$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02a49a49-b8d6-3bd2-a530-5d5cf9f9affd.roa File: 02a49a49-b8d6-3bd2-a530-5d5cf9f9affd.roa (raw, json) Hash identifier: VA5ZAYY6KrsZ1lP1p0jrfJaZ6vAiLUuX9KiNsK5mINo= Subject key identifier: 5F:CB:C5:BC:62:7F:1A:23:A5:E8:09:E4:06:A0:9C:0F:CC:A0:5C:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB679552C46610DF9D2A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02a49a49-b8d6-3bd2-a530-5d5cf9f9affd.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.54.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:67:95:52:c4:66:10:df:9d:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=10a89e95-aebe-4f41-9050-9632c1b6af16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:20:69:45:73:64:60:d5:04:42:6b:8a:8b: 1c:01:db:14:5d:19:68:cb:17:62:75:18:7d:c3:62: e8:12:6f:ad:df:2d:fa:0c:c6:8b:dd:85:68:62:e7: e5:f9:ca:a1:f2:00:0a:26:9a:5c:08:04:7f:d8:22: 2a:d0:83:6b:8d:42:7c:f2:b6:b0:4b:54:7f:38:92: 70:65:d1:aa:ea:fa:41:f7:0f:20:b8:f4:f6:d5:39: 46:dc:da:f0:10:ae:93:41:cf:14:81:a1:4d:ac:3a: 69:1a:2f:e2:e8:61:c7:73:b6:02:f7:6f:ee:be:58: 3d:a2:09:a9:03:f7:3d:63:64:41:00:2b:47:0f:07: 85:fc:bd:78:13:6c:73:17:79:f8:5b:8c:3d:ff:0d: 1a:bf:98:22:70:45:b9:f0:76:c4:0b:4c:64:91:bb: df:44:9c:04:3b:98:fa:86:3c:a0:7b:59:64:1f:22: 6d:b3:4c:66:b4:ad:87:14:05:75:6e:12:cc:7b:3a: f7:cb:7f:76:f2:e9:ee:b4:24:9f:b5:c2:07:b9:be: 05:b1:33:12:f2:ea:79:f6:d2:40:f2:81:fa:a1:bd: 4c:71:2f:1a:29:46:d4:84:fc:89:25:99:95:c1:0d: 84:1b:5e:71:af:76:ac:42:34:e4:a2:15:8c:07:b2: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CB:C5:BC:62:7F:1A:23:A5:E8:09:E4:06:A0:9C:0F:CC:A0:5C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02a49a49-b8d6-3bd2-a530-5d5cf9f9affd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f7:47:5c:5d:c9:00:c8:a1:d8:c1:b5:41:9a:5e:94:05:3a: b0:d9:31:51:1d:54:a2:9f:fa:11:d3:7d:29:78:d1:dd:09:29: 1d:06:2d:fb:29:9e:7b:08:16:d9:e5:cd:38:11:c5:8b:7b:0f: ae:25:84:1a:3b:a3:9f:77:0d:2e:e6:f8:42:5d:63:10:47:cf: cd:d5:80:3c:07:f2:1f:2c:2c:95:6b:e7:69:a8:9e:75:6a:3f: 38:00:53:f5:9a:6a:42:82:b9:25:99:10:7b:f7:e8:aa:6f:0d: b2:15:c3:dd:f4:3e:0d:2b:03:b9:c1:f5:f0:28:03:7c:64:33: eb:22:ae:c5:bd:12:ba:64:e2:af:d7:16:59:74:60:53:94:b1: d8:17:5b:7c:3f:65:27:c3:47:2c:d4:6c:9b:5f:32:81:9f:d9: 77:1d:b7:8e:46:fe:aa:c3:a5:11:c1:a5:98:c2:35:df:e5:62: 0a:52:a5:ce:3d:2a:65:7a:2d:30:75:89:c8:27:be:7b:16:ae: 30:65:eb:52:20:ef:0e:a7:a7:35:77:f4:d0:f2:54:ff:bf:41: aa:80:57:36:51:d8:be:38:00:ba:25:dd:ec:29:0b:28:c8:b7: 7c:cc:6d:e7:55:5a:49:df:20:85:f3:83:48:68:9c:ed:ec:16: 09:9f:44:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2eVUsRmEN+dKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MTBhODllOTUtYWViZS00ZjQxLTkwNTAtOTYzMmMxYjZhZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMggaUVzZGDVBEJrioscAdsUXRloyxdidRh9 w2LoEm+t3y36DMaL3YVoYufl+cqh8gAKJppcCAR/2CIq0INrjUJ88rawS1R/OJJw ZdGq6vpB9w8guPT21TlG3NrwEK6TQc8UgaFNrDppGi/i6GHHc7YC92/uvlg9ogmp A/c9Y2RBACtHDweF/L14E2xzF3n4W4w9/w0av5gicEW58HbEC0xkkbvfRJwEO5j6 hjyge1lkHyJts0xmtK2HFAV1bhLMezr3y3928unutCSftcIHub4FsTMS8up59tJA 8oH6ob1McS8aKUbUhPyJJZmVwQ2EG15xr3asQjTkohWMB7IyxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/LxbxifxojpegJ5AagnA/MoFwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDJhNDlhNDktYjhkNi0z YmQyLWE1MzAtNWQ1Y2Y5ZjlhZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH33R1xdyQDIodjBtUGaXpQFOrDZMVEdVKKf+hHTfSl40d0JKR0GLfsp nnsIFtnlzTgRxYt7D64lhBo7o593DS7m+EJdYxBHz83VgDwH8h8sLJVr52monnVq PzgAU/WaakKCuSWZEHv36KpvDbIVw930Pg0rA7nB9fAoA3xkM+sirsW9Erpk4q/X Fll0YFOUsdgXW3w/ZSfDRyzUbJtfMoGf2Xcdt45G/qrDpRHBpZjCNd/lYgpSpc49 KmV6LTB1icgnvnsWrjBl61Ig7w6npzV39NDyVP+/QaqAVzZR2L44ALol3ewpCyjI t3zMbedVWknfIIXzg0honO3sFgmfRGA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:56 2025 by rpki-client