$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa File: 789d62f2-2b56-350c-b7cb-7b7690dc009a.roa (raw, json) Hash identifier: vMD9zHA7KFXjXlrgTdQrvZoJv0mn5DcGuBblWRebDAA= Subject key identifier: A2:C0:D9:61:7A:FA:D2:03:A9:E0:C1:FB:27:E5:A9:2A:E5:1D:CD:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBCAFEEB651C7CFB32E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.33.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bc:af:ee:b6:51:c7:cf:b3:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=3ae925d7-c93c-48f7-9c54-596af46d340d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:2f:bc:29:b9:45:93:39:e6:fe:dd:8a:6c: 39:af:12:6d:b8:41:b7:ae:62:5d:78:cc:1a:66:aa: 67:a0:66:02:bb:3a:a6:f0:3f:ec:07:e8:97:76:64: 4e:ed:c8:24:68:35:48:0c:c8:4f:52:6e:44:7e:94: 60:50:eb:53:28:e8:80:ce:db:4b:a6:99:d9:2a:49: 92:65:d1:4b:72:30:a4:01:af:ce:dc:a5:cd:71:bd: cb:04:42:bc:a6:fc:76:fd:39:40:7e:15:d2:f2:ad: 55:aa:b1:87:07:cb:8e:fe:86:09:48:70:d9:5a:eb: 8f:90:44:be:43:fd:5c:0b:b2:2e:a6:10:5b:cb:8e: a0:aa:36:52:05:55:5e:6e:bd:02:0b:89:fc:ef:91: 7a:5d:cd:e2:6e:a9:ee:18:95:2d:c3:70:64:93:55: 8c:c3:02:23:3f:79:e9:7d:c8:10:3b:94:84:31:2b: 3e:2a:9e:73:b0:2c:8e:6e:98:29:4c:5a:15:0c:ce: f1:a0:90:28:bf:bb:61:33:79:ea:49:e8:12:88:8d: 4a:42:ee:6d:7e:16:e3:4f:a6:45:97:c9:cf:36:39: 88:63:c1:c4:98:8d:e7:3f:51:67:b4:be:70:39:23: bd:dd:50:e1:cd:13:8f:a9:ee:a5:7f:0a:89:d1:61: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C0:D9:61:7A:FA:D2:03:A9:E0:C1:FB:27:E5:A9:2A:E5:1D:CD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a2:66:f2:4e:b7:a9:c1:01:09:56:69:de:f3:60:78:9c:72: 75:e0:56:36:6a:dc:ce:b4:bd:70:0f:77:84:4c:cd:d1:7f:61: 57:9c:bf:62:29:03:41:83:9b:03:7c:cc:ab:78:0a:da:3a:9c: 54:ac:57:ea:8b:ac:ee:6d:a0:84:5f:13:c8:4b:1a:ef:90:a0: 36:0b:59:fc:24:da:14:08:9f:6a:89:3e:29:7e:16:dd:db:12: 5f:8e:2d:2e:31:50:02:03:0a:b3:60:ad:80:0c:c1:32:02:0a: 4d:73:2a:de:18:76:2e:30:45:07:45:ec:98:1b:d5:8b:ec:1d: 9f:07:4a:53:46:0b:f8:4c:2a:6b:41:85:f5:eb:f6:78:94:26: c5:c6:d1:7b:eb:46:01:ef:18:38:0a:cf:ed:13:97:e4:d8:90: d7:fe:9f:aa:26:68:1d:9e:70:33:c0:ce:07:c4:25:a6:79:89: 60:ba:f0:9f:83:f9:e3:35:a2:0e:b5:5a:a2:09:11:e4:ab:41: 4e:40:a4:38:8c:6e:05:04:2d:06:3f:97:bb:c7:bd:43:c3:28: e8:92:9d:49:97:f6:28:e9:23:cd:6f:1c:74:e3:fc:f1:dd:11: 58:f6:9d:63:00:39:30:3e:c1:d0:6f:b4:56:1a:98:5c:45:fb: da:43:62:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLryv7rZRx8+zLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk M2FlOTI1ZDctYzkzYy00OGY3LTljNTQtNTk2YWY0NmQzNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2YvvCm5RZM55v7dimw5rxJtuEG3rmJdeMwa ZqpnoGYCuzqm8D/sB+iXdmRO7cgkaDVIDMhPUm5EfpRgUOtTKOiAzttLppnZKkmS ZdFLcjCkAa/O3KXNcb3LBEK8pvx2/TlAfhXS8q1VqrGHB8uO/oYJSHDZWuuPkES+ Q/1cC7IuphBby46gqjZSBVVebr0CC4n875F6Xc3ibqnuGJUtw3Bkk1WMwwIjP3np fcgQO5SEMSs+Kp5zsCyObpgpTFoVDM7xoJAov7thM3nqSegSiI1KQu5tfhbjT6ZF l8nPNjmIY8HEmI3nP1FntL5wOSO93VDhzROPqe6lfwqJ0WEp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLA2WF6+tIDqeDB+yflqSrlHc2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg5ZDYyZjItMmI1Ni0z NTBjLWI3Y2ItN2I3NjkwZGMwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKiZvJOt6nBAQlWad7zYHiccnXgVjZq3M60vXAPd4RMzdF/YVecv2Ip A0GDmwN8zKt4Cto6nFSsV+qLrO5toIRfE8hLGu+QoDYLWfwk2hQIn2qJPil+Ft3b El+OLS4xUAIDCrNgrYAMwTICCk1zKt4Ydi4wRQdF7Jgb1YvsHZ8HSlNGC/hMKmtB hfXr9niUJsXG0XvrRgHvGDgKz+0Tl+TYkNf+n6omaB2ecDPAzgfEJaZ5iWC68J+D +eM1og61WqIJEeSrQU5ApDiMbgUELQY/l7vHvUPDKOiSnUmX9ijpI81vHHTj/PHd EVj2nWMAOTA+wdBvtFYamFxF+9pDYvE= -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:13 2025 by rpki-client