$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71274d25-048b-3cbf-926b-e33367e763ee.roa File: 71274d25-048b-3cbf-926b-e33367e763ee.roa (raw, json) Hash identifier: 4dBo3Bc1CBKdQcdu0aT9+KNSluLHlsQ3K/mHGJhzEbU= Subject key identifier: 47:3B:7B:54:76:71:BD:6E:7B:00:D3:A8:38:9C:69:E6:65:27:51:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB61F68BE31842FF7D500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71274d25-048b-3cbf-926b-e33367e763ee.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b6:1f:68:be:31:84:2f:f7:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=3fe03665-41f3-4696-ac92-507e478e1957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:9e:40:3b:54:84:c1:61:3b:2f:11:a5:6e: 1f:e7:6c:8b:00:57:bb:3e:69:c2:84:ab:2f:99:81: 64:0d:d3:c7:c3:18:1c:7f:4d:6b:02:4b:51:d1:fb: 87:f2:ca:2b:6d:02:b3:08:e2:bc:e2:1d:26:88:df: 51:85:a8:2d:ae:83:11:f8:fc:2d:34:8d:d4:ec:c0: 59:22:c7:c9:54:09:82:ae:f9:1d:d3:d3:b5:c8:21: 19:48:8c:34:55:00:2f:b5:7c:88:b7:01:85:61:1f: 23:cd:aa:33:3f:4f:23:69:95:87:fe:fd:8c:5f:d8: 3e:37:26:42:68:06:e1:3f:b3:5c:a4:18:95:2a:01: 25:0b:88:ac:c9:f1:f2:48:7f:39:c8:6b:0a:38:a8: 2f:ca:af:fa:3d:09:78:3a:0f:ba:a1:51:13:a8:9d: 6c:32:5f:bd:bc:a6:29:b6:6f:8c:c5:aa:ac:f8:9a: f1:03:54:b0:61:94:95:f0:53:fe:99:be:bf:ea:cf: ab:12:78:38:18:55:33:c1:9c:b0:be:02:f1:c1:6a: f6:1e:0e:69:b3:d4:0c:19:27:b3:2c:f2:93:7d:a7: 11:de:28:2c:e5:3f:bf:bd:63:69:b9:a5:65:14:83: 3f:59:b4:a6:9d:33:7d:07:46:f3:93:e8:de:35:ce: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:7B:54:76:71:BD:6E:7B:00:D3:A8:38:9C:69:E6:65:27:51:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71274d25-048b-3cbf-926b-e33367e763ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9a:02:a6:d6:e6:30:bb:7b:d9:0e:c3:1b:95:4a:fa:9a:38: 17:9d:a2:d2:57:35:06:2c:41:78:d3:32:2a:09:96:5d:33:b0: 57:5e:be:b0:2a:c4:42:d9:0a:bf:26:bd:a3:78:da:48:32:a7: ed:55:01:c2:be:4a:a9:5e:b4:5f:09:c7:08:b8:d8:55:dc:ff: 62:d4:0b:06:cd:04:a9:d7:e3:6c:6d:ea:33:76:29:f0:c7:cb: 30:6a:cd:cc:6c:47:6d:fd:35:77:b5:80:f5:93:c9:2d:8a:00: 2a:41:48:f0:bc:c9:0b:21:c6:9e:18:29:a0:1c:9a:12:08:24: 9f:3b:4a:c5:a8:b3:d9:c0:41:7c:05:78:f0:30:4f:3b:f3:7a: 01:46:22:c4:56:f4:30:54:ec:0e:07:70:6e:16:ed:e3:29:63: f5:16:59:3a:ea:f9:b1:4f:9f:28:13:1b:20:85:9c:f2:7c:33: 39:e3:cf:02:af:57:f1:95:59:48:3d:57:53:50:35:f0:43:10: 21:15:f2:63:e7:b0:b4:84:43:c3:bf:30:1b:bd:4b:a2:2b:b3: fd:87:9a:7a:80:c5:fa:7f:7a:63:e2:31:39:ff:61:4c:54:2d: 9b:51:50:9a:81:53:38:e4:1d:00:54:f1:c9:9f:7a:c3:1c:db: 52:79:06:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrYfaL4xhC/31QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk M2ZlMDM2NjUtNDFmMy00Njk2LWFjOTItNTA3ZTQ3OGUxOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwaeQDtUhMFhOy8RpW4f52yLAFe7PmnChKsv mYFkDdPHwxgcf01rAktR0fuH8sorbQKzCOK84h0miN9RhagtroMR+PwtNI3U7MBZ IsfJVAmCrvkd09O1yCEZSIw0VQAvtXyItwGFYR8jzaozP08jaZWH/v2MX9g+NyZC aAbhP7NcpBiVKgElC4isyfHySH85yGsKOKgvyq/6PQl4Og+6oVETqJ1sMl+9vKYp tm+Mxaqs+JrxA1SwYZSV8FP+mb6/6s+rEng4GFUzwZywvgLxwWr2Hg5ps9QMGSez LPKTfacR3igs5T+/vWNpuaVlFIM/WbSmnTN9B0bzk+jeNc74gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc7e1R2cb1uewDTqDicaeZlJ1HBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzEyNzRkMjUtMDQ4Yi0z Y2JmLTkyNmItZTMzMzY3ZTc2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqaAqbW5jC7e9kOwxuVSvqaOBedotJXNQYsQXjTMioJll0zsFdevrAq xELZCr8mvaN42kgyp+1VAcK+SqletF8Jxwi42FXc/2LUCwbNBKnX42xt6jN2KfDH yzBqzcxsR239NXe1gPWTyS2KACpBSPC8yQshxp4YKaAcmhIIJJ87SsWos9nAQXwF ePAwTzvzegFGIsRW9DBU7A4HcG4W7eMpY/UWWTrq+bFPnygTGyCFnPJ8MznjzwKv V/GVWUg9V1NQNfBDECEV8mPnsLSEQ8O/MBu9S6Irs/2HmnqAxfp/emPiMTn/YUxU LZtRUJqBUzjkHQBU8cmfesMc21J5BsE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:11 2025 by rpki-client