$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c565679-c19b-3caa-b4a3-c67a69986f09.roa File: 1c565679-c19b-3caa-b4a3-c67a69986f09.roa (raw, json) Hash identifier: /guacXXtTCc1s3e1o0z+0XZUVkKRKKuST0/SEEwge8A= Subject key identifier: 67:D2:0D:57:96:1F:34:18:39:FE:F9:E8:32:13:AA:41:B9:81:2B:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5CB4867F0282820F4660 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c565679-c19b-3caa-b4a3-c67a69986f09.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.56.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5c:b4:86:7f:02:82:82:0f:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=6cb5d4c2-fbf8-4199-b098-d845b4fb6ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:ff:b5:9d:4d:65:c0:6a:6b:cd:9d:61:e8: 20:75:17:ac:ed:cb:4f:7e:f5:09:6b:15:25:e8:0d: 13:8d:e7:3d:6e:66:c5:8c:ea:5f:67:f4:bc:5e:03: 19:5e:fd:b9:b5:e9:4d:af:cc:26:e3:5f:21:87:c8: ca:d0:62:4d:ad:7f:76:d4:d3:d4:63:d3:e2:98:3b: d7:e8:09:b6:4b:08:1c:a7:63:d5:62:7c:54:ec:8b: c0:84:89:91:27:91:cd:a4:49:c8:2c:5e:d5:b4:a7: c3:3d:73:75:27:eb:0f:da:43:cd:9d:80:33:40:4f: 40:81:e4:97:8c:7d:0b:87:9e:84:22:30:89:9f:99: 04:73:21:5d:34:85:47:df:b7:4d:56:93:44:d3:38: cf:18:c2:2d:db:25:ff:d1:be:82:3e:fb:a5:5a:23: 87:fe:56:1b:1e:3a:13:91:35:18:09:b8:4b:87:7c: ee:90:9a:e5:24:85:89:fc:d0:02:44:1c:46:41:62: 4b:7e:bd:b2:f5:4c:80:e7:cb:0d:25:17:9f:9e:e5: 76:0f:aa:50:67:5c:69:da:ae:46:5b:c6:23:fa:94: cb:de:a7:01:a0:1c:e1:42:88:41:7c:55:2b:4b:54: 25:75:22:8d:34:e4:08:e4:cc:66:a4:0e:41:f3:7e: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:0D:57:96:1F:34:18:39:FE:F9:E8:32:13:AA:41:B9:81:2B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c565679-c19b-3caa-b4a3-c67a69986f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:25:f7:5d:98:92:53:96:02:47:df:e5:06:a8:c8:63:23:86: 61:3f:d4:b9:f5:a5:a3:56:1a:3a:4a:68:ae:9f:a1:40:4d:69: 06:89:05:56:ea:17:27:a2:2f:68:7d:88:7a:7c:b4:22:4a:b7: 8e:7b:af:e4:47:e9:9a:94:49:23:ba:0d:5a:35:d5:b4:ed:d0: 43:a9:0f:04:26:23:4f:90:58:c0:07:da:a7:40:41:1c:df:de: f2:20:4b:62:e8:fa:53:ca:dc:22:3c:1f:78:3b:64:54:da:fe: 3d:f7:68:c0:2b:93:9f:fb:76:1c:2f:1c:13:f2:78:88:97:e0: 6c:63:c4:de:c2:41:8a:4d:25:a3:2a:4a:48:43:3a:64:b5:fa: 14:d1:5f:56:f5:6f:8a:62:30:7b:cf:a0:40:72:b7:ce:2e:43: d0:43:f5:db:17:10:3f:57:95:55:8e:2e:93:3b:61:16:54:50: 97:65:30:e2:1d:51:48:5c:bf:11:e3:36:28:97:33:95:f1:53: 57:5e:67:af:14:96:cf:b4:b2:77:c9:20:b2:26:fb:12:16:4f: 1c:a3:b3:b6:93:21:dc:44:80:cb:cd:36:b3:74:1c:1b:eb:4f: 6e:56:19:5f:86:43:fc:a8:be:30:99:dd:30:5c:85:15:68:79: 71:48:58:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1y0hn8CgoIPRmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk NmNiNWQ0YzItZmJmOC00MTk5LWIwOTgtZDg0NWI0ZmI2ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HX/tZ1NZcBqa82dYeggdRes7ctPfvUJaxUl 6A0Tjec9bmbFjOpfZ/S8XgMZXv25telNr8wm418hh8jK0GJNrX921NPUY9PimDvX 6Am2Swgcp2PVYnxU7IvAhImRJ5HNpEnILF7VtKfDPXN1J+sP2kPNnYAzQE9AgeSX jH0Lh56EIjCJn5kEcyFdNIVH37dNVpNE0zjPGMIt2yX/0b6CPvulWiOH/lYbHjoT kTUYCbhLh3zukJrlJIWJ/NACRBxGQWJLfr2y9UyA58sNJRefnuV2D6pQZ1xp2q5G W8Yj+pTL3qcBoBzhQohBfFUrS1QldSKNNOQI5MxmpA5B837q/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfSDVeWHzQYOf756DITqkG5gStHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWM1NjU2NzktYzE5Yi0z Y2FhLWI0YTMtYzY3YTY5OTg2ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzjiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQl912YklOWAkff5QaoyGMjhmE/1Ln1paNWGjpKaK6foUBNaQaJBVbq FyeiL2h9iHp8tCJKt457r+RH6ZqUSSO6DVo11bTt0EOpDwQmI0+QWMAH2qdAQRzf 3vIgS2Lo+lPK3CI8H3g7ZFTa/j33aMArk5/7dhwvHBPyeIiX4GxjxN7CQYpNJaMq SkhDOmS1+hTRX1b1b4piMHvPoEByt84uQ9BD9dsXED9XlVWOLpM7YRZUUJdlMOId UUhcvxHjNiiXM5XxU1deZ68Uls+0snfJILIm+xIWTxyjs7aTIdxEgMvNNrN0HBvr T25WGV+GQ/yovjCZ3TBchRVoeXFIWPA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:48 2025 by rpki-client