$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33240eac-a147-3917-8db1-f1c9673b4a29.roa File: 33240eac-a147-3917-8db1-f1c9673b4a29.roa (raw, json) Hash identifier: NrvRxQp0U+IdJM1I75WZPbmgo5B8f9+nFoIqvN3TwgY= Subject key identifier: 39:25:A2:42:01:41:94:F8:04:E5:4C:D2:93:B7:CD:C2:8D:0D:48:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED5FAFA2E1DE27165A730 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33240eac-a147-3917-8db1-f1c9673b4a29.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.36.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d5:fa:fa:2e:1d:e2:71:65:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ea94f2ff-3b27-4f74-a5ca-6c44f7d0e3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:f1:43:3e:46:91:4a:58:f0:c9:b2:fb:27: b3:39:ff:19:4d:5c:50:3a:b3:f7:51:90:36:e2:64: 12:e8:e8:23:76:ff:8e:eb:39:b5:e8:7c:d8:c4:4c: e6:1d:e1:9f:7c:5d:55:94:9f:38:da:ed:92:a2:c2: 2e:4d:e1:6a:5c:06:20:8b:24:2c:56:19:2f:5d:5d: b8:86:a6:04:44:d5:87:95:a8:8f:c9:99:a4:4f:5c: 30:78:6e:73:16:d3:68:9c:c7:c0:49:2e:38:bc:ae: fb:f7:17:e8:61:d5:e1:df:7b:e5:33:97:f1:35:bd: c0:18:a4:d9:b0:82:dc:cb:c1:9d:40:c5:c4:da:ba: 3f:ce:f6:87:d7:0d:b8:b3:ee:88:72:98:48:6c:a4: db:e8:81:c5:5a:ce:cc:de:e5:bd:44:79:cc:b7:a0: a7:ea:8d:ad:6d:56:ec:d8:f8:36:12:a3:b4:22:2e: a6:48:a3:76:a7:a8:fc:ba:45:09:6b:3d:f9:cd:24: 05:21:8d:00:6d:69:4a:2b:4c:36:11:cf:e4:b1:db: b5:55:00:ae:56:df:bb:2c:27:21:88:ec:05:12:80: 1d:ed:9a:5c:2e:1b:80:b3:7e:c1:3a:50:9f:64:e1: 53:32:7a:d2:ff:11:aa:19:df:f6:c4:02:11:7d:92: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:A2:42:01:41:94:F8:04:E5:4C:D2:93:B7:CD:C2:8D:0D:48:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33240eac-a147-3917-8db1-f1c9673b4a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:05:d0:bb:06:a4:cd:f7:b8:fb:26:9a:3d:eb:9f:a4:9a:fa: 29:74:3b:d6:84:3b:4a:f7:dc:5a:5e:15:40:2a:92:e0:7b:63: d9:1a:48:d2:53:13:4b:30:e0:6a:07:36:ea:70:e8:96:51:d6: 9c:e3:53:14:44:96:0d:dd:91:54:a9:8c:b7:56:0b:93:18:a3: 01:c5:26:43:5f:c5:44:04:4c:0f:02:ce:ff:d1:83:a5:dd:65: b7:b4:ad:3f:60:f1:49:d8:90:cb:2b:b8:37:48:2d:77:dc:4e: 25:ad:b4:51:e6:b7:2c:66:40:00:6c:06:27:8b:28:b3:fe:06: 89:c6:3b:87:db:22:9a:48:65:e3:c1:61:0b:da:ab:c2:41:c5: 00:df:9b:b2:f0:78:3c:dc:de:13:6f:ef:62:cc:ef:90:44:66: e5:4f:52:61:d5:c5:20:4d:bb:08:b0:36:e2:b2:e2:0c:98:5e: 22:ec:b9:a6:e3:81:f5:13:23:b9:81:9f:22:80:e6:07:2c:ac: e3:fc:22:77:21:38:36:ac:c0:de:e6:61:d9:c5:e6:3c:af:8d: 1a:58:2e:71:d9:7e:ed:57:ad:d0:0e:9d:0f:a6:9b:a6:31:8e: a1:21:f1:ef:d0:ee:52:ad:fb:9b:23:b9:09:9c:9e:af:74:20: 91:e1:c8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtX6+i4d4nFlpzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZWE5NGYyZmYtM2IyNy00Zjc0LWE1Y2EtNmM0NGY3ZDBlM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk3xQz5GkUpY8Mmy+yezOf8ZTVxQOrP3UZA2 4mQS6Ogjdv+O6zm16HzYxEzmHeGffF1VlJ842u2SosIuTeFqXAYgiyQsVhkvXV24 hqYERNWHlaiPyZmkT1wweG5zFtNonMfASS44vK779xfoYdXh33vlM5fxNb3AGKTZ sILcy8GdQMXE2ro/zvaH1w24s+6IcphIbKTb6IHFWs7M3uW9RHnMt6Cn6o2tbVbs 2Pg2EqO0Ii6mSKN2p6j8ukUJaz35zSQFIY0AbWlKK0w2Ec/ksdu1VQCuVt+7LCch iOwFEoAd7ZpcLhuAs37BOlCfZOFTMnrS/xGqGd/2xAIRfZJSiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDklokIBQZT4BOVM0pO3zcKNDUhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzMyNDBlYWMtYTE0Ny0z OTE3LThkYjEtZjFjOTY3M2I0YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyQtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgF0LsGpM33uPsmmj3rn6Sa+il0O9aEO0r33FpeFUAqkuB7Y9kaSNJT E0sw4GoHNupw6JZR1pzjUxRElg3dkVSpjLdWC5MYowHFJkNfxUQETA8Czv/Rg6Xd Zbe0rT9g8UnYkMsruDdILXfcTiWttFHmtyxmQABsBieLKLP+BonGO4fbIppIZePB YQvaq8JBxQDfm7LweDzc3hNv72LM75BEZuVPUmHVxSBNuwiwNuKy4gyYXiLsuabj gfUTI7mBnyKA5gcsrOP8InchODaswN7mYdnF5jyvjRpYLnHZfu1XrdAOnQ+mm6Yx jqEh8e/Q7lKt+5sjuQmcnq90IJHhyDE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:09 2025 by rpki-client