$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12235b82-610e-3106-9556-ada1831768e2.roa File: 12235b82-610e-3106-9556-ada1831768e2.roa (raw, json) Hash identifier: 9pMYv3kmEw0XE9/sfVEfAvUvJdbu0Ul/ZuD18LI+lnc= Subject key identifier: ED:02:25:5D:A6:83:C9:CF:C9:E6:11:F8:8C:D9:59:79:C2:D3:C1:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C44596723C29FF15BE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12235b82-610e-3106-9556-ada1831768e2.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.193.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c4:45:96:72:3c:29:ff:15:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=b00b0e19-86ae-4707-9493-df5fe59ab12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:b4:90:bd:7d:42:4f:3b:a1:9f:f3:f5:7f: 3c:3c:81:83:2e:26:fa:f8:6b:a0:f7:88:a5:f1:28: e7:63:79:3c:53:5a:22:0a:57:f2:e2:ff:54:0b:1f: bf:2f:97:6c:6f:ce:3b:59:55:43:30:79:7b:77:92: 0d:2d:56:21:9e:7c:69:b5:c1:2a:74:d4:80:14:df: 8e:8c:62:a5:8b:51:fd:21:0d:29:d8:bd:69:bb:8a: d8:1c:42:6b:3d:2b:59:f4:fc:6e:74:44:67:eb:d4: aa:d6:db:8f:2d:ce:35:ca:4b:7c:37:b6:51:51:0e: 95:8f:57:8f:e0:68:08:80:d7:6f:b7:58:dd:77:7b: 26:11:a6:72:3f:f1:dd:a5:f9:30:17:42:e1:c3:d4: 23:a6:2a:22:28:e7:77:60:ab:02:f5:54:88:e9:c1: b7:e0:de:67:3c:c7:18:d0:5f:40:5b:21:36:22:6b: f7:75:ae:ac:9d:f4:44:02:78:15:d5:58:e3:7a:ae: 90:23:17:f0:81:cf:e8:d5:bd:7a:40:d0:36:08:3e: 03:a3:11:52:cd:53:d6:d6:ba:28:6b:87:c3:88:5b: 97:7f:14:02:65:ca:3a:1f:29:e7:e2:08:0b:35:da: 2f:14:44:d5:0c:2c:64:96:ca:65:94:20:95:b5:3f: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:25:5D:A6:83:C9:CF:C9:E6:11:F8:8C:D9:59:79:C2:D3:C1:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12235b82-610e-3106-9556-ada1831768e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:91:98:91:98:6d:6e:65:4a:5f:5a:f6:b2:2e:2d:63:7c:43: 43:3f:97:f3:88:2f:d1:5a:ab:c6:ba:2b:0f:d0:bc:5d:54:97: f3:52:98:5b:e8:88:08:14:e1:08:b4:a3:69:d9:36:c2:9b:a0: 22:bd:07:96:38:21:05:9e:c8:10:c2:02:7b:06:eb:33:b5:f7: 6a:94:c0:36:6f:b6:c9:c8:be:51:13:53:4a:fd:ff:2c:3d:91: f4:cb:7b:ab:8c:c4:f6:5b:13:2d:6f:ce:58:9e:35:dd:4c:87: 05:9c:1f:68:4e:ac:b3:88:95:41:7e:de:74:d5:c1:30:22:29: df:d6:e0:db:5b:66:0b:15:67:93:51:cc:49:f8:6f:cd:4c:75: af:73:22:0d:a1:17:51:75:8b:78:a9:5a:17:e3:0d:d8:f9:b9: b2:db:c6:9e:6f:4d:e0:9f:88:8e:d6:cd:77:8d:dc:85:2d:eb: 61:50:d9:fa:62:30:7c:ea:30:4d:3f:86:e6:d3:de:8a:d6:a6: d5:d3:22:b5:1e:e8:69:56:8a:39:83:d2:4c:7d:03:a3:7f:4c: c4:b5:33:9f:9f:d6:c7:c6:83:24:6f:93:68:06:3d:e7:53:57: be:ee:d5:6b:e4:1c:0b:12:55:e4:4e:0e:5c:23:b2:e1:f9:67: 51:73:76:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMRFlnI8Kf8VvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YjAwYjBlMTktODZhZS00NzA3LTk0OTMtZGY1ZmU1OWFiMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraW0kL19Qk87oZ/z9X88PIGDLib6+Gug94il 8SjnY3k8U1oiClfy4v9UCx+/L5dsb847WVVDMHl7d5INLVYhnnxptcEqdNSAFN+O jGKli1H9IQ0p2L1pu4rYHEJrPStZ9PxudERn69Sq1tuPLc41ykt8N7ZRUQ6Vj1eP 4GgIgNdvt1jdd3smEaZyP/HdpfkwF0Lhw9QjpioiKOd3YKsC9VSI6cG34N5nPMcY 0F9AWyE2Imv3da6snfREAngV1Vjjeq6QIxfwgc/o1b16QNA2CD4DoxFSzVPW1roo a4fDiFuXfxQCZco6Hynn4ggLNdovFETVDCxklspllCCVtT91KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0CJV2mg8nPyeYR+IzZWXnC08HmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIyMzViODItNjEwZS0z MTA2LTk1NTYtYWRhMTgzMTc2OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8E8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByRmJGYbW5lSl9a9rIuLWN8Q0M/l/OIL9Faq8a6Kw/QvF1Ul/NSmFvo iAgU4Qi0o2nZNsKboCK9B5Y4IQWeyBDCAnsG6zO192qUwDZvtsnIvlETU0r9/yw9 kfTLe6uMxPZbEy1vzlieNd1MhwWcH2hOrLOIlUF+3nTVwTAiKd/W4NtbZgsVZ5NR zEn4b81Mda9zIg2hF1F1i3ipWhfjDdj5ubLbxp5vTeCfiI7WzXeN3IUt62FQ2fpi MHzqME0/hubT3orWptXTIrUe6GlWijmD0kx9A6N/TMS1M5+f1sfGgyRvk2gGPedT V77u1WvkHAsSVeRODlwjsuH5Z1FzdsQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:12 2025 by rpki-client