$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4cfa2db-592b-3f23-ba92-d879586a13bc.roa File: f4cfa2db-592b-3f23-ba92-d879586a13bc.roa (raw, json) Hash identifier: kFqQupyeMSMqlr3GoRpOxQSPSSOfFj9qg9jdJ9fbXLE= Subject key identifier: 5D:22:23:CA:16:A7:16:DD:D1:57:49:F7:A9:23:67:F2:EE:E9:B3:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB947A80324F2F3517490 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4cfa2db-592b-3f23-ba92-d879586a13bc.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.34.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b9:47:a8:03:24:f2:f3:51:74:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=fea3cd68-c516-46b5-8ab7-3030440e9852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:70:92:4b:90:92:d2:59:9d:d7:ef:e2:02: 05:f9:76:e6:3a:27:62:5d:6a:73:7e:b0:f9:26:2f: 10:64:73:5e:99:63:ba:92:fc:b1:86:b4:77:69:1e: 0e:30:98:88:f7:e7:2c:54:3d:8a:1c:1d:72:78:7f: 80:42:2b:06:6d:01:a9:6f:ee:a9:e7:68:c4:4d:de: 54:17:a5:a2:a4:3a:32:1f:13:56:79:07:ab:2f:c7: 5a:aa:ab:32:55:4e:04:55:6f:f1:f1:61:4a:ca:6e: cd:c2:c9:83:4a:87:f8:b7:14:d4:14:e6:64:1d:57: 7f:a8:17:1c:76:c4:0a:29:ea:f4:a5:07:24:fa:61: 7d:74:c9:90:fa:fe:7c:91:f7:e1:6b:7e:10:1d:e2: ec:8c:b5:b4:b5:df:1d:c6:ec:c3:73:f6:07:a7:ed: f8:c6:49:70:4b:fa:d7:42:70:56:42:51:1c:95:22: c5:32:7c:4c:37:94:43:0a:4a:2f:35:c8:c7:f4:b6: 23:ce:65:4c:d2:e6:df:06:f2:a8:52:93:a5:c0:46: d6:11:ba:7b:46:25:f9:cb:4e:fd:73:e6:03:6b:50: 80:96:49:70:59:e3:b2:8e:86:2f:dd:29:85:d8:65: 6c:dd:99:d2:b5:33:21:9f:18:8f:2b:7a:42:4e:03: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:22:23:CA:16:A7:16:DD:D1:57:49:F7:A9:23:67:F2:EE:E9:B3:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4cfa2db-592b-3f23-ba92-d879586a13bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4c:a6:d3:af:92:35:7d:7e:7a:fa:a9:fc:4c:d5:08:ef:60: bb:a9:3b:f1:c9:f9:97:43:99:e8:f8:ae:0c:e4:84:a4:ee:7b: 4a:36:55:44:58:28:b1:ff:5c:d7:ac:f5:93:e1:bd:62:f8:6e: d6:9e:e0:81:b6:01:73:3e:f4:02:e6:a7:58:c4:46:f1:86:78: b2:d6:ac:f5:90:7a:c6:4c:40:0e:fb:56:ab:d3:e7:07:07:f4: 57:c6:8c:85:b2:53:d8:e9:a2:68:10:95:5f:5f:9e:6f:12:61: 9d:4a:c0:74:57:21:a3:41:f3:0f:ad:4e:ac:21:df:2b:37:22: 38:f2:2d:a5:92:9d:a5:eb:8b:2f:2d:70:88:d0:7c:dd:70:35: 39:61:57:cd:63:5a:a1:de:99:28:18:42:6f:d6:86:71:45:8c: a7:37:66:43:75:4b:3f:ef:8d:ab:bc:f0:c3:47:9d:ac:6d:48: b2:ed:ae:ec:35:ed:75:30:49:74:0c:bf:69:da:04:4a:d7:ef: 42:b4:b6:28:62:f5:ef:79:54:da:be:8b:66:9e:1e:20:6d:bf: 32:97:f6:1d:ae:81:12:29:56:4e:72:3f:60:70:aa:06:9b:f1: 20:56:12:be:ec:5f:40:8b:d3:13:b7:99:ab:60:d8:8b:85:c3: 8a:d7:53:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrlHqAMk8vNRdJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZmVhM2NkNjgtYzUxNi00NmI1LThhYjctMzAzMDQ0MGU5ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLtwkkuQktJZndfv4gIF+XbmOidiXWpzfrD5 Ji8QZHNemWO6kvyxhrR3aR4OMJiI9+csVD2KHB1yeH+AQisGbQGpb+6p52jETd5U F6WipDoyHxNWeQerL8daqqsyVU4EVW/x8WFKym7NwsmDSof4txTUFOZkHVd/qBcc dsQKKer0pQck+mF9dMmQ+v58kffha34QHeLsjLW0td8dxuzDc/YHp+34xklwS/rX QnBWQlEclSLFMnxMN5RDCkovNcjH9LYjzmVM0ubfBvKoUpOlwEbWEbp7RiX5y079 c+YDa1CAlklwWeOyjoYv3SmF2GVs3ZnStTMhnxiPK3pCTgN+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0iI8oWpxbd0VdJ96kjZ/Lu6bNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjRjZmEyZGItNTkyYi0z ZjIzLWJhOTItZDg3OTU4NmExM2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5MptOvkjV9fnr6qfxM1QjvYLupO/HJ+ZdDmej4rgzkhKTue0o2VURY KLH/XNes9ZPhvWL4btae4IG2AXM+9ALmp1jERvGGeLLWrPWQesZMQA77VqvT5wcH 9FfGjIWyU9jpomgQlV9fnm8SYZ1KwHRXIaNB8w+tTqwh3ys3IjjyLaWSnaXriy8t cIjQfN1wNTlhV81jWqHemSgYQm/WhnFFjKc3ZkN1Sz/vjau88MNHnaxtSLLtruw1 7XUwSXQMv2naBErX70K0tihi9e95VNq+i2aeHiBtvzKX9h2ugRIpVk5yP2Bwqgab 8SBWEr7sX0CL0xO3matg2IuFw4rXU2s= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:45 2025 by rpki-client