$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d87acd5-2f39-331e-9ad2-2ebfcebf134e.roa File: 0d87acd5-2f39-331e-9ad2-2ebfcebf134e.roa (raw, json) Hash identifier: qO+k19nNuvh51GyyyHaXSwLXZGrJXKHF+zDrj3Tdb2w= Subject key identifier: 76:B7:E3:86:04:DC:6B:DB:85:51:DA:A2:F8:AC:DC:53:C3:5C:C4:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB6C7BBABFDDB88F221140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d87acd5-2f39-331e-9ad2-2ebfcebf134e.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.58.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:6c:7b:ba:bf:dd:b8:8f:22:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=c68feb20-4026-4e26-825d-8c267611699f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:6b:32:16:a0:41:9d:aa:5f:49:d4:29:1f: fd:ef:54:52:19:8e:78:fe:e1:56:a1:07:2c:3a:71: 81:83:e2:ca:b4:ac:6e:da:3a:66:66:a4:c8:7e:9c: da:dc:16:8b:c4:5b:9a:5b:4d:1d:a7:28:9c:76:9f: 0c:78:ef:b4:0b:74:2b:38:64:94:c4:e9:75:42:6e: 34:3f:01:4e:4e:2c:e7:7e:eb:fb:e0:00:af:87:eb: 00:da:6d:42:c9:fd:ac:a1:76:7a:96:d5:7e:24:eb: e3:07:56:a9:b3:ed:1f:a7:01:1a:ed:93:30:6f:29: c9:87:8b:02:aa:a8:71:33:1e:82:cc:68:a3:bf:97: d6:2e:79:95:db:fd:f5:52:30:ae:d4:fb:1f:e1:5a: 05:f1:56:08:df:e0:00:a4:89:84:c0:f9:de:ec:e6: c4:c3:27:6a:b5:17:74:b0:d6:ff:10:aa:08:42:20: b5:10:63:f9:ef:eb:dc:44:6b:dd:f3:86:5f:43:93: 69:98:6a:66:80:5d:7f:26:b1:71:81:02:7f:b1:10: b6:47:bf:ec:3d:e0:fb:cc:bc:6d:d5:4b:38:94:bc: d7:93:1e:75:1c:71:b7:4f:c4:8b:78:82:43:35:86: 91:af:63:9f:87:29:0a:31:f9:57:d4:94:00:d5:42: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B7:E3:86:04:DC:6B:DB:85:51:DA:A2:F8:AC:DC:53:C3:5C:C4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d87acd5-2f39-331e-9ad2-2ebfcebf134e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:31:65:3f:5f:11:b0:3a:8b:11:9e:8e:e1:d7:35:20:42:15: 0b:b2:68:52:78:b8:4c:28:07:34:44:9f:79:fc:4c:cc:23:aa: d5:74:27:2a:7c:6e:b8:4b:f0:fd:8e:19:b9:aa:f3:5c:f3:ee: 37:55:2f:3d:c9:23:7b:0e:74:27:a6:60:a4:13:4c:14:ae:f0: f1:ab:7f:10:64:01:37:b5:f2:20:59:9a:bb:72:4e:50:c1:4a: 0e:8b:e6:c4:bf:d3:15:ce:22:7c:0a:b2:da:ed:01:97:fd:70: 4d:d9:91:1e:b8:99:5b:76:1d:53:57:3a:bd:26:4b:81:88:a8: 22:03:37:c3:26:6b:40:1f:37:43:60:c1:f7:ca:69:f4:2f:fd: 8f:78:b0:5f:4a:99:0a:ff:56:70:f5:1b:76:42:e4:7c:32:b5: 52:aa:54:d6:0e:15:b4:24:c4:ef:12:7d:34:97:e2:f5:80:1b: 9a:3d:5d:ac:34:60:9b:f4:a6:1d:6d:36:a9:87:19:ce:ca:a6: 3a:66:5b:10:45:6b:af:98:36:53:d4:ba:17:5c:5c:8a:ef:bb: 3a:cf:42:a1:0d:e6:fc:56:77:ab:f1:ac:2a:f5:b7:8c:1e:d2: 51:35:85:f4:b7:3b:8e:4b:73:ca:a5:17:e0:91:48:6c:30:df: 0e:1b:86:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2x7ur/duI8iEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk YzY4ZmViMjAtNDAyNi00ZTI2LTgyNWQtOGMyNjc2MTE2OTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDtrMhagQZ2qX0nUKR/971RSGY54/uFWoQcs OnGBg+LKtKxu2jpmZqTIfpza3BaLxFuaW00dpyicdp8MeO+0C3QrOGSUxOl1Qm40 PwFOTiznfuv74ACvh+sA2m1Cyf2soXZ6ltV+JOvjB1aps+0fpwEa7ZMwbynJh4sC qqhxMx6CzGijv5fWLnmV2/31UjCu1Psf4VoF8VYI3+AApImEwPne7ObEwydqtRd0 sNb/EKoIQiC1EGP57+vcRGvd84ZfQ5NpmGpmgF1/JrFxgQJ/sRC2R7/sPeD7zLxt 1Us4lLzXkx51HHG3T8SLeIJDNYaRr2OfhykKMflX1JQA1UJHZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa344YE3GvbhVHaovis3FPDXMShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQ4N2FjZDUtMmYzOS0z MzFlLTlhZDItMmViZmNlYmYxMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0xZT9fEbA6ixGejuHXNSBCFQuyaFJ4uEwoBzREn3n8TMwjqtV0Jyp8 brhL8P2OGbmq81zz7jdVLz3JI3sOdCemYKQTTBSu8PGrfxBkATe18iBZmrtyTlDB Sg6L5sS/0xXOInwKstrtAZf9cE3ZkR64mVt2HVNXOr0mS4GIqCIDN8Mma0AfN0Ng wffKafQv/Y94sF9KmQr/VnD1G3ZC5HwytVKqVNYOFbQkxO8SfTSX4vWAG5o9Xaw0 YJv0ph1tNqmHGc7KpjpmWxBFa6+YNlPUuhdcXIrvuzrPQqEN5vxWd6vxrCr1t4we 0lE1hfS3O45Lc8qlF+CRSGww3w4bhrY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:46 2025 by rpki-client