$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13efce23-df39-3b5b-8573-b59c64c3e4b3.roa File: 13efce23-df39-3b5b-8573-b59c64c3e4b3.roa (raw, json) Hash identifier: ODsO4uKxmUVlXWC956kOyMHUSb+1noTph+C7SPfSbwU= Subject key identifier: FD:7F:1B:03:53:32:91:6A:2B:10:A9:59:5E:85:53:71:AD:12:B1:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBE3BA6F29AE3E78DE480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13efce23-df39-3b5b-8573-b59c64c3e4b3.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.34.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:be:3b:a6:f2:9a:e3:e7:8d:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=1e43abaf-ef23-4f11-83a2-a0afa5a71dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:ee:92:02:29:8f:0f:7a:da:0e:2c:fa:4e: 90:fa:d5:42:6d:af:87:50:4b:5d:85:ed:ff:ae:66: 89:0b:4c:1c:a4:fc:aa:0b:ce:8e:0d:75:30:4e:bd: 10:7b:71:3c:77:fe:02:f0:2f:f0:f1:42:f7:01:5c: f2:5b:44:b3:bb:81:3e:51:55:e6:ff:a7:df:75:84: bd:ed:fc:0a:02:42:0b:e6:ba:b8:17:c7:61:06:27: c8:c6:f9:90:ef:13:e2:b9:27:73:52:c4:6a:8c:b0: 02:6c:4a:81:f0:60:38:2e:23:09:79:c3:4b:a2:d9: 46:82:69:15:7f:cf:1d:55:9d:56:90:f7:5c:d9:78: ec:56:5a:83:3b:3a:b9:3f:0d:af:7c:57:43:a3:e5: 1d:0f:6a:65:5f:1a:85:b5:48:90:41:ca:66:b8:c7: ad:88:dc:65:99:40:15:d4:c5:1d:d3:a9:fa:68:d1: ba:76:08:b1:2c:b8:98:0a:73:2e:73:d2:79:56:17: f5:dd:44:49:48:51:2f:14:2a:11:e6:35:18:f1:b3: 11:4e:f1:de:e9:e2:c0:3c:b0:b5:d8:aa:cf:b4:31: 53:09:c2:17:22:ad:90:42:f1:99:da:98:2f:ee:1d: 4a:d6:26:c9:2d:0d:72:4a:fc:38:13:a6:c0:0c:8e: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:1B:03:53:32:91:6A:2B:10:A9:59:5E:85:53:71:AD:12:B1:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13efce23-df39-3b5b-8573-b59c64c3e4b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5e:a5:cd:c1:99:25:55:e7:76:d6:6c:4f:ae:f2:ad:9a:36: 47:b5:15:e6:5d:08:25:7d:a6:2f:ae:69:e4:82:dc:70:84:70: ff:40:e0:92:3c:8c:74:23:83:d3:36:4d:6c:49:00:40:36:03: 8c:b4:ff:ce:8f:69:30:11:f2:6f:e5:b9:25:e0:e7:3c:5f:81: 43:38:57:7e:b8:2f:e1:59:00:30:e3:9d:a6:64:72:6d:4c:59: 0e:f7:c5:75:0e:45:9f:ec:d1:9d:76:eb:cf:7f:3f:9b:d7:6c: 25:28:e0:87:00:a0:f8:9f:c6:5f:fb:46:7c:bd:17:04:ec:70: 33:9c:d9:90:ea:8c:c2:8e:32:cc:4e:79:10:25:f7:47:0b:10: 7c:0d:4a:81:2b:f6:44:25:49:f1:a1:bd:6f:42:6f:fd:03:6c: 5d:bc:88:c0:0d:5e:3e:87:29:27:6b:5a:e8:b1:fb:d4:ed:e4: f8:04:98:25:d1:68:86:cd:89:4c:a4:1e:1e:0e:bb:b7:ce:12: cf:da:f5:d4:c3:98:d0:21:ed:4f:a1:f9:a8:32:13:a7:cd:c6: 65:77:86:56:32:36:cb:c3:13:d6:99:75:f9:12:b4:f8:a6:ae: 7d:49:c9:fa:29:50:9c:d3:31:19:dc:20:4d:e4:6f:70:9f:5c: c3:ff:06:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLr47pvKa4+eN5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MWU0M2FiYWYtZWYyMy00ZjExLTgzYTItYTBhZmE1YTcxZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnbukgIpjw962g4s+k6Q+tVCba+HUEtdhe3/ rmaJC0wcpPyqC86ODXUwTr0Qe3E8d/4C8C/w8UL3AVzyW0Szu4E+UVXm/6ffdYS9 7fwKAkIL5rq4F8dhBifIxvmQ7xPiuSdzUsRqjLACbEqB8GA4LiMJecNLotlGgmkV f88dVZ1WkPdc2XjsVlqDOzq5Pw2vfFdDo+UdD2plXxqFtUiQQcpmuMetiNxlmUAV 1MUd06n6aNG6dgixLLiYCnMuc9J5Vhf13URJSFEvFCoR5jUY8bMRTvHe6eLAPLC1 2KrPtDFTCcIXIq2QQvGZ2pgv7h1K1ibJLQ1ySvw4E6bADI6+QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1/GwNTMpFqKxCpWV6FU3GtErEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTNlZmNlMjMtZGYzOS0z YjViLTg1NzMtYjU5YzY0YzNlNGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtepc3BmSVV53bWbE+u8q2aNke1FeZdCCV9pi+uaeSC3HCEcP9A4JI8 jHQjg9M2TWxJAEA2A4y0/86PaTAR8m/luSXg5zxfgUM4V364L+FZADDjnaZkcm1M WQ73xXUORZ/s0Z12689/P5vXbCUo4IcAoPifxl/7Rny9FwTscDOc2ZDqjMKOMsxO eRAl90cLEHwNSoEr9kQlSfGhvW9Cb/0DbF28iMANXj6HKSdrWuix+9Tt5PgEmCXR aIbNiUykHh4Ou7fOEs/a9dTDmNAh7U+h+agyE6fNxmV3hlYyNsvDE9aZdfkStPim rn1JyfopUJzTMRncIE3kb3CfXMP/BoI= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:21 2025 by rpki-client