$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12d6cac3-e5d8-3dbe-b9d1-1867ab2af26a.roa File: 12d6cac3-e5d8-3dbe-b9d1-1867ab2af26a.roa (raw, json) Hash identifier: CLKGjALS6t1+zaevfWriQIzLZ6qPROVDW5596G0iNj8= Subject key identifier: 39:9B:01:70:E3:79:7C:E8:D3:1A:26:E1:A5:3B:8B:C4:56:A6:2A:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830C8B07F1D57F9812B8680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12d6cac3-e5d8-3dbe-b9d1-1867ab2af26a.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 9498 IP address blocks: 23.201.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c8:b0:7f:1d:57:f9:81:2b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=0ede28cd-202a-4524-86fc-980be778bc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:bf:c1:fd:27:fa:ab:c6:7f:15:90:1a:f3: cf:3b:35:7e:9a:36:d3:38:5d:b7:f0:8c:c3:36:55: 04:8a:a6:3f:ec:58:f5:44:49:d4:2e:86:21:17:fa: 84:ab:7a:42:47:6f:97:f3:f2:14:9f:2a:d2:d2:b3: fe:8a:6c:1d:58:b7:16:4c:b8:7a:68:ce:3e:b2:59: f1:51:46:87:b3:db:49:7d:a9:39:86:15:9b:d1:3b: 08:4f:57:6b:0f:55:24:2d:15:0a:62:d6:49:c7:9e: d3:a5:88:ec:67:df:43:a2:01:26:84:41:33:63:da: 69:db:a1:83:9f:8d:fa:b6:a4:62:e2:d3:c0:e5:33: 5e:c8:c8:61:83:9c:55:25:b6:c7:e8:f5:be:88:5e: 19:25:bb:5c:6c:12:51:37:41:a3:d9:83:be:de:65: c0:8e:9c:57:c8:f3:9c:10:ea:61:ef:a8:ef:38:00: 78:74:b2:d9:e2:c7:58:c2:94:f5:80:5a:96:ef:8b: 81:81:d0:0e:e1:91:0e:1e:53:1f:0a:da:12:22:11: e1:87:9d:19:8a:98:6e:d6:a0:b3:94:af:61:cf:6f: d4:5a:15:e3:ab:d2:2e:88:7f:f5:61:a9:6f:d3:68: 00:88:e8:24:50:99:55:7a:8c:dc:2c:8c:34:73:60: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:01:70:E3:79:7C:E8:D3:1A:26:E1:A5:3B:8B:C4:56:A6:2A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12d6cac3-e5d8-3dbe-b9d1-1867ab2af26a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:34:66:d7:ea:ea:91:8e:c3:60:0c:6a:1b:e9:6d:9f:a4:9a: b6:66:f3:51:84:e6:27:1d:28:4d:a6:a1:4a:f6:6a:21:46:eb: b3:15:33:35:8e:b8:4a:ef:ae:9a:0e:b9:50:88:02:82:ed:a1: 30:fa:28:a4:70:53:51:c1:16:08:39:33:08:80:a1:1a:33:11: 58:c2:47:e9:fe:6e:79:33:6b:4c:8b:30:be:da:d4:33:0e:30: dc:12:fe:31:a6:ad:ad:5e:dc:00:75:8c:ad:5b:99:1d:71:67: 67:3a:00:eb:ce:62:c8:de:35:bf:35:58:70:ae:f4:1e:72:cf: 4e:ff:86:c4:ff:e8:01:f3:0c:b5:e0:67:94:c6:95:e6:74:fc: e0:c3:a8:62:e7:d6:d7:94:2d:11:df:36:ce:14:20:21:04:b0: ad:f8:96:9b:a9:ef:28:63:83:b5:ba:19:59:f6:74:02:18:41: 01:2b:2b:7d:25:05:3c:ee:f9:b3:7e:60:0d:91:ba:8c:82:a8: d4:c6:65:ac:98:c3:6d:38:fd:dc:8c:1b:3e:e5:ef:5d:52:d7: 05:74:ff:8d:e3:68:ff:c3:3c:df:67:ef:62:f9:cb:ee:d1:bb: 7a:73:eb:48:e3:ba:dc:73:53:19:b8:9b:25:99:51:a2:57:2a: 9b:5f:fe:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMiwfx1X+YErhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MGVkZTI4Y2QtMjAyYS00NTI0LTg2ZmMtOTgwYmU3NzhiYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKy/wf0n+qvGfxWQGvPPOzV+mjbTOF238IzD NlUEiqY/7Fj1REnULoYhF/qEq3pCR2+X8/IUnyrS0rP+imwdWLcWTLh6aM4+slnx UUaHs9tJfak5hhWb0TsIT1drD1UkLRUKYtZJx57TpYjsZ99DogEmhEEzY9pp26GD n436tqRi4tPA5TNeyMhhg5xVJbbH6PW+iF4ZJbtcbBJRN0Gj2YO+3mXAjpxXyPOc EOph76jvOAB4dLLZ4sdYwpT1gFqW74uBgdAO4ZEOHlMfCtoSIhHhh50Ziphu1qCz lK9hz2/UWhXjq9IuiH/1Yalv02gAiOgkUJlVeozcLIw0c2BRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmbAXDjeXzo0xom4aU7i8RWpiqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTJkNmNhYzMtZTVkOC0z ZGJlLWI5ZDEtMTg2N2FiMmFmMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw0Ztfq6pGOw2AMahvpbZ+kmrZm81GE5icdKE2moUr2aiFG67MVMzWO uErvrpoOuVCIAoLtoTD6KKRwU1HBFgg5MwiAoRozEVjCR+n+bnkza0yLML7a1DMO MNwS/jGmra1e3AB1jK1bmR1xZ2c6AOvOYsjeNb81WHCu9B5yz07/hsT/6AHzDLXg Z5TGleZ0/ODDqGLn1teULRHfNs4UICEEsK34lpup7yhjg7W6GVn2dAIYQQErK30l BTzu+bN+YA2RuoyCqNTGZayYw204/dyMGz7l711S1wV0/43jaP/DPN9n72L5y+7R u3pz60jjutxzUxm4myWZUaJXKptf/iU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:44 2025 by rpki-client