$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18b4f7f4-f797-3a47-a035-51de45a60981.roa File: 18b4f7f4-f797-3a47-a035-51de45a60981.roa (raw, json) Hash identifier: Zj3tNleEPoS/sWfA1VCTzcmQ/CKbwtBG6P/cKei+3ZQ= Subject key identifier: 4E:0D:D0:F0:98:01:2A:09:1B:91:84:0C:11:38:D0:F4:DE:E4:A3:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DE069BB700DA11C66AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18b4f7f4-f797-3a47-a035-51de45a60981.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.195.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:de:06:9b:b7:00:da:11:c6:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=1ddffe34-ac65-4e7b-be7d-a55c1e9000bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:ad:a5:97:f0:33:ab:22:2a:71:65:8a:c1: 18:2a:cc:34:0f:f6:43:2f:e3:e2:01:1a:77:be:72: be:a5:66:4d:80:8a:e8:08:dc:54:b0:be:5f:41:83: 59:73:51:9f:f7:03:57:71:8b:a5:c9:33:be:1a:45: 96:20:0c:f0:30:c1:92:67:16:3a:63:a7:ef:3b:43: 70:09:d2:8b:96:df:11:32:9d:67:7b:d6:ee:50:48: 6d:09:a5:69:a5:ca:5c:a2:a0:51:22:c7:01:13:1d: 1e:b4:5c:e8:84:ba:0a:68:3c:b2:a1:f7:84:f2:8b: a6:e8:74:f9:36:12:dd:14:f6:f1:d8:a1:60:22:f4: 81:8e:54:01:80:ed:2d:4f:ec:74:e8:f1:ef:12:7d: ce:98:a9:da:25:bf:5c:67:e5:9d:50:35:20:66:a4: 1d:d2:e3:23:54:df:77:b8:a2:bb:9f:93:f7:8f:4c: 3a:19:25:9b:ae:0c:74:ee:ee:7d:57:86:c3:94:2a: 3b:99:00:16:9c:56:5f:e1:0e:b7:87:f9:97:e7:77: e2:91:13:bf:a1:1a:42:d4:65:be:07:8f:2e:3d:a0: 92:7d:ff:b8:47:f2:ab:32:aa:dd:8a:29:0d:83:6d: d4:d7:ea:df:d5:64:72:b9:2a:55:0c:df:06:d5:6c: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0D:D0:F0:98:01:2A:09:1B:91:84:0C:11:38:D0:F4:DE:E4:A3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18b4f7f4-f797-3a47-a035-51de45a60981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b9:53:11:71:dd:7c:73:b7:47:18:9f:84:be:a5:60:c8:74: 36:d2:b0:8a:b4:d2:64:8e:e1:3f:70:c8:e9:54:60:23:8c:f7: 58:39:83:c0:62:3c:8c:ae:68:4c:72:67:ee:9d:09:dc:1c:86: 72:67:90:45:d7:ea:39:70:1d:8f:ea:fe:3e:f5:f7:51:9d:54: a4:f4:1a:ba:e8:e4:0b:c4:d2:86:c8:25:b6:4a:8f:a4:1c:ea: 81:fe:a8:b8:32:b7:59:f7:6c:1c:4a:15:3f:7c:60:d6:88:06: 74:06:91:63:97:e7:3a:b9:48:b5:f2:7a:90:60:62:8c:59:e7: 01:de:5f:2b:83:44:a5:ea:54:4e:67:0a:15:59:97:5e:2b:6b: 96:f9:c2:3f:06:6d:c1:0f:5c:ec:78:78:23:97:c6:f5:70:15: bb:84:21:ed:9e:31:69:66:24:4f:6b:53:8f:4b:d8:55:65:1b: 2d:4c:07:59:53:04:e6:b4:9d:c4:70:6d:5b:ce:28:60:ab:86: 1f:ee:8d:1b:2a:e4:15:bc:65:0d:5e:8d:82:97:c5:c9:61:57: b2:bf:96:44:d9:d7:d8:a0:d6:0e:5d:dc:94:a3:06:3b:e5:0c: 93:63:e3:f2:da:42:97:22:0d:bd:2d:a9:54:93:e7:f9:56:57: 3c:2c:16:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN4Gm7cA2hHGasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MWRkZmZlMzQtYWM2NS00ZTdiLWJlN2QtYTU1YzFlOTAwMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2tpZfwM6siKnFlisEYKsw0D/ZDL+PiARp3 vnK+pWZNgIroCNxUsL5fQYNZc1Gf9wNXcYulyTO+GkWWIAzwMMGSZxY6Y6fvO0Nw CdKLlt8RMp1ne9buUEhtCaVppcpcoqBRIscBEx0etFzohLoKaDyyofeE8oum6HT5 NhLdFPbx2KFgIvSBjlQBgO0tT+x06PHvEn3OmKnaJb9cZ+WdUDUgZqQd0uMjVN93 uKK7n5P3j0w6GSWbrgx07u59V4bDlCo7mQAWnFZf4Q63h/mX53fikRO/oRpC1GW+ B48uPaCSff+4R/KrMqrdiikNg23U1+rf1WRyuSpVDN8G1Wyp/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4N0PCYASoJG5GEDBE40PTe5KMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMThiNGY3ZjQtZjc5Ny0z YTQ3LWEwMzUtNTFkZTQ1YTYwOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8NJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW5UxFx3Xxzt0cYn4S+pWDIdDbSsIq00mSO4T9wyOlUYCOM91g5g8Bi PIyuaExyZ+6dCdwchnJnkEXX6jlwHY/q/j7191GdVKT0Grro5AvE0obIJbZKj6Qc 6oH+qLgyt1n3bBxKFT98YNaIBnQGkWOX5zq5SLXyepBgYoxZ5wHeXyuDRKXqVE5n ChVZl14ra5b5wj8GbcEPXOx4eCOXxvVwFbuEIe2eMWlmJE9rU49L2FVlGy1MB1lT BOa0ncRwbVvOKGCrhh/ujRsq5BW8ZQ1ejYKXxclhV7K/lkTZ19ig1g5d3JSjBjvl DJNj4/LaQpciDb0tqVST5/lWVzwsFiI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:24 2025 by rpki-client