$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0292ae58-1124-3295-81ae-7ff6d5faef2c.roa File: 0292ae58-1124-3295-81ae-7ff6d5faef2c.roa (raw, json) Hash identifier: 3q4WGTfdMrBkoUUtX8ULuULitiOWIBwX2GEFUy8VpKA= Subject key identifier: 98:0C:D8:C7:7F:41:4E:A4:BA:64:6E:21:C0:F0:08:F7:47:E1:CB:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C85A33792C39B0F26AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0292ae58-1124-3295-81ae-7ff6d5faef2c.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c8:5a:33:79:2c:39:b0:f2:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=3dcb629a-d1d4-454c-8aba-24240f89088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:14:7a:fd:cc:db:fd:77:d1:68:e1:32:6d: d6:a9:5b:59:f9:47:cd:fd:24:f6:ec:66:29:26:fb: 48:de:27:5f:13:aa:b9:86:a1:b3:3a:ca:e2:d9:e7: 0e:91:de:f5:3c:f4:e8:da:a5:ea:ae:3f:08:1e:91: a6:33:96:aa:26:df:13:1d:e2:35:35:76:be:11:e4: 4a:b8:6f:24:9a:ac:9d:3a:2a:51:17:ac:af:fd:34: 09:94:cd:78:5f:79:51:1d:02:3d:94:27:48:7d:67: 7b:0b:4f:54:28:c2:d6:4f:69:d9:6d:b1:21:c6:2d: ec:4a:4c:41:60:bf:e7:0e:53:e7:6f:6a:bd:d1:56: f5:0a:b5:8c:b6:5b:e9:db:b0:94:16:83:0d:42:3f: d9:dc:92:6e:6c:10:f5:91:5a:06:41:10:c2:ea:49: 1d:fe:9a:13:e1:c4:f3:e3:48:95:14:ad:b4:93:d9: f1:ae:d1:4c:56:17:3e:ee:4b:23:3a:41:f3:9a:ea: 0d:e8:80:a2:15:27:2b:2c:32:be:ce:e1:8f:03:8a: 3b:44:87:2c:fa:f9:49:45:52:62:31:fb:e7:03:d7: 3f:f2:78:63:f4:93:4e:a8:d9:22:a2:ee:d7:7e:6e: eb:b6:f7:6b:0e:7f:a7:57:6c:be:07:22:84:ec:25: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:D8:C7:7F:41:4E:A4:BA:64:6E:21:C0:F0:08:F7:47:E1:CB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0292ae58-1124-3295-81ae-7ff6d5faef2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:58:e4:ef:95:b7:57:bc:78:1f:72:f7:db:75:87:44:58:2f: 4c:da:56:e0:ed:31:62:38:da:50:3c:89:4f:ed:96:3e:f9:74: ce:11:48:aa:18:b0:e4:3e:c2:f8:b4:af:61:78:1c:d2:f9:50: ef:2c:d7:fb:5f:e0:dc:dd:2d:83:00:37:08:d2:d3:a9:52:a4: 1e:cb:10:ed:89:65:e8:88:9e:52:4f:70:2d:86:a4:2e:34:56: 49:d8:3e:c0:53:a8:dc:aa:f7:05:c0:26:98:af:c8:be:c3:75: c8:58:ab:a2:a2:93:eb:c0:35:df:a1:ff:00:d1:13:52:b1:42: 1c:78:ab:c6:06:e9:66:89:b0:18:d7:0e:08:50:61:c6:90:6d: 3e:1c:18:29:62:26:a1:f8:8e:3a:73:7b:4e:87:24:60:9f:f8: 4a:63:ac:88:61:f7:a8:fd:26:04:0d:c4:94:3c:70:0d:95:d4: 7c:7a:a9:e3:22:54:45:2a:c4:72:54:7b:f5:16:68:0f:1d:3b: 9a:4d:2a:3a:ad:b8:22:6d:b4:cb:15:ba:35:86:86:fd:7f:3e: 13:58:9c:3b:a0:fa:68:f3:99:19:fd:22:ab:8c:00:19:aa:74: d7:77:1e:67:4c:de:ca:d6:90:29:88:22:c5:6a:14:7d:e9:53: 69:5f:c1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMhaM3ksObDyasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk M2RjYjYyOWEtZDFkNC00NTRjLThhYmEtMjQyNDBmODkwODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpcUev3M2/130WjhMm3WqVtZ+UfN/ST27GYp JvtI3idfE6q5hqGzOsri2ecOkd71PPTo2qXqrj8IHpGmM5aqJt8THeI1NXa+EeRK uG8kmqydOipRF6yv/TQJlM14X3lRHQI9lCdIfWd7C09UKMLWT2nZbbEhxi3sSkxB YL/nDlPnb2q90Vb1CrWMtlvp27CUFoMNQj/Z3JJubBD1kVoGQRDC6kkd/poT4cTz 40iVFK20k9nxrtFMVhc+7ksjOkHzmuoN6ICiFScrLDK+zuGPA4o7RIcs+vlJRVJi MfvnA9c/8nhj9JNOqNkiou7Xfm7rtvdrDn+nV2y+ByKE7CXCxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgM2Md/QU6kumRuIcDwCPdH4cs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDI5MmFlNTgtMTEyNC0z Mjk1LTgxYWUtN2ZmNmQ1ZmFlZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5Y5O+Vt1e8eB9y99t1h0RYL0zaVuDtMWI42lA8iU/tlj75dM4RSKoY sOQ+wvi0r2F4HNL5UO8s1/tf4NzdLYMANwjS06lSpB7LEO2JZeiInlJPcC2GpC40 VknYPsBTqNyq9wXAJpivyL7DdchYq6Kik+vANd+h/wDRE1KxQhx4q8YG6WaJsBjX DghQYcaQbT4cGCliJqH4jjpze06HJGCf+EpjrIhh96j9JgQNxJQ8cA2V1Hx6qeMi VEUqxHJUe/UWaA8dO5pNKjqtuCJttMsVujWGhv1/PhNYnDug+mjzmRn9IquMABmq dNd3HmdM3srWkCmIIsVqFH3pU2lfwd8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:40 2025 by rpki-client