3obkjSOJ3v2AzkVQRkk8B0iwEv93RyXMkqJphqZQ+E= Subject key identifier: 85:5F:9B:F3:26:93:A0:8D:15:3E:A8:58:58:07:38:28:6B:77:4B:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858486EF5C961E51DC46A52690320 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f94263e0-6497-3dee-aa0a-893a815de5b0.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.33.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:c9:61:e5:1d:c4:6a:52:69:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=dc9df4da-e577-4505-863c-a3f7cf49919d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:14:7d:1d:13:e9:78:05:44:51:b7:dc:a7: f5:69:95:78:41:c1:99:40:a1:0e:f9:a6:0a:b3:ea: bc:a5:f8:94:be:01:f9:4c:cf:2a:db:18:a1:31:82: 64:94:9d:df:f6:3f:80:9b:2e:62:c9:b4:82:90:3a: 6b:8c:51:d5:99:81:22:96:84:3c:f5:90:22:61:d4: a1:ae:68:aa:8b:e7:44:83:90:0f:fe:fd:da:12:c3: 70:07:11:a4:5f:84:98:34:d8:62:75:5d:ca:b6:fc: f3:f7:cb:ca:01:dd:1d:69:f2:ea:d8:e5:65:96:49: 15:44:a1:55:6e:ad:57:75:6f:3d:fa:43:5c:e3:f9: b4:b1:64:4d:ef:f0:81:4d:15:c3:e5:55:5c:c7:98: 4c:e4:d4:b6:9f:05:6d:02:5d:5f:31:2a:23:00:f9: ac:9e:55:e6:ed:e7:e1:a3:25:bf:5b:d3:52:10:ea: 93:c4:2d:52:45:37:9a:e3:fd:fb:c8:22:2a:30:86: e1:54:32:2b:65:4b:59:a7:b7:9f:9f:07:6e:08:b5: cd:83:f1:2a:55:7b:19:41:0b:1b:60:4a:92:7f:a9: 76:3a:c5:bd:9c:c6:ba:96:3a:ca:db:ee:79:47:90: c4:55:49:8c:75:bc:82:6d:78:93:1c:e1:4c:d7:fa: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:9B:F3:26:93:A0:8D:15:3E:A8:58:58:07:38:28:6B:77:4B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f94263e0-6497-3dee-aa0a-893a815de5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:27:6a:ef:e0:d4:7f:a3:0e:98:6f:55:d5:28:cb:3c:47:74: 8d:bc:d2:af:a5:1a:c3:f8:06:3f:21:b0:9d:11:2f:09:98:8b: 5e:e4:2e:f5:d1:0e:0a:32:1c:01:41:63:0c:1f:f3:8d:bc:bc: 68:40:9f:27:db:24:be:cf:22:51:c1:8d:e7:3c:9b:ef:93:0a: b0:02:f2:c3:93:15:67:88:16:3c:d8:37:95:5b:fa:bb:6b:c5: cd:9c:ff:a6:e0:b1:6d:65:0c:64:31:72:37:c4:fa:d4:c1:e2: 71:7c:b0:c5:b3:0d:ca:c5:51:12:a2:ae:03:66:6f:ce:11:55: b9:05:1d:3d:79:2d:e7:0b:f6:2d:2e:c8:ba:8f:53:40:87:ff: 4d:74:8a:2c:66:63:7a:14:8c:99:28:f0:71:8d:ef:4a:a6:ba: ed:30:e4:6d:ef:6a:90:be:77:5b:99:3e:de:5e:d0:cd:04:4e: 04:79:de:13:81:63:b2:ea:fd:c7:6b:3d:e2:6f:85:16:b6:16: da:da:7b:4a:ba:91:cf:de:4e:fb:86:cb:f8:51:4a:2e:4a:8c: f3:4d:a9:59:c5:5e:cb:74:b6:60:46:14:00:a5:e4:fb:23:0d: 52:16:39:ef:97:4b:77:1a:9c:ee:be:7e:69:32:e1:44:32:4b: aa:0f:66:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9clh5R3EalJpAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk ZGM5ZGY0ZGEtZTU3Ny00NTA1LTg2M2MtYTNmN2NmNDk5MTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgsUfR0T6XgFRFG33Kf1aZV4QcGZQKEO+aYK s+q8pfiUvgH5TM8q2xihMYJklJ3f9j+Amy5iybSCkDprjFHVmYEiloQ89ZAiYdSh rmiqi+dEg5AP/v3aEsNwBxGkX4SYNNhidV3Ktvzz98vKAd0dafLq2OVllkkVRKFV bq1XdW89+kNc4/m0sWRN7/CBTRXD5VVcx5hM5NS2nwVtAl1fMSojAPmsnlXm7efh oyW/W9NSEOqTxC1SRTea4/37yCIqMIbhVDIrZUtZp7efnwduCLXNg/EqVXsZQQsb YEqSf6l2OsW9nMa6ljrK2+55R5DEVUmMdbyCbXiTHOFM1/qN7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVfm/Mmk6CNFT6oWFgHOChrd0s0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk0MjYzZTAtNjQ5Ny0z ZGVlLWFhMGEtODkzYTgxNWRlNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABknau/g1H+jDphvVdUoyzxHdI280q+lGsP4Bj8hsJ0RLwmYi17kLvXR DgoyHAFBYwwf8428vGhAnyfbJL7PIlHBjec8m++TCrAC8sOTFWeIFjzYN5Vb+rtr xc2c/6bgsW1lDGQxcjfE+tTB4nF8sMWzDcrFURKirgNmb84RVbkFHT15LecL9i0u yLqPU0CH/010iixmY3oUjJko8HGN70qmuu0w5G3vapC+d1uZPt5e0M0ETgR53hOB Y7Lq/cdrPeJvhRa2Ftrae0q6kc/eTvuGy/hRSi5KjPNNqVnFXst0tmBGFACl5Psj DVIWOe+XS3canO6+fmky4UQyS6oPZoU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:17 2025 by rpki-client