$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa File: 0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa (raw, json) Hash identifier: kMUAqPpI62cpX3m6cGFi96CFuyYFK5DH5ynb+aE23Gw= Subject key identifier: 33:6D:F1:40:41:8D:D1:0C:D3:DF:A7:3D:FD:60:87:1A:71:DC:8B:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA9A6E223E1EB10A2BBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 4788 IP address blocks: 23.220.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a9:a6:e2:23:e1:eb:10:a2:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=52fc1297-b460-4a69-8e04-8826c08a1d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:56:26:20:ed:e6:c1:d1:c4:4e:73:aa:a0: 0a:05:41:c8:c1:3c:69:b2:5b:76:42:a1:b2:cd:77: 08:83:6b:98:f6:69:33:7c:50:66:df:77:99:40:b7: ff:e9:82:93:db:13:c3:14:27:00:54:e5:3f:11:c5: fb:46:7e:e0:17:b8:ad:af:62:ba:af:87:ed:0e:3a: 03:56:0b:4f:74:21:1f:be:6d:b3:3c:c2:ff:5e:f4: 92:3e:cc:97:83:ac:76:62:bd:35:d0:8b:54:ee:ca: 7a:6c:f3:7e:2e:74:6f:d7:3e:70:61:2e:9f:2b:61: 98:e7:b4:75:db:33:fa:dc:05:d0:e4:a2:8c:1a:15: 3c:ec:f8:2c:d1:3b:b7:8e:43:31:f2:ea:ed:5d:e7: 16:62:d8:90:e1:9c:be:ff:2c:0f:a6:eb:0f:e3:ef: 54:59:bc:40:15:71:92:7e:d9:a1:37:f8:26:8a:f9: ad:2c:89:07:50:3c:ea:73:cd:43:ec:00:47:c6:11: 6a:6d:35:61:a9:97:d4:1e:5e:28:08:e4:3e:a5:8e: cc:75:a9:8a:57:e8:2c:7e:23:7a:1c:1a:cb:81:03: 0d:42:17:6e:31:ca:88:ad:50:c5:06:e1:f5:cc:1b: 59:d3:b2:f8:3e:59:13:19:ad:cf:25:ca:d0:e4:58: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:F1:40:41:8D:D1:0C:D3:DF:A7:3D:FD:60:87:1A:71:DC:8B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ca:e0:63:ee:7b:f9:28:45:f6:46:68:41:ca:ee:39:29:97: ef:33:65:a2:34:a0:d9:18:b2:6d:7d:31:26:4d:e9:e3:77:2d: 1a:43:2b:65:cc:81:cc:fb:3c:54:e7:73:f8:d7:0c:ad:c1:c6: 91:90:be:1f:51:3b:cb:c5:38:51:20:b3:f2:eb:75:db:ce:06: e4:49:b7:8f:d3:d4:04:ac:84:91:92:39:f4:c1:87:27:d9:a4: 99:f5:9b:c2:5e:a0:f6:77:f4:d4:07:33:b9:f9:7f:4b:86:08: 28:d7:6f:c5:79:16:3c:79:4f:e5:79:2d:56:a4:3a:e5:3e:77: 23:90:f0:9d:fe:2a:f0:66:3e:39:4d:09:9a:94:72:f3:14:d1: 37:82:ec:55:2d:70:d8:db:fa:73:ad:e7:38:f5:36:1f:66:dc: 23:c6:20:3c:d0:bb:6f:aa:f9:9d:c3:c9:09:5b:f2:e8:0f:f9: d6:57:dc:a8:82:c5:ab:38:cc:65:06:10:33:bc:e5:ee:14:06: b1:c5:ff:22:2c:55:d1:36:70:86:bb:41:ea:78:49:e3:ec:1f: eb:18:98:46:03:cc:76:3b:1a:39:77:46:5f:65:6a:66:8c:91: 47:ed:2f:ff:9a:3d:6c:7e:ed:89:b2:a3:33:fc:67:1c:ee:2a: 80:64:58:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6mm4iPh6xCiu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NTJmYzEyOTctYjQ2MC00YTY5LThlMDQtODgyNmMwOGExZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKhWJiDt5sHRxE5zqqAKBUHIwTxpslt2QqGy zXcIg2uY9mkzfFBm33eZQLf/6YKT2xPDFCcAVOU/EcX7Rn7gF7itr2K6r4ftDjoD VgtPdCEfvm2zPML/XvSSPsyXg6x2Yr010ItU7sp6bPN+LnRv1z5wYS6fK2GY57R1 2zP63AXQ5KKMGhU87Pgs0Tu3jkMx8urtXecWYtiQ4Zy+/ywPpusP4+9UWbxAFXGS ftmhN/gmivmtLIkHUDzqc81D7ABHxhFqbTVhqZfUHl4oCOQ+pY7MdamKV+gsfiN6 HBrLgQMNQhduMcqIrVDFBuH1zBtZ07L4PlkTGa3PJcrQ5Fi32wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNt8UBBjdEM09+nPf1ghxpx3IunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDU0MmQ0ZDEtYThmZC0z ZTAzLWE4ZDEtODRiY2UxYTE2N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfK4GPue/koRfZGaEHK7jkpl+8zZaI0oNkYsm19MSZN6eN3LRpDK2XM gcz7PFTnc/jXDK3BxpGQvh9RO8vFOFEgs/LrddvOBuRJt4/T1ASshJGSOfTBhyfZ pJn1m8JeoPZ39NQHM7n5f0uGCCjXb8V5Fjx5T+V5LVakOuU+dyOQ8J3+KvBmPjlN CZqUcvMU0TeC7FUtcNjb+nOt5zj1Nh9m3CPGIDzQu2+q+Z3DyQlb8ugP+dZX3KiC xas4zGUGEDO85e4UBrHF/yIsVdE2cIa7Qep4SePsH+sYmEYDzHY7Gjl3Rl9lamaM kUftL/+aPWx+7YmyozP8ZxzuKoBkWD0= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:00 2025 by rpki-client