$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa File: 4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa (raw, json) Hash identifier: dyEiStcKDTf2Zg+cYRryAlduEcMWrmoe8d2Js71wGfI= Subject key identifier: EF:AA:DC:BD:61:B6:12:69:28:1B:FA:79:19:EE:F5:DF:37:67:24:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC0D04DE9F2A625C86B240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.63.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0d:04:de:9f:2a:62:5c:86:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ed54d2c1-f039-484a-a1d0-f336b8baf69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:63:3b:37:1d:06:cc:a2:4b:28:a2:ce:e5: 06:e9:b6:e5:93:88:f1:db:a4:ed:6b:9e:7e:02:07: 8b:c3:5f:d8:18:dd:20:09:5b:07:a5:31:aa:04:8b: 79:1b:c9:bb:ee:be:6d:46:06:41:df:ce:e1:d6:13: 5f:15:81:4c:57:62:60:6d:e5:d1:b0:e8:31:1d:da: d3:24:1f:5e:5a:4a:ca:85:89:19:e4:00:89:2c:25: e7:28:ae:cf:71:2c:8f:9e:77:0f:42:5e:62:6c:fb: 51:7a:7d:bd:79:06:33:94:f4:dd:5c:fe:94:0a:ef: d3:8d:4d:e2:a8:24:c3:89:b4:bd:d4:8e:3d:bd:2b: cd:e5:a7:20:eb:f6:eb:26:3e:da:51:f7:a3:b8:0b: 29:58:d8:05:37:c3:db:27:23:36:7b:e3:48:65:d3: 1f:16:e0:cb:85:12:6d:65:3c:46:3a:f2:53:f4:c8: 46:5a:05:08:88:dc:84:6b:e0:70:68:ff:b9:ec:c0: ef:b4:b0:e2:77:c3:fb:d9:a0:1c:04:50:72:fb:f4: 69:3d:f8:2a:e9:b7:3c:db:db:5e:1f:76:f4:3b:0e: 95:69:13:a2:35:ec:f4:c7:a0:30:5d:d7:62:c6:2c: 2f:89:86:37:3e:be:18:dc:04:88:92:74:69:53:0b: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AA:DC:BD:61:B6:12:69:28:1B:FA:79:19:EE:F5:DF:37:67:24:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1a:13:07:51:79:34:0f:8f:8a:56:e5:d6:74:f3:4f:a0:c0: de:13:42:a2:48:6e:78:4f:a5:f1:9c:1a:ee:b3:02:ff:cc:4d: 10:62:15:28:12:2b:59:fe:39:13:0d:99:5a:12:c1:53:da:b1: f5:b9:89:6e:6c:5b:b6:81:10:ee:f3:af:70:eb:90:d1:5a:d4: 6b:72:58:4d:e5:d2:61:25:7e:b1:03:56:bf:15:7e:18:02:f9: 4f:0f:ac:95:db:f5:c9:32:50:8c:a2:df:23:1e:8c:38:03:10: db:66:67:54:47:99:74:33:9a:ac:40:7f:69:6c:f7:27:ba:74: 06:31:bd:bb:2c:c9:b3:dc:42:82:ae:ae:cb:2f:df:18:de:c8: 88:e1:ad:23:cd:7f:fb:b1:b2:43:fd:bf:13:4d:54:74:04:85: 1c:ba:5b:e0:11:39:03:52:b3:5f:6f:8e:4c:43:0f:2b:cc:d7: f0:a6:3f:36:15:a5:6b:61:04:98:7a:55:61:a4:4f:e5:ca:19: ff:4d:3d:0e:13:f3:c5:a9:cb:f9:70:14:21:46:9d:2c:be:73: b6:4b:9b:f9:6b:ee:60:03:82:90:85:23:de:35:18:c4:90:4e: 22:6a:d2:0b:6a:ab:3c:05:23:f2:47:53:52:04:e3:74:49:43: e0:10:4a:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7A0E3p8qYlyGskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZWQ1NGQyYzEtZjAzOS00ODRhLWExZDAtZjMzNmI4YmFmNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXZjOzcdBsyiSyiizuUG6bblk4jx26Tta55+ AgeLw1/YGN0gCVsHpTGqBIt5G8m77r5tRgZB387h1hNfFYFMV2JgbeXRsOgxHdrT JB9eWkrKhYkZ5ACJLCXnKK7PcSyPnncPQl5ibPtRen29eQYzlPTdXP6UCu/TjU3i qCTDibS91I49vSvN5acg6/brJj7aUfejuAspWNgFN8PbJyM2e+NIZdMfFuDLhRJt ZTxGOvJT9MhGWgUIiNyEa+BwaP+57MDvtLDid8P72aAcBFBy+/RpPfgq6bc829te H3b0Ow6VaROiNez0x6AwXddixiwviYY3Pr4Y3ASIknRpUwtDKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+q3L1hthJpKBv6eRnu9d83ZyTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJkMWE2YjMtMjExMS0z NjI0LTllZmYtMTE2NWU3MzIwYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0aEwdReTQPj4pW5dZ080+gwN4TQqJIbnhPpfGcGu6zAv/MTRBiFSgS K1n+ORMNmVoSwVPasfW5iW5sW7aBEO7zr3DrkNFa1GtyWE3l0mElfrEDVr8VfhgC +U8PrJXb9ckyUIyi3yMejDgDENtmZ1RHmXQzmqxAf2ls9ye6dAYxvbssybPcQoKu rssv3xjeyIjhrSPNf/uxskP9vxNNVHQEhRy6W+AROQNSs19vjkxDDyvM1/CmPzYV pWthBJh6VWGkT+XKGf9NPQ4T88Wpy/lwFCFGnSy+c7ZLm/lr7mADgpCFI941GMSQ TiJq0gtqqzwFI/JHU1IE43RJQ+AQSrU= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:48 2025 by rpki-client