$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13bcff2d-d8ed-33b1-8dd8-6d0adcf04056.roa File: 13bcff2d-d8ed-33b1-8dd8-6d0adcf04056.roa (raw, json) Hash identifier: ng2btYIcpoLP6PrGXq6cFcpGLn64VJ+zzBdYGAcMgcs= Subject key identifier: 3E:42:93:1C:40:5C:46:2B:7E:28:F2:8C:2A:F9:27:91:1E:C4:6F:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C7D8A5178C5F13141F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13bcff2d-d8ed-33b1-8dd8-6d0adcf04056.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.195.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c7:d8:a5:17:8c:5f:13:14:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=347b0e43-446b-41ce-9a39-f590af290efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:91:aa:bd:cb:14:74:42:cf:57:0d:18:74: 29:71:7e:c3:52:ff:2a:3b:62:2e:4f:4e:b5:6c:e6: fe:89:d1:b4:6c:32:b9:02:46:0f:41:5a:48:7f:c9: 71:71:59:8f:05:d2:24:c6:cc:cf:9d:c3:21:58:83: 3d:29:10:c2:54:3f:78:0f:3b:26:4a:f0:ec:e3:b5: 92:80:89:a4:72:f3:a3:c4:07:08:a2:a9:1c:70:f7: c3:16:14:6a:dc:65:ec:56:35:4e:0d:bc:60:87:56: 55:89:79:fc:8a:2e:ea:94:81:d6:a2:9c:52:1d:a1: ac:e7:da:35:51:ef:7c:f5:a3:db:4f:23:e6:52:34: 5f:d3:55:3c:84:ff:c7:6d:ff:24:2b:c6:ff:2a:c5: 94:fc:23:58:1c:1a:f3:0b:5d:6a:ba:be:c5:74:10: 62:1d:a6:f9:2c:9f:c2:fa:f9:ce:1d:fe:7c:b1:61: bc:a6:77:e9:02:c0:59:59:50:9c:88:d5:cb:62:d8: de:bc:0b:a9:e4:58:42:5d:2a:b9:d5:f0:e8:84:7f: b3:eb:3c:4c:7c:ba:3e:ce:c4:bc:a0:77:7b:3d:09: 32:5f:5b:d4:18:16:1c:91:32:a6:f7:23:42:a3:50: 9b:67:c7:3c:16:e1:e2:be:a3:c0:16:5d:4e:fc:24: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:93:1C:40:5C:46:2B:7E:28:F2:8C:2A:F9:27:91:1E:C4:6F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13bcff2d-d8ed-33b1-8dd8-6d0adcf04056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fa:64:40:bb:9a:32:83:3c:a2:37:54:65:76:ef:6c:e0:db: b6:d8:ce:3a:ff:e3:3e:b5:37:dd:df:d4:e7:dd:d8:31:0d:77: 8d:b5:51:77:b6:95:26:3b:8d:6f:7e:c2:c8:b3:00:92:f9:38: 47:20:06:63:eb:43:e5:ec:ad:0b:de:09:cf:b2:6f:69:c3:5d: 9d:09:8d:5f:c5:57:82:a2:78:91:35:e0:aa:e6:29:09:da:ea: a2:dd:ee:d9:79:bb:93:c9:c9:aa:54:c2:b6:3e:db:11:1d:79: 8f:9b:fd:b4:61:95:df:c2:be:17:01:a7:2c:f2:1a:d5:ba:6d: d7:15:f8:f6:dc:df:93:0f:96:ff:d4:3b:41:fe:36:7f:fc:e3: 35:b3:9f:1e:75:4c:21:d9:c7:d0:7b:32:9e:97:da:63:94:4b: d6:d3:c3:a2:9e:ee:89:64:51:6b:3c:21:09:d4:2c:a5:b6:b3: 97:2c:6a:eb:5f:43:36:c7:d2:96:b8:ce:e7:1c:1b:d7:31:6d: 70:eb:38:99:93:e2:a5:44:e9:16:94:23:8f:ff:e7:dc:2e:cb: d8:cb:73:28:24:8e:fd:65:07:d1:58:c8:6f:c8:e4:76:6b:da: 72:ad:72:ee:57:a9:68:9e:5c:12:c4:d7:4f:0b:8f:08:e1:74: 7a:30:37:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMfYpReMXxMUH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MzQ3YjBlNDMtNDQ2Yi00MWNlLTlhMzktZjU5MGFmMjkwZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8CRqr3LFHRCz1cNGHQpcX7DUv8qO2IuT061 bOb+idG0bDK5AkYPQVpIf8lxcVmPBdIkxszPncMhWIM9KRDCVD94DzsmSvDs47WS gImkcvOjxAcIoqkccPfDFhRq3GXsVjVODbxgh1ZViXn8ii7qlIHWopxSHaGs59o1 Ue989aPbTyPmUjRf01U8hP/Hbf8kK8b/KsWU/CNYHBrzC11qur7FdBBiHab5LJ/C +vnOHf58sWG8pnfpAsBZWVCciNXLYtjevAup5FhCXSq51fDohH+z6zxMfLo+zsS8 oHd7PQkyX1vUGBYckTKm9yNCo1CbZ8c8FuHivqPAFl1O/CSeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5CkxxAXEYrfijyjCr5J5EexG/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTNiY2ZmMmQtZDhlZC0z M2IxLThkZDgtNmQwYWRjZjA0MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8NYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA76ZEC7mjKDPKI3VGV272zg27bYzjr/4z61N93f1Ofd2DENd421UXe2 lSY7jW9+wsizAJL5OEcgBmPrQ+XsrQveCc+yb2nDXZ0JjV/FV4KieJE14KrmKQna 6qLd7tl5u5PJyapUwrY+2xEdeY+b/bRhld/CvhcBpyzyGtW6bdcV+Pbc35MPlv/U O0H+Nn/84zWznx51TCHZx9B7Mp6X2mOUS9bTw6Ke7olkUWs8IQnULKW2s5csautf QzbH0pa4zuccG9cxbXDrOJmT4qVE6RaUI4//59wuy9jLcygkjv1lB9FYyG/I5HZr 2nKtcu5XqWieXBLE108LjwjhdHowN4E= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:39 2025 by rpki-client