$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/095ebfbf-33dd-3295-a54e-79514b63f6ee.roa File: 095ebfbf-33dd-3295-a54e-79514b63f6ee.roa (raw, json) Hash identifier: TtDnaYYkGy0qXwpjDiMd4xxwZMFADGnJconCiSNKxpY= Subject key identifier: 34:7B:E8:D6:4B:0B:44:C9:EB:B4:82:C9:FD:75:F6:D5:47:FF:02:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584845159CB8D113699A2C026300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/095ebfbf-33dd-3295-a54e-79514b63f6ee.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.0.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:9c:b8:d1:13:69:9a:2c:02:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=0099df11-b130-4864-a436-3e51a9d3e2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:9b:ea:67:fd:26:6a:69:52:65:1f:83:9e: ad:f3:23:18:5d:aa:dc:e2:a2:85:79:76:76:49:3b: 70:1e:43:23:5e:ef:52:7a:cf:94:0e:21:bc:a3:69: 71:c1:16:38:27:02:35:7e:51:ac:34:2f:e4:e0:97: 99:3b:9b:9a:6b:08:ea:eb:28:e6:57:a5:ac:dc:97: b5:37:0a:bc:0e:65:7b:66:e0:c4:a4:7a:46:d1:4e: 90:77:39:c9:d5:d6:3e:a9:f4:47:be:aa:a8:47:4a: ec:41:48:94:30:cc:0e:0a:46:de:f5:0e:a9:af:cd: 3f:bb:65:2b:8b:a9:c7:81:ca:10:4a:5e:66:63:49: f3:c0:3c:2b:27:88:46:75:b6:18:ab:1f:84:30:49: 8b:d7:23:88:67:86:27:a5:c4:03:32:4d:e6:da:17: 7f:66:d9:61:b7:e4:d3:3a:5d:ff:3e:0e:a1:fc:c3: 2a:d2:a6:89:db:eb:df:fd:a8:07:e7:7a:d3:2e:37: 81:f2:35:63:67:16:59:8d:0b:0f:bf:24:9b:f9:eb: d2:f9:96:e6:97:e8:96:e8:d6:0a:8a:a7:69:93:37: 8c:18:b2:d7:67:e1:0d:d4:14:2d:6e:51:de:b8:39: 82:02:ed:a0:95:62:61:1c:6d:b1:93:f0:74:f7:81: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:E8:D6:4B:0B:44:C9:EB:B4:82:C9:FD:75:F6:D5:47:FF:02:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/095ebfbf-33dd-3295-a54e-79514b63f6ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0e:90:61:e8:96:b9:77:5c:11:82:82:c2:49:ea:31:53:35: 7e:d5:d1:0d:ce:22:fb:74:f2:3c:60:9c:ba:53:9f:0a:39:87: b3:c0:1d:47:e4:5e:4a:7d:41:ba:30:f6:68:84:ab:2c:ba:81: 67:65:b2:83:b0:2b:72:ed:3e:64:7f:fd:50:83:1d:7a:aa:cc: 6c:e4:24:5d:b4:65:34:33:68:2e:3d:f9:29:db:d3:e9:16:dd: 0f:ce:41:ba:64:ed:93:5d:a9:08:4a:21:6c:5f:a4:e5:55:1e: 35:3e:81:e2:9f:ea:ec:ad:77:28:07:26:f3:97:55:4b:1f:b6: 9b:31:27:98:23:58:13:7e:a9:11:ea:e5:8a:f0:39:81:e3:40: 43:5d:be:bd:6e:d6:6b:7f:7c:0a:68:31:7c:7b:0c:11:b8:dc: 98:aa:95:49:2c:b6:d3:eb:9a:97:bc:45:1d:f7:e7:32:bd:69: 48:5f:71:37:95:4b:03:a1:77:5a:7a:45:72:8c:f7:6b:3c:1c: 03:62:ee:79:4f:e9:90:04:76:8f:0a:5c:0d:24:49:88:71:19: 3b:f7:07:9e:d7:cc:ba:ee:23:46:bd:75:08:6b:fb:73:c1:52: ba:be:51:54:d0:a5:69:80:db:5e:64:d2:c5:a2:de:87:f5:78: 4c:22:3a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZy40RNpmiwCYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk MDA5OWRmMTEtYjEzMC00ODY0LWE0MzYtM2U1MWE5ZDNlMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwmb6mf9JmppUmUfg56t8yMYXarc4qKFeXZ2 STtwHkMjXu9Ses+UDiG8o2lxwRY4JwI1flGsNC/k4JeZO5uaawjq6yjmV6Ws3Je1 Nwq8DmV7ZuDEpHpG0U6QdznJ1dY+qfRHvqqoR0rsQUiUMMwOCkbe9Q6pr80/u2Ur i6nHgcoQSl5mY0nzwDwrJ4hGdbYYqx+EMEmL1yOIZ4YnpcQDMk3m2hd/Ztlht+TT Ol3/Pg6h/MMq0qaJ2+vf/agH53rTLjeB8jVjZxZZjQsPvySb+evS+Zbml+iW6NYK iqdpkzeMGLLXZ+EN1BQtblHeuDmCAu2glWJhHG2xk/B094GMCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR76NZLC0TJ67SCyf119tVH/wLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDk1ZWJmYmYtMzNkZC0z Mjk1LWE1NGUtNzk1MTRiNjNmNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFwBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8OkGHolrl3XBGCgsJJ6jFTNX7V0Q3OIvt08jxgnLpTnwo5h7PAHUfk Xkp9Qbow9miEqyy6gWdlsoOwK3LtPmR//VCDHXqqzGzkJF20ZTQzaC49+Snb0+kW 3Q/OQbpk7ZNdqQhKIWxfpOVVHjU+geKf6uytdygHJvOXVUsftpsxJ5gjWBN+qRHq 5YrwOYHjQENdvr1u1mt/fApoMXx7DBG43JiqlUksttPrmpe8RR335zK9aUhfcTeV SwOhd1p6RXKM92s8HANi7nlP6ZAEdo8KXA0kSYhxGTv3B57XzLruI0a9dQhr+3PB Urq+UVTQpWmA215k0sWi3of1eEwiOqM= -----END CERTIFICATE-----Generated at Sun Feb 16 21:06:36 2025 by rpki-client