$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa File: 5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa (raw, json) Hash identifier: U83G4FDIuMPDE28Py+6GCvffApuonfoDzzkBPqyprL4= Subject key identifier: 9B:F2:17:0D:0C:9B:F4:B6:72:29:C5:F2:5A:79:D7:ED:49:31:11:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB9F97658DF08CBFE88DC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.35.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b9:f9:76:58:df:08:cb:fe:88:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=86d9089f-8cae-43ef-8aab-775ae79268fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:25:2d:9e:0c:fc:2b:f3:6f:be:ff:2e:ac: fa:0c:13:7f:c7:65:fe:6d:99:34:f3:fd:59:a9:74: 63:3a:80:16:86:1c:95:1a:44:4d:04:3c:3d:11:3d: df:fa:72:cb:b2:9f:af:dd:4a:99:58:8f:55:6d:32: 52:78:6a:f2:a3:cb:5d:e3:c6:21:16:df:58:49:7e: 6d:cf:1e:49:1a:24:3a:82:df:81:fa:19:aa:89:15: 37:f9:c4:10:8b:97:56:16:c8:ae:7b:4d:61:1b:11: 2c:34:b1:85:f4:db:37:0e:5c:d2:6a:47:ca:a9:71: 6e:9a:8e:30:b6:01:c1:2e:59:02:f8:31:c2:b8:04: 35:99:ac:a2:78:a7:b0:ea:ea:09:4f:9d:3f:02:63: 29:31:00:89:34:8d:88:52:f2:4a:14:ab:cf:88:3a: d7:d9:b4:04:2c:fb:ed:41:4f:8f:db:ef:3f:42:c0: 73:27:df:20:3d:13:ef:74:f7:3d:57:df:a1:09:2e: dd:2c:ae:ff:99:15:2b:59:c6:78:5f:26:20:bc:59: 95:8d:25:be:14:58:af:a8:46:1a:54:c9:6f:5d:f0: 4b:13:d6:81:08:77:8c:4e:84:92:10:d5:e6:a7:93: 3a:a5:c4:ee:8e:a9:f2:bb:dc:b6:ec:72:fa:b0:79: c8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:17:0D:0C:9B:F4:B6:72:29:C5:F2:5A:79:D7:ED:49:31:11:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0b:8a:ab:db:2b:62:2b:a5:6a:ad:f8:f9:8f:9e:46:cc:bd: 3b:a9:f4:c8:00:21:42:52:b7:0e:d6:93:2c:7c:4b:f5:2b:bb: f3:ee:3d:9a:37:eb:06:c7:81:7e:44:d7:ad:a8:62:30:ba:93: 98:47:94:40:bd:e0:b8:e5:b8:5c:fd:6d:48:99:21:c7:29:9d: b1:e7:a9:ba:85:88:82:83:d3:a7:26:93:6c:0e:bd:bc:d5:83: ed:d1:96:b5:23:be:f2:34:72:09:c8:af:25:fa:93:bc:f8:c4: 97:7a:63:53:fe:0e:1b:c7:8b:26:e8:0d:fa:fd:25:4f:e5:59: 10:02:e7:6f:42:27:7f:9e:33:ab:a5:df:85:38:f5:0f:03:64: 68:49:4a:f5:07:ee:c0:56:5d:8d:15:a7:96:71:1d:1f:7f:5e: 3e:e3:b7:31:44:85:05:c2:e2:82:14:43:de:bb:67:15:4f:84: ef:c9:ad:65:8c:06:a9:2c:e6:70:61:b4:e6:b4:8e:96:44:32: c0:d6:75:24:0c:fc:03:9f:0e:ad:b7:b9:83:5a:68:2c:ee:72: 23:c4:d7:1a:dd:fd:8d:39:89:8b:c1:bb:24:e8:ac:95:f4:bd: 75:7e:39:5b:a4:a2:c4:72:9e:63:52:50:5a:ca:6a:29:ed:1f: 54:80:3a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrn5dljfCMv+iNwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ODZkOTA4OWYtOGNhZS00M2VmLThhYWItNzc1YWU3OTI2OGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvElLZ4M/Cvzb77/Lqz6DBN/x2X+bZk08/1Z qXRjOoAWhhyVGkRNBDw9ET3f+nLLsp+v3UqZWI9VbTJSeGryo8td48YhFt9YSX5t zx5JGiQ6gt+B+hmqiRU3+cQQi5dWFsiue01hGxEsNLGF9Ns3DlzSakfKqXFumo4w tgHBLlkC+DHCuAQ1mayieKew6uoJT50/AmMpMQCJNI2IUvJKFKvPiDrX2bQELPvt QU+P2+8/QsBzJ98gPRPvdPc9V9+hCS7dLK7/mRUrWcZ4XyYgvFmVjSW+FFivqEYa VMlvXfBLE9aBCHeMToSSENXmp5M6pcTujqnyu9y27HL6sHnILwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvyFw0Mm/S2cinF8lp51+1JMREDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1MTE0ZWEtMjBiMS0z MjIzLTg0ZGUtZDlhNWQzY2ZhMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyNBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8LiqvbK2IrpWqt+PmPnkbMvTup9MgAIUJStw7Wkyx8S/Uru/PuPZo3 6wbHgX5E162oYjC6k5hHlEC94LjluFz9bUiZIccpnbHnqbqFiIKD06cmk2wOvbzV g+3RlrUjvvI0cgnIryX6k7z4xJd6Y1P+DhvHiyboDfr9JU/lWRAC529CJ3+eM6ul 34U49Q8DZGhJSvUH7sBWXY0Vp5ZxHR9/Xj7jtzFEhQXC4oIUQ967ZxVPhO/JrWWM Bqks5nBhtOa0jpZEMsDWdSQM/AOfDq23uYNaaCzuciPE1xrd/Y05iYvBuyTorJX0 vXV+OVukosRynmNSUFrKaintH1SAOiU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:26:47 2025 by rpki-client