$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa File: 1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa (raw, json) Hash identifier: j9IYP2wAHxncT87Pq0gf3X2EyMzIahGj9SI1pqYfqqg= Subject key identifier: B3:E8:A1:E3:CB:EA:E3:DE:55:16:A2:EA:F0:51:52:B8:62:9F:79:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE86384E9561A956A3610B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.215.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:38:4e:95:61:a9:56:a3:61:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=55ab1e07-db8e-404f-a5e9-232ff1c4df1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:1a:d6:66:d8:e5:e4:cc:81:4c:8e:18:f4: 5c:aa:21:46:b5:10:d0:75:40:13:15:da:0d:c4:04: 26:19:16:03:1a:ff:dd:59:0e:a8:27:37:da:4e:ea: 0f:75:eb:47:43:ee:5d:db:bc:22:c5:e4:f1:c8:81: 9d:74:fb:10:69:d5:d7:b3:57:70:99:09:e2:96:8c: ae:c7:4f:4c:ef:24:da:c9:1d:a3:4b:03:aa:de:2b: f0:80:c6:67:e0:5b:bf:0f:42:c6:7c:61:ce:52:6a: e8:8d:e2:1e:60:ba:3d:ee:44:99:a4:67:4e:2e:56: 19:f5:16:f0:da:97:45:07:5a:c6:4f:f0:54:1f:a6: d0:c0:e2:09:5b:9e:02:3e:ac:d8:bc:2e:1a:3a:db: d3:35:ea:68:51:2d:10:7b:c5:6a:04:30:0f:7e:0a: 6b:d2:31:19:78:61:04:f0:fe:97:f2:37:7d:e8:69: 43:14:5c:3c:c7:04:a0:ad:5d:48:4f:85:84:00:bc: da:b2:e8:d1:16:08:3d:62:fd:7f:64:56:58:28:19: ff:58:1e:00:b4:11:0f:74:6f:8d:81:fb:be:e5:36: 54:a3:fb:a7:8a:e8:76:9d:a7:c0:00:b9:d4:be:1d: a0:98:7a:52:f4:8b:98:1a:7a:0c:83:76:fc:f1:35: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E8:A1:E3:CB:EA:E3:DE:55:16:A2:EA:F0:51:52:B8:62:9F:79:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d12df14-b2fd-3ea2-93a9-4ab07f163d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2a:e8:7d:a0:2e:b6:df:c8:bf:c1:b1:c5:c2:db:1d:7a:29: ee:a8:0d:22:c3:88:e1:d3:66:06:b4:14:81:0f:55:8a:f9:d3: 9a:51:ec:fc:57:3e:b5:a9:5f:1f:cd:d9:80:e2:e0:7d:27:00: 27:10:5c:81:e3:e5:dc:2c:b2:9f:75:87:04:26:4d:30:c3:0a: 48:96:07:1a:9b:9a:40:f0:a2:1d:29:5d:2e:ab:8a:a3:85:7f: 0a:f1:91:26:b2:db:51:20:ec:6c:ca:92:69:b2:18:c9:94:a0: 11:03:85:71:f2:7c:2c:45:04:9e:ae:f1:db:77:8d:a4:79:26: 3c:f2:c4:f3:73:e9:91:91:5c:e6:ab:e1:83:a2:46:86:c4:af: 91:60:5b:80:57:b4:98:a1:38:48:ac:4f:56:2f:9d:51:65:75: 6a:90:d3:b2:6f:e2:98:7d:1e:91:2d:04:58:34:9f:54:a3:5d: 9b:55:58:0f:45:ec:a7:b3:19:f0:81:65:b8:39:f8:02:c0:be: 4e:1e:53:65:d6:83:90:78:ae:5d:cb:a9:6a:70:84:0f:e7:39: 9f:89:13:ef:31:ae:ca:51:03:d6:84:64:0a:7a:55:27:04:9e: 71:2c:d6:71:92:25:d1:82:c6:e3:ab:87:2d:47:cc:62:73:1d: 59:5c:07:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjhOlWGpVqNhC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NTVhYjFlMDctZGI4ZS00MDRmLWE1ZTktMjMyZmYxYzRkZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVEa1mbY5eTMgUyOGPRcqiFGtRDQdUATFdoN xAQmGRYDGv/dWQ6oJzfaTuoPdetHQ+5d27wixeTxyIGddPsQadXXs1dwmQniloyu x09M7yTayR2jSwOq3ivwgMZn4Fu/D0LGfGHOUmrojeIeYLo97kSZpGdOLlYZ9Rbw 2pdFB1rGT/BUH6bQwOIJW54CPqzYvC4aOtvTNepoUS0Qe8VqBDAPfgpr0jEZeGEE 8P6X8jd96GlDFFw8xwSgrV1IT4WEALzasujRFgg9Yv1/ZFZYKBn/WB4AtBEPdG+N gfu+5TZUo/uniuh2nafAALnUvh2gmHpS9IuYGnoMg3b88TUJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPooePL6uPeVRai6vBRUrhin3lYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQxMmRmMTQtYjJmZC0z ZWEyLTkzYTktNGFiMDdmMTYzZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9dwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsq6H2gLrbfyL/BscXC2x16Ke6oDSLDiOHTZga0FIEPVYr505pR7PxX PrWpXx/N2YDi4H0nACcQXIHj5dwssp91hwQmTTDDCkiWBxqbmkDwoh0pXS6riqOF fwrxkSay21Eg7GzKkmmyGMmUoBEDhXHyfCxFBJ6u8dt3jaR5JjzyxPNz6ZGRXOar 4YOiRobEr5FgW4BXtJihOEisT1YvnVFldWqQ07Jv4ph9HpEtBFg0n1SjXZtVWA9F 7KezGfCBZbg5+ALAvk4eU2XWg5B4rl3LqWpwhA/nOZ+JE+8xrspRA9aEZAp6VScE nnEs1nGSJdGCxuOrhy1HzGJzHVlcB6I= -----END CERTIFICATE-----Generated at Sat Apr 5 14:14:17 2025 by rpki-client