$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe10ae96-50a5-303f-885d-469f75afd8d5.roa File: fe10ae96-50a5-303f-885d-469f75afd8d5.roa (raw, json) Hash identifier: G7s0v0hKKoYRKa6GuNM4vrKsr598mrZTd49mGpNiDsg= Subject key identifier: 49:C1:54:47:76:4D:4C:0C:B9:F1:E1:AE:FD:11:18:C0:33:F8:44:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBC721C7C5985DBA0E640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe10ae96-50a5-303f-885d-469f75afd8d5.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bc:72:1c:7c:59:85:db:a0:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=647f37e9-aafe-4bb1-9ab9-2e7cf742ca91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:80:66:af:67:3f:e6:bc:22:a9:cf:d2:ce: 74:b3:25:45:5d:d4:d1:c6:48:75:a1:4c:14:4b:b7: cf:6c:2f:ac:e3:14:1c:0b:c7:a9:43:6e:e6:ca:4d: 13:ff:03:77:a8:fd:75:71:7f:64:0c:47:bf:c1:a9: 03:ce:dd:a4:e8:71:b4:96:fb:b8:4f:42:b3:64:a2: 75:e4:73:13:03:c7:fa:1d:c5:80:97:43:0c:86:a6: 68:59:5c:d9:e6:b8:b3:51:ac:32:64:a5:a9:f2:07: cb:2a:34:d8:9b:c7:0f:43:19:b3:98:81:6e:7c:3f: 26:57:3d:5b:97:f8:3d:1e:73:cc:43:a4:1b:89:46: 5c:ba:e1:da:0a:00:cc:42:d4:1c:46:fb:7f:d3:ce: fb:22:27:3c:16:76:66:87:c2:25:7b:71:db:55:db: 50:35:56:7f:61:7f:5b:2a:42:c7:b1:e8:8f:fe:1f: 6a:eb:b2:09:7c:66:9e:db:ab:2a:81:37:a2:ce:f5: 62:bb:0d:42:7a:d7:86:f0:d5:b2:cd:d5:92:57:44: 87:86:b6:36:b0:3e:16:bc:18:4b:9e:11:9d:c0:f7: 8d:69:9d:a6:79:2b:fd:ef:9e:3f:25:71:c8:c2:d3: c7:10:1f:ee:18:33:a6:b9:c1:40:f2:8e:86:25:2d: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C1:54:47:76:4D:4C:0C:B9:F1:E1:AE:FD:11:18:C0:33:F8:44:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe10ae96-50a5-303f-885d-469f75afd8d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0c:46:9b:76:69:6d:36:a4:e3:e7:b3:1c:30:c4:94:ae:4b: b4:4e:b4:c6:83:92:ab:dc:2f:b8:0a:b5:b4:18:5c:35:89:b7: f7:12:17:00:e2:86:24:b1:12:d2:63:1e:01:45:58:78:75:31: 55:f0:20:8f:d2:81:60:0e:ac:88:80:b4:fe:41:38:c7:4f:ef: e8:24:7e:e8:c0:00:d6:95:7b:7b:9c:74:9e:57:4d:4c:a1:b9: f9:d5:26:e7:53:f2:d8:be:1b:d5:c1:fc:91:7e:97:93:aa:89: 1f:47:64:54:1a:95:ec:3e:2e:7a:69:ce:f6:6f:3e:e8:ec:fb: b2:fe:93:79:2a:0c:5d:e4:08:b8:1a:99:27:93:81:b7:97:c5: 60:40:b2:c4:01:67:b0:06:07:22:57:af:51:d1:12:f4:26:a2: 7b:1c:39:08:d8:2e:05:16:eb:43:38:7d:57:56:c1:eb:48:38: aa:8a:36:3a:b0:1c:0a:68:74:9a:b9:56:68:bb:62:36:32:b8: 77:0c:3c:b2:06:78:26:c8:33:83:f2:1f:37:47:0d:e9:64:8c: 4c:c9:f6:3e:95:45:e8:89:bf:12:7d:a4:2a:2e:ee:d4:2c:c9: 9f:eb:25:61:da:55:a0:c1:3c:b9:b8:7c:b8:2b:3e:61:57:a5: ec:41:af:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrxyHHxZhdug5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NjQ3ZjM3ZTktYWFmZS00YmIxLTlhYjktMmU3Y2Y3NDJjYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs76AZq9nP+a8IqnP0s50syVFXdTRxkh1oUwU S7fPbC+s4xQcC8epQ27myk0T/wN3qP11cX9kDEe/wakDzt2k6HG0lvu4T0KzZKJ1 5HMTA8f6HcWAl0MMhqZoWVzZ5rizUawyZKWp8gfLKjTYm8cPQxmzmIFufD8mVz1b l/g9HnPMQ6QbiUZcuuHaCgDMQtQcRvt/0877Iic8FnZmh8Ile3HbVdtQNVZ/YX9b KkLHseiP/h9q67IJfGae26sqgTeizvViuw1CeteG8NWyzdWSV0SHhrY2sD4WvBhL nhGdwPeNaZ2meSv9754/JXHIwtPHEB/uGDOmucFA8o6GJS1K2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnBVEd2TUwMufHhrv0RGMAz+EQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmUxMGFlOTYtNTBhNS0z MDNmLTg4NWQtNDY5Zjc1YWZkOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAMRpt2aW02pOPnsxwwxJSuS7ROtMaDkqvcL7gKtbQYXDWJt/cSFwDi hiSxEtJjHgFFWHh1MVXwII/SgWAOrIiAtP5BOMdP7+gkfujAANaVe3ucdJ5XTUyh ufnVJudT8ti+G9XB/JF+l5OqiR9HZFQalew+LnppzvZvPujs+7L+k3kqDF3kCLga mSeTgbeXxWBAssQBZ7AGByJXr1HREvQmonscOQjYLgUW60M4fVdWwetIOKqKNjqw HApodJq5Vmi7YjYyuHcMPLIGeCbIM4PyHzdHDelkjEzJ9j6VReiJvxJ9pCou7tQs yZ/rJWHaVaDBPLm4fLgrPmFXpexBr3s= -----END CERTIFICATE-----Generated at Sat Apr 26 18:06:49 2025 by rpki-client