$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa File: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (raw, json) Hash identifier: QUhiE2c30unUueH7VhvL071APcS4MSg+NeH/nlhZuTo= Subject key identifier: E2:72:01:8E:A7:75:D4:58:29:E1:7F:3C:D2:5F:7D:61:BA:A5:B9:C7 Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Certificate serial: 010D0C9F4328584902E26AB3DE30BD4214555640 Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa Signing time: Wed 26 Feb 2025 13:41:39 +0000 ROA not before: Wed 26 Feb 2025 13:41:39 +0000 ROA not after: Tue 27 May 2025 12:41:39 +0000 asID: 2914 IP address blocks: 23.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:e2:6a:b3:de:30:bd:42:14:55:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Validity Not Before: Feb 26 13:41:39 2025 GMT Not After : May 27 12:41:39 2025 GMT Subject: CN=64d6350f-af11-4276-93a6-7333b2cd17a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:06:3e:f4:71:51:01:86:22:e0:ad:00:06: d9:76:cf:a1:e0:5b:b6:10:8c:aa:a9:ae:e4:01:7f: 82:b7:9e:6d:40:d5:f4:fe:be:d9:a7:44:ca:a4:c5: fc:61:7d:24:02:3b:ae:2b:71:5a:76:59:4c:2d:98: b5:b3:73:d5:3a:e1:ab:de:8d:1e:a5:f0:a3:1f:58: 42:36:52:b0:73:b8:75:65:43:b6:f1:fc:d9:1d:b2: 37:f6:6d:a0:24:a5:b2:ac:4a:d6:e4:37:c5:d2:78: 17:a3:01:90:14:44:ea:17:2f:c2:dd:a0:40:9e:02: 47:19:97:84:eb:1d:64:a5:bc:e7:ae:5e:55:b8:4b: 29:4f:7f:ef:79:c0:ef:8e:49:c5:d2:76:cf:1f:fb: f1:c0:07:ad:5b:10:a3:ee:bc:75:d3:00:08:f4:24: 21:cd:9a:a9:b5:21:a2:f5:98:78:3d:87:bc:51:14: 91:96:8c:af:95:a1:be:0c:5a:3a:2c:40:26:a1:ff: 6b:db:69:b5:e2:e3:02:fe:ff:ba:a8:df:6c:49:9e: ba:54:1a:eb:e7:90:cf:39:35:34:f5:1f:e6:5b:89: 16:3e:65:94:12:89:6f:d6:8a:62:cf:82:29:3b:bc: 1d:83:c8:60:67:b4:53:51:73:91:ad:6f:79:cf:14: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:01:8E:A7:75:D4:58:29:E1:7F:3C:D2:5F:7D:61:BA:A5:B9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl X509v3 Authority Key Identifier: keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer sbgp-ipAddrBlock: critical IPv4: 23.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:13:36:3b:29:af:aa:02:d7:83:5c:d9:4c:26:53:94:9e:b8: cd:47:fd:95:31:b6:8c:f1:6a:ed:4e:ba:cf:1a:79:a3:b0:b5: 3f:6b:6b:e3:b3:e5:7f:78:10:f1:e2:79:82:b6:22:e0:b7:20: f2:64:41:de:30:8c:b3:24:63:f7:5d:b4:0f:55:f3:3d:5c:3e: e7:30:d5:2e:36:ab:ff:7d:eb:16:98:b2:2b:46:0b:21:d3:0e: f4:07:83:14:71:6e:00:7b:12:a1:cb:63:5e:cb:37:cf:12:6c: 93:21:64:51:07:8b:bb:0d:13:98:0b:01:87:ab:52:21:e0:28: c6:53:88:80:5e:99:c8:06:c1:28:8e:f8:d6:cf:0c:5c:b6:91: 13:60:e5:5b:45:dc:09:49:66:9d:ec:c8:85:b6:ec:49:50:69: b1:84:db:51:2f:8d:9a:11:7c:36:f5:40:d9:27:b9:e2:f9:83: 3f:d6:16:d8:ed:d8:c3:c7:cd:f4:27:a1:36:99:eb:13:8f:46: 7f:33:ab:a7:b8:8a:78:ec:21:0c:be:29:d1:85:3c:56:9d:19: 2a:9e:17:97:51:6c:a1:b4:e7:a1:13:61:4f:0d:54:3f:56:80: 4e:e8:ee:56:5b:b1:37:62:52:4c:fe:ff:6d:60:07:ec:45:e1: ef:cb:0c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC4mqz3jC9QhRVVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyZDViODYtY2NhMC00ZjJhLTg3YTQtODc0ZjVlOTZl ZWQ4MB4XDTI1MDIyNjEzNDEzOVoXDTI1MDUyNzEyNDEzOVowLzEtMCsGA1UEAxMk NjRkNjM1MGYtYWYxMS00Mjc2LTkzYTYtNzMzM2IyY2QxN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn8GPvRxUQGGIuCtAAbZds+h4Fu2EIyqqa7k AX+Ct55tQNX0/r7Zp0TKpMX8YX0kAjuuK3FadllMLZi1s3PVOuGr3o0epfCjH1hC NlKwc7h1ZUO28fzZHbI39m2gJKWyrErW5DfF0ngXowGQFETqFy/C3aBAngJHGZeE 6x1kpbznrl5VuEspT3/vecDvjknF0nbPH/vxwAetWxCj7rx10wAI9CQhzZqptSGi 9Zh4PYe8URSRloyvlaG+DFo6LEAmof9r22m14uMC/v+6qN9sSZ66VBrr55DPOTU0 9R/mW4kWPmWUEolv1opiz4IpO7wdg8hgZ7RTUXORrW95zxQ0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJyAY6nddRYKeF/PNJffWG6pbnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTJk NWI4Ni1jY2EwLTRmMmEtODdhNC04NzRmNWU5NmVlZDgvNTA5NGIxNzAtNzc4My0z ODNiLWFkZDYtOGRiMGVhN2Y5MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmEyZDViODYtY2NhMC00ZjJhLTg3 YTQtODc0ZjVlOTZlZWQ4L2JhMmQ1Yjg2LWNjYTAtNGYyYS04N2E0LTg3NGY1ZTk2 ZWVkOC5jcmwwHwYDVR0jBBgwFoAUx3nB3TW8aFEyWWvPV4E7fcTjJM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTJkNWI4Ni1jY2EwLTRmMmEtODdhNC04NzRm NWU5NmVlZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGETNjspr6oC14Nc2UwmU5SeuM1H/ZUxtozxau1Ous8aeaOwtT9ra+Oz 5X94EPHieYK2IuC3IPJkQd4wjLMkY/ddtA9V8z1cPucw1S42q/996xaYsitGCyHT DvQHgxRxbgB7EqHLY17LN88SbJMhZFEHi7sNE5gLAYerUiHgKMZTiIBemcgGwSiO +NbPDFy2kRNg5VtF3AlJZp3syIW27ElQabGE21EvjZoRfDb1QNknueL5gz/WFtjt 2MPHzfQnoTaZ6xOPRn8zq6e4injsIQy+KdGFPFadGSqeF5dRbKG056ETYU8NVD9W gE7o7lZbsTdiUkz+/21gB+xF4e/LDAc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:45 2025 by rpki-client