$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c271a42-bc72-3976-8f1b-4b8fd1b7b175.roa File: 1c271a42-bc72-3976-8f1b-4b8fd1b7b175.roa (raw, json) Hash identifier: NREi69Sv72u1gtv6OTY/A6sjf5Au4HnZbGT4FjRgxgA= Subject key identifier: 42:E6:B7:81:60:E3:61:12:23:63:C7:47:F9:92:52:63:5F:C9:1A:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6C9D3B7F8D6F249C4380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c271a42-bc72-3976-8f1b-4b8fd1b7b175.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.199.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6c:9d:3b:7f:8d:6f:24:9c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=04a1826a-fdd9-4d8e-8229-9e16f2dc4ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0b:be:30:87:17:a2:71:da:a7:8a:38:c2:99: 4a:7c:54:58:ff:7d:fc:1a:ad:3b:d9:3c:77:65:a1: 29:ae:11:80:fb:78:31:79:25:9a:39:7c:74:e1:61: 75:56:53:e0:2a:2c:25:a3:c3:da:29:ac:f4:8b:ee: 85:db:04:89:cf:3b:96:a8:42:c9:3d:43:89:95:f1: 78:a0:40:0e:8b:d5:89:3f:01:30:84:5f:b3:3f:36: 1f:b0:0e:72:1e:05:58:96:fb:53:96:9d:a6:3a:f3: 42:2f:48:8f:ef:8e:8e:87:ba:38:e8:cb:5f:bf:eb: 37:c5:ae:a6:33:18:6c:9f:5a:4e:88:18:b5:f0:b5: e8:a9:02:80:13:51:61:bf:ec:e1:fb:0c:6f:1d:d0: b8:e7:f0:c9:1b:34:da:1c:1c:1a:61:7e:e7:e4:92: ef:24:0f:c8:da:b6:ac:6f:44:ab:5a:f6:59:2a:6e: ed:39:00:81:48:c7:65:e6:08:bc:8c:16:91:f8:bd: c1:b4:8a:0e:af:8b:44:98:c2:a2:43:11:d1:1e:bc: 06:83:04:b3:06:f8:18:ff:65:3e:df:37:45:8a:51: e6:44:4d:fc:be:75:6e:e2:0e:c0:5a:04:c1:54:6e: db:40:c7:dd:69:6d:db:e9:75:65:6e:f8:30:73:0e: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:B7:81:60:E3:61:12:23:63:C7:47:F9:92:52:63:5F:C9:1A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c271a42-bc72-3976-8f1b-4b8fd1b7b175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:32:fa:f6:f3:ec:c5:95:ec:6a:dc:d0:3f:7e:6b:f1:ee:f0: a6:6b:7f:c3:2f:0a:ab:5c:1f:72:51:9e:39:3e:27:25:18:c1: 49:ae:e0:70:12:44:d4:92:e6:43:81:ba:df:ac:31:9a:0d:cb: 69:4d:15:be:a5:ee:96:c6:04:cc:0f:f1:ae:7e:2a:eb:8b:49: 75:84:40:05:d0:1f:45:0f:43:04:2f:c6:a8:ae:e4:65:17:85: f5:92:8f:90:db:c3:35:49:5d:a2:87:99:a3:58:d4:7b:4d:71: 02:b7:28:b9:b2:6d:8d:d0:2a:76:5a:f6:f5:4a:ad:d5:d3:a9: d7:01:99:bc:fa:f3:c0:4b:5d:f5:32:dd:f8:98:d6:23:67:95: 4b:ef:7b:1b:bf:a8:5e:83:4b:01:6a:59:81:c1:18:2d:67:b0: 8a:fe:bc:36:04:43:81:63:7b:d4:22:19:fb:fc:24:58:5f:a8: 6b:72:7e:31:2b:ec:b5:fb:20:6e:8b:ed:38:62:97:55:f2:96: 95:20:ee:3a:d9:ba:11:a7:79:93:4c:41:34:5b:da:ff:8e:d1: 76:65:c4:6f:0a:f4:6e:8e:a3:c7:67:2c:b0:c2:a8:0a:fa:d9: c1:30:f7:76:25:74:79:33:66:3d:10:44:57:c3:f9:90:01:c3: a3:55:04:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2ydO3+NbyScQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk MDRhMTgyNmEtZmRkOS00ZDhlLTgyMjktOWUxNmYyZGM0ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQu+MIcXonHap4o4wplKfFRY/338Gq072Tx3 ZaEprhGA+3gxeSWaOXx04WF1VlPgKiwlo8PaKaz0i+6F2wSJzzuWqELJPUOJlfF4 oEAOi9WJPwEwhF+zPzYfsA5yHgVYlvtTlp2mOvNCL0iP746Oh7o46Mtfv+s3xa6m Mxhsn1pOiBi18LXoqQKAE1Fhv+zh+wxvHdC45/DJGzTaHBwaYX7n5JLvJA/I2ras b0SrWvZZKm7tOQCBSMdl5gi8jBaR+L3BtIoOr4tEmMKiQxHRHrwGgwSzBvgY/2U+ 3zdFilHmRE38vnVu4g7AWgTBVG7bQMfdaW3b6XVlbvgwcw7fRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELmt4Fg42ESI2PHR/mSUmNfyRr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWMyNzFhNDItYmM3Mi0z OTc2LThmMWItNGI4ZmQxYjdiMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8c+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgy+vbz7MWV7Grc0D9+a/Hu8KZrf8MvCqtcH3JRnjk+JyUYwUmu4HAS RNSS5kOBut+sMZoNy2lNFb6l7pbGBMwP8a5+KuuLSXWEQAXQH0UPQwQvxqiu5GUX hfWSj5DbwzVJXaKHmaNY1HtNcQK3KLmybY3QKnZa9vVKrdXTqdcBmbz688BLXfUy 3fiY1iNnlUvvexu/qF6DSwFqWYHBGC1nsIr+vDYEQ4Fje9QiGfv8JFhfqGtyfjEr 7LX7IG6L7Thil1XylpUg7jrZuhGneZNMQTRb2v+O0XZlxG8K9G6Oo8dnLLDCqAr6 2cEw93YldHkzZj0QRFfD+ZABw6NVBG0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:39 2025 by rpki-client