$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a5a9e35-3df9-31a4-9bd2-5a30485ac9f4.roa File: 0a5a9e35-3df9-31a4-9bd2-5a30485ac9f4.roa (raw, json) Hash identifier: WXDPI3aBmNB0Ubqlm3Ky2BqXDR9erAh2/sIXLxqW7Q0= Subject key identifier: 1D:3E:D7:57:61:67:60:14:6D:55:43:BC:75:C7:13:D7:A2:63:1E:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830C8570412DF1EF7639D60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a5a9e35-3df9-31a4-9bd2-5a30485ac9f4.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.201.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c8:57:04:12:df:1e:f7:63:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=5dfa2535-8691-4c37-a714-2eaf8d8782c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:3c:8a:2e:f0:4a:12:ed:d7:5a:c1:a3:c1: a7:5a:c6:9d:a1:6e:cd:a1:9c:11:b9:1e:e6:7b:d8: 0d:a6:2d:47:8a:9d:d3:ac:95:59:03:27:66:9d:cc: bd:cc:bf:5d:13:db:8a:25:a5:bf:02:fc:d9:c1:c5: 58:41:0e:a3:3d:28:79:01:47:93:ac:81:89:e4:50: 88:19:73:1f:c0:0f:27:aa:bf:ef:ce:a6:af:95:53: 8c:10:49:55:08:40:6d:90:1c:fc:c7:fc:56:bf:53: 1c:a3:cf:43:8c:8a:3f:10:f4:dd:b2:83:38:33:8b: 01:71:54:eb:21:71:d7:17:ee:90:3b:49:a9:d7:d0: 13:ae:bf:ba:ae:fa:38:45:29:63:d4:65:8c:22:1a: ec:c0:af:8f:95:8d:60:34:91:35:ef:e1:78:6b:c0: c2:f2:ac:27:a1:68:65:93:1b:c6:2b:50:2c:8d:eb: f8:01:a3:83:b6:52:e3:e1:b3:ad:33:0e:87:f5:44: 61:51:f2:e2:09:7f:1e:f1:3a:cf:b1:97:04:32:bb: a8:73:ef:6c:ae:29:93:e3:ac:66:03:09:da:42:54: 24:62:72:01:ac:28:cc:ad:7d:73:00:f6:d5:61:19: f6:20:7d:3c:3f:46:6c:4f:ac:fc:fe:cf:c4:bf:5d: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3E:D7:57:61:67:60:14:6D:55:43:BC:75:C7:13:D7:A2:63:1E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a5a9e35-3df9-31a4-9bd2-5a30485ac9f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:df:db:7d:a4:d3:02:84:ff:36:f5:2f:16:78:0a:d5:91: 49:1f:3b:5c:2e:38:6f:b0:b9:2f:a6:8c:c0:81:cc:f4:4e:ce: 8a:bf:82:f8:7d:aa:ae:7d:78:8c:94:aa:14:ed:b4:c6:79:9f: b1:22:f7:40:18:8d:c0:37:08:93:08:eb:6c:75:a5:86:94:45: 78:0b:29:8a:60:af:cf:a2:4d:77:59:79:0f:cc:51:ab:a9:20: 8c:4e:04:4a:30:e8:5a:18:bd:53:eb:8d:d1:3a:f6:30:8e:cd: a4:16:36:9c:52:7e:fb:c0:26:50:8c:a6:f2:31:c1:72:88:af: 04:73:c0:bf:b0:a7:c1:08:90:cf:a8:42:54:0d:22:00:e8:cb: 1c:50:aa:e5:bc:28:ed:cc:ce:2a:02:b3:1b:59:a2:05:cd:70: 8f:ce:21:b1:3d:81:fa:3c:0c:d3:41:93:f9:e4:47:c2:5a:ea: a5:5e:46:14:be:05:2c:81:91:a6:72:67:2f:b9:1a:b2:c8:3b: cb:56:f8:7b:b4:6a:88:e5:3c:8d:04:fa:a7:1b:df:ea:cd:dd: 0f:23:39:a8:f3:5a:88:98:81:ab:49:03:fd:94:20:ab:43:4e: ae:2a:d1:b9:a2:8f:45:37:cd:92:a5:b6:4b:ce:15:35:d0:80: b0:7d:e2:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMhXBBLfHvdjnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NWRmYTI1MzUtODY5MS00YzM3LWE3MTQtMmVhZjhkODc4MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAk8ii7wShLt11rBo8GnWsadoW7NoZwRuR7m e9gNpi1Hip3TrJVZAydmncy9zL9dE9uKJaW/AvzZwcVYQQ6jPSh5AUeTrIGJ5FCI GXMfwA8nqr/vzqavlVOMEElVCEBtkBz8x/xWv1Mco89DjIo/EPTdsoM4M4sBcVTr IXHXF+6QO0mp19ATrr+6rvo4RSlj1GWMIhrswK+PlY1gNJE17+F4a8DC8qwnoWhl kxvGK1Asjev4AaODtlLj4bOtMw6H9URhUfLiCX8e8TrPsZcEMruoc+9srimT46xm AwnaQlQkYnIBrCjMrX1zAPbVYRn2IH08P0ZsT6z8/s/Ev11NMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0+11dhZ2AUbVVDvHXHE9eiYx5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE1YTllMzUtM2RmOS0z MWE0LTliZDItNWEzMDQ4NWFjOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc939t9pNMChP829S8WeArVkUkfO1wuOG+wuS+mjMCBzPROzoq/gvh9 qq59eIyUqhTttMZ5n7Ei90AYjcA3CJMI62x1pYaURXgLKYpgr8+iTXdZeQ/MUaup IIxOBEow6FoYvVPrjdE69jCOzaQWNpxSfvvAJlCMpvIxwXKIrwRzwL+wp8EIkM+o QlQNIgDoyxxQquW8KO3MzioCsxtZogXNcI/OIbE9gfo8DNNBk/nkR8Ja6qVeRhS+ BSyBkaZyZy+5GrLIO8tW+Hu0aojlPI0E+qcb3+rN3Q8jOajzWoiYgatJA/2UIKtD Tq4q0bmij0U3zZKltkvOFTXQgLB94g8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:58 2025 by rpki-client