$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad6a609-7568-3420-b836-3b26e5c16150.roa File: 1ad6a609-7568-3420-b836-3b26e5c16150.roa (raw, json) Hash identifier: 4D5kJ0W/8cYOWW1W8768Wl1dKq0XrGNSiMYBrPaQX+E= Subject key identifier: 44:2E:0D:BE:39:85:55:B4:05:DD:53:0F:92:20:11:49:AC:55:38:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584898D61CDD5F00DD5535E00380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad6a609-7568-3420-b836-3b26e5c16150.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.192.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1c:dd:5f:00:dd:55:35:e0:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=4d14a7e3-3bd8-4aca-afaf-dc23abe50fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:8c:41:ec:36:e3:83:ac:78:3f:d5:27:00: db:65:5d:f0:96:b9:d5:7b:76:5d:da:0b:61:5f:9c: f7:25:b3:9c:8d:65:98:ca:30:16:af:34:7a:78:e1: 9e:9b:d0:cc:9c:2f:66:3e:77:14:dd:55:92:78:76: 05:2e:c1:37:7e:29:71:5b:62:69:3f:72:dc:d6:49: 0f:d2:ac:31:d6:07:7f:8b:91:de:f3:e7:29:87:b7: e1:d5:d8:ca:e4:75:74:2e:16:82:b6:66:54:c1:be: 4c:ee:55:8d:6c:f4:69:89:76:44:30:f6:d0:db:43: 3b:be:b0:02:7f:ae:1d:9c:d1:1c:c1:95:79:40:26: cc:8a:db:e2:d9:73:af:af:5b:c3:db:8b:55:bc:a0: 86:21:95:27:d9:72:c2:09:03:35:5a:a7:3a:0c:3f: a8:10:20:09:94:f6:38:09:1d:0f:68:d0:25:0e:ec: ca:b2:33:af:27:f8:35:f6:3e:e6:38:78:eb:3f:d3: 2e:ed:28:5f:82:5f:e3:59:56:29:54:88:52:85:8b: 6e:11:60:60:d5:71:d0:e6:9c:6a:01:74:77:4e:aa: a9:e0:8d:7c:2f:6e:20:c2:d4:80:f4:84:6f:48:d7: 92:02:72:88:37:9b:d1:10:cd:5e:69:36:6b:92:1e: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2E:0D:BE:39:85:55:B4:05:DD:53:0F:92:20:11:49:AC:55:38:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ad6a609-7568-3420-b836-3b26e5c16150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:26:47:9a:18:71:71:0d:d3:a3:22:c7:f4:ae:be:5f:a0:17: 53:a5:d1:71:f6:26:9c:b2:e0:a7:45:11:63:43:a8:6e:ae:fc: eb:7e:54:4e:fa:b6:83:bd:8f:46:28:21:0a:f2:95:be:39:9a: ec:b0:8d:2f:85:00:df:48:64:98:f9:3d:09:55:c1:af:8a:5b: b9:7d:b9:e6:f5:58:0f:44:87:4a:65:71:ed:8b:6b:66:a2:0d: a5:bd:9e:63:85:c5:2f:04:6f:43:8a:a5:a3:5c:34:a4:48:d5: 35:01:4f:19:cb:f4:bf:2b:30:01:bf:a5:ee:c0:4e:05:46:b8: 01:28:03:55:30:1b:5f:0a:5b:8f:6c:c2:54:8c:32:a5:ac:9e: ac:e7:aa:c1:ce:5a:09:08:e7:08:3d:43:a0:d8:ba:f6:4c:7f: bb:e8:7f:6e:af:fb:b5:87:aa:70:e6:c5:e2:bd:50:6c:47:45: b0:01:5f:e9:cc:36:ee:28:af:53:94:24:bd:97:47:2b:b9:66: c5:3c:d2:3f:37:c3:22:dd:df:8f:30:f9:11:63:97:f0:ee:54: c2:cb:d9:77:5e:b7:c2:50:2d:81:6d:ee:5c:e3:eb:ce:28:9c: 2f:27:39:b8:bc:ba:ba:65:60:56:d2:32:da:87:8f:8d:00:8d: 1a:41:d7:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1hzdXwDdVTXgA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NGQxNGE3ZTMtM2JkOC00YWNhLWFmYWYtZGMyM2FiZTUwZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuyMQew244OseD/VJwDbZV3wlrnVe3Zd2gth X5z3JbOcjWWYyjAWrzR6eOGem9DMnC9mPncU3VWSeHYFLsE3filxW2JpP3Lc1kkP 0qwx1gd/i5He8+cph7fh1djK5HV0LhaCtmZUwb5M7lWNbPRpiXZEMPbQ20M7vrAC f64dnNEcwZV5QCbMitvi2XOvr1vD24tVvKCGIZUn2XLCCQM1Wqc6DD+oECAJlPY4 CR0PaNAlDuzKsjOvJ/g19j7mOHjrP9Mu7Shfgl/jWVYpVIhShYtuEWBg1XHQ5pxq AXR3Tqqp4I18L24gwtSA9IRvSNeSAnKIN5vREM1eaTZrkh5sPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQuDb45hVW0Bd1TD5IgEUmsVTg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFkNmE2MDktNzU2OC0z NDIwLWI4MzYtM2IyNmU1YzE2MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8C/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgmR5oYcXEN06Mix/Suvl+gF1Ol0XH2Jpyy4KdFEWNDqG6u/Ot+VE76 toO9j0YoIQrylb45muywjS+FAN9IZJj5PQlVwa+KW7l9ueb1WA9Eh0plce2La2ai DaW9nmOFxS8Eb0OKpaNcNKRI1TUBTxnL9L8rMAG/pe7ATgVGuAEoA1UwG18KW49s wlSMMqWsnqznqsHOWgkI5wg9Q6DYuvZMf7vof26v+7WHqnDmxeK9UGxHRbABX+nM Nu4or1OUJL2XRyu5ZsU80j83wyLd348w+RFjl/DuVMLL2Xdet8JQLYFt7lzj684o nC8nObi8urplYFbSMtqHj40AjRpB1zw= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:18 2025 by rpki-client