$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0606740-680b-39c1-9a26-7be50173c117.roa File: e0606740-680b-39c1-9a26-7be50173c117.roa (raw, json) Hash identifier: Go4ikyeIzEdRjuieHZ3v3JB05pL/bxVRX7135esqeQ4= Subject key identifier: 57:9D:A7:30:BC:B6:00:3E:61:9D:5E:86:27:01:66:87:4A:34:08:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247C912947B92AEE12FC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0606740-680b-39c1-9a26-7be50173c117.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.44.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7c:91:29:47:b9:2a:ee:12:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=728cf527-f919-4184-b442-083db331f927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:57:26:0c:ce:ab:f2:b2:a5:c3:7a:d1:45: a1:31:25:b3:df:59:8e:6f:0d:10:b5:09:c0:d2:da: 35:b2:23:5f:33:7e:a3:ff:f6:a8:d1:05:71:5f:9e: 6a:56:b5:06:ba:b6:4a:57:ea:c4:e4:35:fb:c4:99: b0:4e:d6:67:0e:62:52:66:d5:9e:49:c4:bd:e5:fe: 3e:db:2c:10:ce:f0:c2:68:7b:85:f3:75:17:09:82: 93:40:e0:31:bf:95:c8:81:b6:f6:3b:86:2a:a7:ca: 94:cc:d8:f0:a8:31:da:97:d3:9d:25:59:65:af:c9: ad:1f:6c:b1:90:87:b1:70:bb:d9:8e:01:c5:29:22: 81:0b:5d:6a:cc:49:74:4e:b3:7b:97:cb:e0:68:0d: a1:0d:7f:df:06:95:9a:b1:3c:e1:39:f1:39:f0:c5: e6:aa:b8:be:76:96:07:58:ba:f4:1f:1b:75:86:25: 1c:3a:ea:83:3b:0d:86:75:65:39:72:19:ef:23:4b: 96:24:5d:b4:1e:73:a5:64:4d:f1:d6:6a:4a:67:98: 32:b8:17:03:70:19:45:d7:e9:ea:18:a3:4a:b7:a8: 2e:ab:75:ec:af:aa:ce:d8:cf:62:cd:8a:19:96:df: 71:3c:5a:fc:da:18:3b:d8:db:38:81:55:56:a4:ec: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9D:A7:30:BC:B6:00:3E:61:9D:5E:86:27:01:66:87:4A:34:08:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0606740-680b-39c1-9a26-7be50173c117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:48:6f:f1:08:af:85:e5:53:75:2e:22:1f:9e:f3:d8:b5:01: 98:8b:f9:ae:e1:74:65:0f:ff:09:14:b3:9b:1d:b0:c0:1f:91: 38:f2:87:ea:ea:62:87:cc:5a:8c:87:7c:50:93:88:e7:85:01: 2a:0b:36:f3:d3:98:76:e6:51:e4:c9:a2:1d:2e:2b:82:23:7b: b3:1b:e0:24:1d:65:d6:6e:f1:e0:99:47:5b:b1:21:ed:cc:89: 6c:f3:dd:fd:e0:08:66:00:2a:a2:f5:04:1a:a9:72:ab:5a:e0: cd:81:5c:30:2a:85:f3:56:56:b5:e9:53:5d:ff:75:a0:c8:e2: db:fd:91:93:32:07:ad:32:58:9d:50:30:55:4a:8b:19:05:ab: 71:f8:e9:1e:9e:09:09:ca:19:0d:86:70:cc:25:f8:77:49:69: 8f:77:ab:23:cf:b6:8d:76:b0:eb:fd:56:85:dd:24:4a:7a:ea: 89:b7:42:4d:c7:53:c1:a5:77:72:d2:95:f8:e7:e2:0e:c0:2f: 59:ee:d1:e4:1d:9a:6a:4c:86:ac:71:a5:c6:23:9c:06:76:dc: e8:93:2f:11:bd:bb:23:99:ae:b7:7b:7d:68:5c:e3:39:1b:c3: f4:40:bc:91:c0:6b:c3:28:a6:77:22:0e:20:23:eb:fd:ef:6c: 4d:35:5e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHyRKUe5Ku4S/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NzI4Y2Y1MjctZjkxOS00MTg0LWI0NDItMDgzZGIzMzFmOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/BXJgzOq/KypcN60UWhMSWz31mObw0QtQnA 0to1siNfM36j//ao0QVxX55qVrUGurZKV+rE5DX7xJmwTtZnDmJSZtWeScS95f4+ 2ywQzvDCaHuF83UXCYKTQOAxv5XIgbb2O4Yqp8qUzNjwqDHal9OdJVllr8mtH2yx kIexcLvZjgHFKSKBC11qzEl0TrN7l8vgaA2hDX/fBpWasTzhOfE58MXmqri+dpYH WLr0Hxt1hiUcOuqDOw2GdWU5chnvI0uWJF20HnOlZE3x1mpKZ5gyuBcDcBlF1+nq GKNKt6guq3Xsr6rO2M9izYoZlt9xPFr82hg72Ns4gVVWpOzWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFedpzC8tgA+YZ1ehicBZodKNAgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTA2MDY3NDAtNjgwYi0z OWMxLTlhMjYtN2JlNTAxNzNjMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyyFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFIb/EIr4XlU3UuIh+e89i1AZiL+a7hdGUP/wkUs5sdsMAfkTjyh+rq YofMWoyHfFCTiOeFASoLNvPTmHbmUeTJoh0uK4Ije7Mb4CQdZdZu8eCZR1uxIe3M iWzz3f3gCGYAKqL1BBqpcqta4M2BXDAqhfNWVrXpU13/daDI4tv9kZMyB60yWJ1Q MFVKixkFq3H46R6eCQnKGQ2GcMwl+HdJaY93qyPPto12sOv9VoXdJEp66om3Qk3H U8Gld3LSlfjn4g7AL1nu0eQdmmpMhqxxpcYjnAZ23OiTLxG9uyOZrrd7fWhc4zkb w/RAvJHAa8MopnciDiAj6/3vbE01XnI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:44 2025 by rpki-client