$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa File: 7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa (raw, json) Hash identifier: yvMNe077sdpb8B2rWAap6dukWfG92GgGqg0rI0zzPZ0= Subject key identifier: FC:35:C0:63:14:C1:E7:3B:F2:F8:38:44:BA:4F:DE:1A:82:0F:93:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E0069D85F9C7702F61EF29A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 21342 IP address blocks: 23.40.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9d:85:f9:c7:70:2f:61:ef:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=450f17fc-3d0c-4ef9-ba75-99ab5f885bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:74:a4:22:76:98:5f:2b:84:5a:e5:ac:d2: a8:8a:cc:8a:f6:bf:75:06:a7:00:6d:e5:d8:55:38: 51:80:cf:65:f9:e9:fb:24:9c:af:17:ab:0a:60:8c: c6:7d:97:e1:4f:81:db:15:4b:5d:b6:e8:c4:8a:f6: 02:5e:28:73:51:14:b0:45:40:ab:97:3b:44:5a:54: dc:e7:23:d7:d4:56:10:5e:0c:f5:36:ba:a4:79:2a: 21:2b:74:69:69:15:90:72:84:68:25:c5:18:63:3d: 54:2e:62:47:9d:c7:3d:3b:18:81:dd:a9:da:3b:a6: 62:7e:40:0f:bd:2c:da:7e:15:e8:81:0c:fa:92:b5: 4a:f9:fa:dd:5e:49:f4:5e:4b:6c:ab:1a:32:d6:98: fa:fe:55:4d:57:2d:94:c5:3e:b8:cf:c2:86:5a:b0: 3c:be:80:15:a4:cc:05:e5:83:91:29:c1:f6:e7:d0: b6:78:5e:47:05:26:93:93:09:df:bd:20:cd:50:c7: 44:d4:ec:61:87:bf:6a:f7:3e:9d:2c:8d:e4:d1:4b: e5:60:ba:2e:47:f2:ae:a8:1b:c8:da:9f:a0:8c:5c: f2:e9:58:58:66:7e:74:c3:f1:4f:93:aa:e5:8a:01: 98:cb:7c:b7:ad:2c:e5:c1:db:e9:8e:f9:b8:f9:d0: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:C0:63:14:C1:E7:3B:F2:F8:38:44:BA:4F:DE:1A:82:0F:93:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a9e5468-acac-34c4-a1eb-dccb1eefc724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:11:64:c5:ef:3f:98:cd:50:b1:a3:9a:e6:cd:84:8e:78:06: bc:12:80:f8:ac:66:ac:78:96:3d:d7:d9:3a:1a:ac:52:98:b2: 92:20:91:c3:5f:c3:1c:2e:f0:88:ec:ac:66:1b:82:b8:0b:01: 92:cc:51:1e:8c:f7:6c:9a:07:f5:7a:a2:20:a8:87:a1:19:92: f1:7a:77:24:08:96:f3:61:14:ef:73:88:44:ae:18:16:4e:ef: 7f:c4:4a:1a:1b:c9:44:5d:c9:e2:7e:73:0b:b4:d6:a6:85:39: 53:c3:8e:64:22:b0:3c:55:0b:ea:44:95:d6:aa:86:bf:a6:7b: b1:a5:f7:5e:e2:58:01:4a:49:c8:1b:9e:9e:38:44:00:f7:e6: aa:23:bc:1b:de:da:23:07:ab:0f:0e:1b:a6:6d:9b:6f:bb:c8: 47:cc:6d:6a:56:1f:1d:fb:ca:1a:99:51:01:a9:8b:30:8c:a0: b2:9c:75:54:ca:a5:c1:b9:98:6f:04:08:a1:f6:e0:2e:01:fa: d8:be:08:af:45:b1:35:2b:3a:67:6d:b4:0e:0d:23:5b:7a:b5: 29:3e:75:9e:89:07:c0:1c:7a:7a:05:72:10:ae:c9:0e:c7:04: f0:48:e9:c0:0b:16:49:29:83:6a:f7:be:42:a4:d4:04:84:c1: 06:92:2a:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp2F+cdwL2HvKaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NDUwZjE3ZmMtM2QwYy00ZWY5LWJhNzUtOTlhYjVmODg1YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJl0pCJ2mF8rhFrlrNKoisyK9r91BqcAbeXY VThRgM9l+en7JJyvF6sKYIzGfZfhT4HbFUtdtujEivYCXihzURSwRUCrlztEWlTc 5yPX1FYQXgz1NrqkeSohK3RpaRWQcoRoJcUYYz1ULmJHncc9OxiB3anaO6ZifkAP vSzafhXogQz6krVK+frdXkn0Xktsqxoy1pj6/lVNVy2UxT64z8KGWrA8voAVpMwF 5YORKcH259C2eF5HBSaTkwnfvSDNUMdE1Oxhh79q9z6dLI3k0UvlYLouR/KuqBvI 2p+gjFzy6VhYZn50w/FPk6rligGYy3y3rSzlwdvpjvm4+dDw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw1wGMUwec78vg4RLpP3hqCD5PsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E5ZTU0NjgtYWNhYy0z NGM0LWExZWItZGNjYjFlZWZjNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYRZMXvP5jNULGjmubNhI54BrwSgPisZqx4lj3X2ToarFKYspIgkcNf wxwu8IjsrGYbgrgLAZLMUR6M92yaB/V6oiCoh6EZkvF6dyQIlvNhFO9ziESuGBZO 73/EShobyURdyeJ+cwu01qaFOVPDjmQisDxVC+pEldaqhr+me7Gl917iWAFKScgb np44RAD35qojvBve2iMHqw8OG6Ztm2+7yEfMbWpWHx37yhqZUQGpizCMoLKcdVTK pcG5mG8ECKH24C4B+ti+CK9FsTUrOmdttA4NI1t6tSk+dZ6JB8AcenoFchCuyQ7H BPBI6cALFkkpg2r3vkKk1ASEwQaSKuM= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:59 2025 by rpki-client