$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26d6535-e872-3bbb-af02-e19e8de55afd.roa File: d26d6535-e872-3bbb-af02-e19e8de55afd.roa (raw, json) Hash identifier: ICeGd32ly2DdtSTckM5fl6q8alBpD9GWVuT+EPz2fKA= Subject key identifier: 51:68:91:5C:63:1C:3C:A9:98:55:08:4F:6F:99:D3:CF:F8:F7:ED:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC9571201E7D59668132300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26d6535-e872-3bbb-af02-e19e8de55afd.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:57:12:01:e7:d5:96:68:13:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=a6d13368-0262-45c3-b09e-0f23840a84cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:05:cc:52:2a:6f:92:f3:7c:20:df:e9:c5: c9:f8:c5:41:61:ab:a3:bd:ea:04:b4:c9:ee:47:3a: 40:28:5b:30:98:e8:6e:0f:62:f3:e4:bd:46:3b:9e: a6:cb:23:1e:23:ed:3d:d3:f6:a5:33:d8:01:b2:a9: 04:01:89:46:ed:6b:da:f6:c2:85:bf:3d:45:8a:2b: 03:eb:a1:8f:8e:84:57:3c:97:40:77:bb:24:23:e6: 1d:31:9c:b2:e5:82:98:dc:7e:26:0d:a5:a2:ed:92: f0:76:44:c8:34:89:7e:6f:7f:2f:dd:c1:27:00:fd: 2f:34:49:a0:1d:d3:40:28:f3:ad:25:42:a2:c4:a1: d4:55:82:0c:0c:b8:53:ea:07:e7:9f:9e:5d:86:de: 5d:a9:77:25:30:38:90:4b:13:dc:fe:81:e7:09:bc: 9c:06:02:f2:46:c2:dd:21:86:f9:b1:1a:a2:15:43: 93:fb:92:cb:28:52:cb:7a:be:be:ad:5d:dd:c3:36: 4c:f1:29:1c:ed:d6:e9:3b:3c:9d:73:7e:b9:27:75: c7:91:48:90:6f:b7:3e:55:3b:ef:fc:0a:a6:1b:3b: 66:6e:4b:4b:1d:04:cc:ff:44:6d:4b:97:43:1e:f0: 73:e3:00:69:a3:f3:b3:28:06:7c:fa:97:3f:f8:b9: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:91:5C:63:1C:3C:A9:98:55:08:4F:6F:99:D3:CF:F8:F7:ED:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26d6535-e872-3bbb-af02-e19e8de55afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fd:4d:01:11:5c:0b:46:f0:6c:a4:14:14:a1:ab:3b:3a:10: 1b:6f:87:e3:f2:84:cb:42:64:04:e9:9d:7b:92:02:ca:3f:6b: 9e:07:61:39:9b:22:34:a7:eb:6e:49:dc:6f:d3:21:6b:41:ad: c9:1d:55:a7:3d:9a:0c:a3:0b:19:85:95:0d:2b:88:15:79:ed: f1:63:36:76:48:d7:a6:99:71:17:48:5c:7a:48:e9:8a:84:c4: c5:46:c7:0c:53:d0:d9:cc:71:7a:2f:14:08:f0:b8:1a:2d:b2: 8c:67:ab:6a:77:fe:39:ea:21:5e:d0:fd:83:3e:91:f1:ed:fb: 93:9e:be:cc:52:bb:97:81:47:d2:d4:fa:e3:6b:ad:5a:65:a7: 34:7f:ec:77:f2:ee:a1:74:0c:02:3f:a0:3d:fb:59:11:97:9e: a2:6e:66:c1:00:fb:b5:b8:6e:1f:9c:e6:d7:46:cb:f9:95:eb: aa:17:2c:41:8d:11:83:26:31:bf:9a:9d:dc:9a:d6:af:1b:69: 2f:00:48:21:06:d0:c4:eb:cb:7a:f4:0d:4f:11:06:c6:fa:0c: 5a:b7:ad:bd:d8:44:aa:97:6d:05:04:72:6c:ab:25:4f:20:c1: 83:42:be:5e:7d:a4:c1:e4:0a:29:e9:28:13:ec:9f:b9:5c:65: 97:5a:74:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVcSAefVlmgTIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YTZkMTMzNjgtMDI2Mi00NWMzLWIwOWUtMGYyMzg0MGE4NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz0FzFIqb5LzfCDf6cXJ+MVBYaujveoEtMnu RzpAKFswmOhuD2Lz5L1GO56myyMeI+090/alM9gBsqkEAYlG7Wva9sKFvz1FiisD 66GPjoRXPJdAd7skI+YdMZyy5YKY3H4mDaWi7ZLwdkTINIl+b38v3cEnAP0vNEmg HdNAKPOtJUKixKHUVYIMDLhT6gfnn55dht5dqXclMDiQSxPc/oHnCbycBgLyRsLd IYb5sRqiFUOT+5LLKFLLer6+rV3dwzZM8Skc7dbpOzydc365J3XHkUiQb7c+VTvv /AqmGztmbktLHQTM/0RtS5dDHvBz4wBpo/OzKAZ8+pc/+LnqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFokVxjHDypmFUIT2+Z08/49+2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDI2ZDY1MzUtZTg3Mi0z YmJiLWFmMDItZTE5ZThkZTU1YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX9TQERXAtG8GykFBShqzs6EBtvh+PyhMtCZATpnXuSAso/a54HYTmb IjSn625J3G/TIWtBrckdVac9mgyjCxmFlQ0riBV57fFjNnZI16aZcRdIXHpI6YqE xMVGxwxT0NnMcXovFAjwuBotsoxnq2p3/jnqIV7Q/YM+kfHt+5OevsxSu5eBR9LU +uNrrVplpzR/7Hfy7qF0DAI/oD37WRGXnqJuZsEA+7W4bh+c5tdGy/mV66oXLEGN EYMmMb+andya1q8baS8ASCEG0MTry3r0DU8RBsb6DFq3rb3YRKqXbQUEcmyrJU8g wYNCvl59pMHkCinpKBPsn7lcZZdadE4= -----END CERTIFICATE-----Generated at Sat Apr 26 21:13:14 2025 by rpki-client