$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0661c392-c44b-373c-9bd0-795beeae2f09.roa File: 0661c392-c44b-373c-9bd0-795beeae2f09.roa (raw, json) Hash identifier: Y4X28L3Rk90r4HgJAUmEpnMspVm+N0QPucw9TlWZboI= Subject key identifier: A6:15:7B:9A:16:DA:46:69:15:45:68:75:05:2F:27:75:26:58:95:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584845159ABD686F15F6BABF6680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0661c392-c44b-373c-9bd0-795beeae2f09.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.13.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:9a:bd:68:6f:15:f6:ba:bf:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=fb81a556-4dfb-4d83-80be-91a4531e5c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:4d:05:3b:0e:55:8b:b9:88:ce:24:25:f1: 9a:13:64:d5:d3:51:7e:b5:18:3e:a6:94:26:60:aa: ab:65:e7:db:94:24:dd:2b:98:28:e0:dc:02:d6:0b: e7:bb:6b:f8:ad:f2:93:e6:eb:3a:96:a8:55:9b:c9: a3:aa:15:91:69:2d:de:06:63:f8:7a:80:a5:29:ad: 39:a8:65:46:e6:d5:ed:f2:24:0a:01:41:98:0e:06: cd:b1:6e:3c:fe:9a:e9:dc:f5:62:a2:60:6c:df:77: 68:20:40:1f:5a:ec:b4:cf:73:96:c0:4f:17:ee:23: 53:4d:f6:d9:a7:0b:5b:96:4d:c9:3d:7e:bb:d1:9c: 4c:5b:f5:4b:41:ce:5c:0c:c5:67:65:22:02:22:52: 8f:aa:0a:16:ef:39:1d:8b:3c:eb:04:69:cf:6d:37: 8b:f4:9f:73:ea:25:ca:dd:3e:e6:5f:2b:57:45:8e: ec:f3:06:93:18:01:fc:58:a2:c3:85:03:97:f8:a5: 2e:77:7a:f1:ef:bd:58:c2:2f:22:9b:6c:05:c8:70: d0:e3:d1:d0:38:d5:bb:22:29:fa:e3:f4:f0:a2:83: e4:a8:46:a9:d2:1e:7b:51:19:09:22:59:4b:de:4a: f9:4c:40:4d:da:55:db:f0:25:50:eb:3a:3c:89:08: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:7B:9A:16:DA:46:69:15:45:68:75:05:2F:27:75:26:58:95:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0661c392-c44b-373c-9bd0-795beeae2f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.13.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:7f:dd:84:2b:dd:d3:fb:60:04:9c:4a:a1:2f:05:71:27:a0: 88:b1:e5:a2:56:b2:32:6d:42:a1:8f:30:bc:0e:41:c9:69:81: 4c:33:12:7b:65:88:88:b3:ae:1f:84:c3:67:de:b2:dd:21:43: 51:ba:5b:ba:52:db:06:ff:b3:d4:69:dc:b2:90:6e:32:c9:03: 5e:d0:2e:9b:4e:9f:d0:08:16:77:0b:0a:d0:48:32:2c:b5:a6: ec:c8:9d:99:04:a0:46:9b:76:e3:33:6b:6c:9d:11:9d:c7:d6: 10:91:82:ac:58:ed:74:ba:4a:c1:56:e8:bf:34:81:bb:76:ba: 11:d3:08:ac:8b:1a:8e:5f:f2:c4:93:5f:1b:75:f4:d8:c8:4f: d6:17:a6:83:4b:7b:e6:c0:47:00:d8:eb:d1:c2:67:95:6b:c1: 5a:03:c8:0c:e9:57:02:4e:e7:97:7a:c8:5b:00:74:73:a5:58: 00:55:9b:38:97:57:5b:cc:d4:a6:0d:22:cb:56:7e:17:28:84: 63:94:b2:c3:c8:f0:99:9a:be:d5:0d:37:7e:7f:8c:fd:6a:cb: 2c:3d:20:25:a0:8e:36:fc:d5:63:ae:76:54:9c:0b:9d:f8:44: a9:7c:f1:d3:73:d3:1f:6c:1d:be:56:ba:d2:89:bf:dc:23:44: 83:7b:36:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZq9aG8V9rq/ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZmI4MWE1NTYtNGRmYi00ZDgzLTgwYmUtOTFhNDUzMWU1YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoBNBTsOVYu5iM4kJfGaE2TV01F+tRg+ppQm YKqrZefblCTdK5go4NwC1gvnu2v4rfKT5us6lqhVm8mjqhWRaS3eBmP4eoClKa05 qGVG5tXt8iQKAUGYDgbNsW48/prp3PViomBs33doIEAfWuy0z3OWwE8X7iNTTfbZ pwtblk3JPX670ZxMW/VLQc5cDMVnZSICIlKPqgoW7zkdizzrBGnPbTeL9J9z6iXK 3T7mXytXRY7s8waTGAH8WKLDhQOX+KUud3rx771Ywi8im2wFyHDQ49HQONW7Iin6 4/TwooPkqEap0h57URkJIllL3kr5TEBN2lXb8CVQ6zo8iQj1HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYVe5oW2kZpFUVodQUvJ3UmWJXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY2MWMzOTItYzQ0Yi0z NzNjLTliZDAtNzk1YmVlYWUyZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFw3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN/3YQr3dP7YAScSqEvBXEnoIix5aJWsjJtQqGPMLwOQclpgUwzEntl iIizrh+Ew2fest0hQ1G6W7pS2wb/s9Rp3LKQbjLJA17QLptOn9AIFncLCtBIMiy1 puzInZkEoEabduMza2ydEZ3H1hCRgqxY7XS6SsFW6L80gbt2uhHTCKyLGo5f8sST Xxt19NjIT9YXpoNLe+bARwDY69HCZ5VrwVoDyAzpVwJO55d6yFsAdHOlWABVmziX V1vM1KYNIstWfhcohGOUssPI8JmavtUNN35/jP1qyyw9ICWgjjb81WOudlScC534 RKl88dNz0x9sHb5WutKJv9wjRIN7Nlg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:51:33 2025 by rpki-client