$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faa56d8c-7ae9-3645-96e1-9acec0cea84f.roa File: faa56d8c-7ae9-3645-96e1-9acec0cea84f.roa (raw, json) Hash identifier: gNdIJUTwpPHZiaXy1V4xHyAHSEyrB3GLxVhNwvPy8FE= Subject key identifier: D9:B3:DA:A8:3E:7E:A2:7C:EB:49:27:04:46:22:14:C7:EE:19:A8:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D21145236B56DDFB93D800C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faa56d8c-7ae9-3645-96e1-9acec0cea84f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.43.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:45:23:6b:56:dd:fb:93:d8:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8c290468-8cce-46fd-8002-5654526c831b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:d0:57:6b:8c:4a:34:ba:04:d9:28:39:88: c6:b8:d8:4f:f7:11:1f:77:56:ba:89:db:4f:81:74: a4:26:40:fb:6f:9e:f4:39:73:fc:41:8d:6c:ab:e4: 02:bd:93:b5:6a:80:62:27:45:48:c0:be:92:55:53: 02:22:30:bf:f6:a2:6f:02:c7:20:3a:65:1e:6f:90: 8c:65:38:b4:f2:c6:04:76:b7:c7:9f:bd:05:17:01: d4:d3:60:30:ee:5e:15:b5:05:91:fc:bc:c5:32:c0: 4e:2d:52:00:e6:05:32:dd:12:cd:ec:9e:cf:00:64: b6:12:2a:c3:18:1f:3e:e8:77:00:ea:7f:3a:85:03: ac:3c:35:3e:cd:95:6a:76:8d:3a:ac:07:28:8a:06: 80:9f:b1:2c:37:46:fa:a0:ff:93:de:8e:9a:42:8c: 0c:a0:6d:6f:b4:d7:8f:53:95:91:c2:80:52:e5:91: 84:17:07:b0:79:87:77:50:4f:43:94:fd:3d:e5:b7: 3e:e8:35:0a:7a:6a:6a:e8:bf:27:74:8e:e5:5c:d7: 73:b2:d0:93:38:a8:b5:7e:09:15:9c:d9:4d:0e:c5: ec:0e:c5:ee:a8:5e:f1:4f:38:00:ce:c8:0b:64:bd: c3:e9:ac:9a:9f:bc:e9:09:b5:84:7f:03:51:d6:95: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B3:DA:A8:3E:7E:A2:7C:EB:49:27:04:46:22:14:C7:EE:19:A8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faa56d8c-7ae9-3645-96e1-9acec0cea84f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:95:bf:6a:83:bf:32:36:e7:c2:a6:65:eb:41:a0:da:ff:4c: f3:fb:35:a5:38:a1:9d:03:d0:a7:f7:22:04:3d:f4:57:b4:b8: 3c:46:ac:05:12:5b:10:b6:b3:bc:65:e4:08:22:5c:92:76:2b: ac:8f:dd:fc:23:fd:99:a1:0a:65:02:2c:2b:c9:70:fa:ce:42: f7:b7:f0:d9:55:4e:1a:3e:99:a7:9a:f7:3d:db:86:f9:ef:e8: bc:95:b1:28:8f:95:e2:ce:88:72:8b:02:16:27:7d:a0:4d:18: 70:89:88:3a:26:ad:bd:77:a5:3e:7f:81:d8:d9:34:74:18:03: 9d:5d:d5:8e:5e:a9:d0:90:89:e9:30:a8:14:0f:de:fb:c2:77: 8f:3f:90:cd:c0:dd:e1:8c:6a:23:2c:c2:fe:0d:91:ac:51:2f: a4:ff:bf:d1:a1:03:62:87:11:61:f8:e3:05:ae:61:53:6b:b2: f9:20:9f:34:28:67:2d:59:b2:9c:aa:8b:14:a9:c0:09:fc:4f: 43:f4:82:26:75:70:d2:a9:a9:8d:8b:31:7e:98:51:57:7c:e0: ff:05:ae:e7:b5:82:38:f3:2b:83:0e:06:a8:56:62:29:98:c8: 8d:24:53:5c:b6:95:d5:d9:f2:55:f2:4e:61:81:32:fd:a2:2a: 2f:10:94:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUUja1bd+5PYAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OGMyOTA0NjgtOGNjZS00NmZkLTgwMDItNTY1NDUyNmM4MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzTQV2uMSjS6BNkoOYjGuNhP9xEfd1a6idtP gXSkJkD7b570OXP8QY1sq+QCvZO1aoBiJ0VIwL6SVVMCIjC/9qJvAscgOmUeb5CM ZTi08sYEdrfHn70FFwHU02Aw7l4VtQWR/LzFMsBOLVIA5gUy3RLN7J7PAGS2EirD GB8+6HcA6n86hQOsPDU+zZVqdo06rAcoigaAn7EsN0b6oP+T3o6aQowMoG1vtNeP U5WRwoBS5ZGEFweweYd3UE9DlP095bc+6DUKempq6L8ndI7lXNdzstCTOKi1fgkV nNlNDsXsDsXuqF7xTzgAzsgLZL3D6ayan7zpCbWEfwNR1pU1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmz2qg+fqJ860knBEYiFMfuGahNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmFhNTZkOGMtN2FlOS0z NjQ1LTk2ZTEtOWFjZWMwY2VhODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6Vv2qDvzI258KmZetBoNr/TPP7NaU4oZ0D0Kf3IgQ99Fe0uDxGrAUS WxC2s7xl5AgiXJJ2K6yP3fwj/ZmhCmUCLCvJcPrOQve38NlVTho+maea9z3bhvnv 6LyVsSiPleLOiHKLAhYnfaBNGHCJiDomrb13pT5/gdjZNHQYA51d1Y5eqdCQiekw qBQP3vvCd48/kM3A3eGMaiMswv4NkaxRL6T/v9GhA2KHEWH44wWuYVNrsvkgnzQo Zy1ZspyqixSpwAn8T0P0giZ1cNKpqY2LMX6YUVd84P8Frue1gjjzK4MOBqhWYimY yI0kU1y2ldXZ8lXyTmGBMv2iKi8QlKI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:34 2025 by rpki-client