$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de1a8dde-230a-3845-b6e4-05a9ce11159c.roa File: de1a8dde-230a-3845-b6e4-05a9ce11159c.roa (raw, json) Hash identifier: +XqlTR0VVkh7cQodQGnRau8ZpMMmLmBeaUWQFghB6VQ= Subject key identifier: 51:EB:84:3D:BC:6F:C8:46:B5:79:0A:FE:7E:5C:12:84:10:8A:8B:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CB164C38326877C6833BB780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de1a8dde-230a-3845-b6e4-05a9ce11159c.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 9498 IP address blocks: 23.193.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:4c:38:32:68:77:c6:83:3b:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=62b56756-47ef-450f-a070-637b7d7da95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:21:52:c0:6f:10:e8:eb:5c:d1:2c:a4:65: 77:e1:cc:b6:94:34:eb:51:a3:e6:08:27:19:ce:f4: 9e:5d:71:2c:b0:0a:09:cf:3c:24:35:2c:5e:6d:54: 6f:0e:e6:7b:1c:8c:49:9b:be:69:88:47:45:9c:19: 29:9a:2f:b7:2f:fb:d8:ba:6f:1a:ea:fa:c7:c6:bc: 81:da:0d:16:74:10:16:b2:3b:ca:bd:25:56:0c:13: 3c:d4:07:0f:59:e6:3e:9c:90:3c:15:32:c1:cd:da: 00:ed:9a:6c:b5:3a:64:1c:b7:98:cc:1d:58:69:f8: f1:82:f5:e1:cb:5b:33:7c:21:16:33:de:a5:f8:d1: e4:ac:37:a0:e2:9b:a2:da:e6:c4:10:e2:c9:6d:7e: dc:b0:82:77:12:e8:ab:7a:2b:ff:30:ab:be:5d:c9: 3b:48:f9:c0:87:e6:85:63:f1:c8:f2:70:88:73:2b: 73:d6:80:11:41:7e:58:4c:a9:ad:15:e9:cb:67:e2: 79:e7:bf:b0:df:02:17:cc:f7:9e:12:8e:a7:c9:6b: 1f:22:6f:ed:e1:ff:06:ce:95:04:03:72:66:c1:2a: c1:e1:d3:20:5a:2e:09:45:5e:97:25:1a:86:cd:4a: 26:a0:fa:7e:94:39:1f:32:88:8d:2b:81:62:91:2b: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EB:84:3D:BC:6F:C8:46:B5:79:0A:FE:7E:5C:12:84:10:8A:8B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de1a8dde-230a-3845-b6e4-05a9ce11159c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:42:7c:bb:34:53:8e:c1:3e:25:22:09:f8:10:56:8e:a1:42: 1f:ad:7e:63:8f:4a:c1:8b:a6:91:1a:29:ff:2b:3b:6e:c2:2e: ea:0d:53:22:c9:f7:d9:72:a4:ef:0b:12:ba:b9:3b:82:e4:6e: 58:15:33:37:a0:2f:35:12:44:34:41:14:17:48:c0:a2:6a:7a: 45:2b:dc:a4:51:46:6b:e0:40:a2:a1:25:b2:68:ee:fa:9d:37: b3:d6:fa:fa:6a:b3:32:5a:b5:19:fb:4f:8f:16:62:aa:ff:e1: 91:fa:bd:3f:2c:da:79:67:cc:f4:54:9b:6d:d6:f4:07:3c:4a: f4:57:1f:96:c2:75:45:b6:cb:51:72:fa:32:d2:24:ef:a9:e1: aa:c9:1b:f6:e4:b8:db:f0:e7:43:b7:55:74:6f:04:84:bd:13: 69:ac:e4:fd:45:52:d6:99:de:97:61:a3:a3:0d:d8:fb:f5:7d: ba:87:77:45:d7:47:bc:b8:67:3f:f4:33:69:90:b9:7d:f0:5e: 8c:1e:33:d2:ce:ca:c8:9e:14:79:88:d2:ea:ea:96:7e:b0:d7: 74:12:11:19:09:86:9b:e7:e7:e9:aa:a2:08:3d:2d:d9:bd:be: ac:a9:0f:8a:a3:98:15:43:50:cd:20:8f:7a:77:27:59:72:b4: 54:0a:5d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFkw4Mmh3xoM7t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NjJiNTY3NTYtNDdlZi00NTBmLWEwNzAtNjM3YjdkN2RhOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNohUsBvEOjrXNEspGV34cy2lDTrUaPmCCcZ zvSeXXEssAoJzzwkNSxebVRvDuZ7HIxJm75piEdFnBkpmi+3L/vYum8a6vrHxryB 2g0WdBAWsjvKvSVWDBM81AcPWeY+nJA8FTLBzdoA7ZpstTpkHLeYzB1YafjxgvXh y1szfCEWM96l+NHkrDeg4pui2ubEEOLJbX7csIJ3Euireiv/MKu+Xck7SPnAh+aF Y/HI8nCIcytz1oARQX5YTKmtFenLZ+J557+w3wIXzPeeEo6nyWsfIm/t4f8GzpUE A3JmwSrB4dMgWi4JRV6XJRqGzUomoPp+lDkfMoiNK4FikSveoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHrhD28b8hGtXkK/n5cEoQQiovVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGUxYThkZGUtMjMwYS0z ODQ1LWI2ZTQtMDVhOWNlMTExNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8GlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhCfLs0U47BPiUiCfgQVo6hQh+tfmOPSsGLppEaKf8rO27CLuoNUyLJ 99lypO8LErq5O4LkblgVMzegLzUSRDRBFBdIwKJqekUr3KRRRmvgQKKhJbJo7vqd N7PW+vpqszJatRn7T48WYqr/4ZH6vT8s2nlnzPRUm23W9Ac8SvRXH5bCdUW2y1Fy +jLSJO+p4arJG/bkuNvw50O3VXRvBIS9E2ms5P1FUtaZ3pdho6MN2Pv1fbqHd0XX R7y4Zz/0M2mQuX3wXoweM9LOysieFHmI0urqln6w13QSERkJhpvn5+mqogg9Ldm9 vqypD4qjmBVDUM0gj3p3J1lytFQKXTE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:33:51 2025 by rpki-client