$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05f4d293-dd5e-3aef-99d4-89ad77f745b7.roa File: 05f4d293-dd5e-3aef-99d4-89ad77f745b7.roa (raw, json) Hash identifier: lpV+YYwE1VXsvKmmDxXbS8MXQxYYWN8c2Vz6pv656R8= Subject key identifier: 0B:AE:B6:15:5F:AC:CB:60:59:8A:D7:D7:5F:3E:0F:D2:8C:57:E4:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A996635984BE0715CF88ED00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05f4d293-dd5e-3aef-99d4-89ad77f745b7.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.203.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:63:59:84:be:07:15:cf:88:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=fb8f5c82-a06d-4ed2-82b2-9af4e8edb155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:ad:69:7f:a6:72:08:7d:28:4e:1c:75:5f: 6c:02:d5:15:d2:6b:08:37:c3:65:10:f4:cd:d8:b5: 31:9c:e7:d4:e7:d9:30:da:4f:64:79:bd:a0:b0:b0: d7:b0:4a:59:04:63:70:26:bf:fb:70:90:af:e7:ae: 0e:ae:45:1a:2c:99:81:31:e2:90:ed:42:37:b3:4c: 8e:6d:54:c3:9e:ec:2d:25:6c:39:66:d5:07:3d:8f: fe:de:8a:01:6b:58:13:23:d1:5f:85:14:d4:41:55: ff:9d:0a:4c:45:4d:fa:28:04:c8:e2:fa:90:ed:c3: 84:fc:0f:92:01:24:94:52:dd:24:5f:a9:40:c7:8e: b3:91:9c:6b:f8:bc:11:fb:b4:e2:02:0c:13:f0:d6: 87:6a:58:bd:45:04:6d:e1:88:29:7d:cf:a2:9d:20: e5:3c:f5:f3:d0:87:49:d4:35:cf:ff:74:b1:69:58: ab:c7:0f:e0:b0:83:12:ab:fd:e8:b0:ad:6b:d8:97: dc:42:c2:9f:b9:4c:1d:dd:a8:8c:db:21:1a:f8:8e: 5c:ff:33:71:ea:75:1b:79:53:d3:88:0d:71:58:0e: 73:ca:d7:76:32:db:4e:4a:51:d8:a2:2f:0b:49:53: b3:41:fe:e2:a9:7a:14:f1:10:93:73:85:8c:44:e3: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AE:B6:15:5F:AC:CB:60:59:8A:D7:D7:5F:3E:0F:D2:8C:57:E4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05f4d293-dd5e-3aef-99d4-89ad77f745b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e7:27:28:89:2d:65:0d:61:75:58:cb:0a:df:19:f3:d3:9e: b3:06:3c:03:b6:3b:6a:e8:fe:69:45:41:1c:20:65:af:f1:13: 70:fd:5e:32:9c:cb:3d:2f:81:4d:3c:ef:bd:af:22:57:45:e8: 97:7a:50:a6:20:82:01:43:d4:06:69:6a:62:5f:24:cb:c7:3c: 0d:79:99:47:91:43:43:d9:5d:8d:08:99:bd:f1:3c:32:74:34: 90:54:85:6e:8a:23:7e:75:76:e2:03:e1:fd:7c:e6:bb:cd:42: 84:c6:39:f0:5b:e1:35:d6:82:81:39:20:a5:a8:b7:f2:2a:69: fd:78:85:d9:e9:ad:a3:48:eb:b4:1e:79:98:cc:ac:ca:21:cd: 3c:cc:57:e2:2c:96:4f:23:56:ca:fd:44:93:31:3c:d7:09:5f: 42:6b:b2:66:46:53:58:b2:e9:62:09:63:3c:2c:47:27:e0:7b: a2:e8:4c:ac:34:c6:5e:8c:04:5c:81:eb:69:0d:b1:3f:cc:de: 1d:96:8c:5f:e8:d8:1b:75:b1:99:3e:1e:2e:32:d9:ca:82:d8: 92:37:82:12:f1:21:fc:53:13:7b:42:98:37:4e:39:4d:bf:80: e8:89:68:f6:85:98:57:ac:3e:d0:54:d1:56:97:dd:36:a9:ee: 69:c8:90:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmNZhL4HFc+I7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmI4ZjVjODItYTA2ZC00ZWQyLTgyYjItOWFmNGU4ZWRiMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyStaX+mcgh9KE4cdV9sAtUV0msIN8NlEPTN 2LUxnOfU59kw2k9keb2gsLDXsEpZBGNwJr/7cJCv564OrkUaLJmBMeKQ7UI3s0yO bVTDnuwtJWw5ZtUHPY/+3ooBa1gTI9FfhRTUQVX/nQpMRU36KATI4vqQ7cOE/A+S ASSUUt0kX6lAx46zkZxr+LwR+7TiAgwT8NaHali9RQRt4Ygpfc+inSDlPPXz0IdJ 1DXP/3SxaVirxw/gsIMSq/3osK1r2JfcQsKfuUwd3aiM2yEa+I5c/zNx6nUbeVPT iA1xWA5zytd2MttOSlHYoi8LSVOzQf7iqXoU8RCTc4WMROPN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuuthVfrMtgWYrX118+D9KMV+TeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDVmNGQyOTMtZGQ1ZS0z YWVmLTk5ZDQtODlhZDc3Zjc0NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLnJyiJLWUNYXVYywrfGfPTnrMGPAO2O2ro/mlFQRwgZa/xE3D9XjKc yz0vgU08772vIldF6Jd6UKYgggFD1AZpamJfJMvHPA15mUeRQ0PZXY0Imb3xPDJ0 NJBUhW6KI351duID4f185rvNQoTGOfBb4TXWgoE5IKWot/Iqaf14hdnpraNI67Qe eZjMrMohzTzMV+Islk8jVsr9RJMxPNcJX0JrsmZGU1iy6WIJYzwsRyfge6LoTKw0 xl6MBFyB62kNsT/M3h2WjF/o2Bt1sZk+Hi4y2cqC2JI3ghLxIfxTE3tCmDdOOU2/ gOiJaPaFmFesPtBU0VaX3Tap7mnIkCU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:44 2025 by rpki-client