$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d61793f-84ee-3348-a534-8e65c1a21f20.roa File: 1d61793f-84ee-3348-a534-8e65c1a21f20.roa (raw, json) Hash identifier: RU6PibZe9TVbE8hIg741aLkXH8iybnu1moP4F4oKotM= Subject key identifier: EF:A5:61:7C:98:49:67:06:8D:9E:A2:61:9C:D7:D5:04:EE:AF:EB:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB88BA8ED42ED75AC39B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d61793f-84ee-3348-a534-8e65c1a21f20.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.209.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:88:ba:8e:d4:2e:d7:5a:c3:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=c94fd303-e91a-45bc-a212-1281a0ba0707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b6:ae:67:59:1b:e5:53:1e:2b:9e:57:4e:ed: c2:50:eb:93:ee:56:65:05:b5:ab:86:0b:37:95:1e: 00:79:c1:b1:2f:53:7d:f6:c0:6e:ad:89:88:41:be: bb:7b:ec:6f:53:d9:3d:34:6d:20:0c:5b:59:10:33: 5a:cb:ee:5f:75:d5:73:72:de:77:c7:ac:13:85:a2: d8:c9:e4:2e:01:9e:a6:42:2b:3b:aa:d6:12:24:dc: c2:ac:d8:df:69:f4:b7:e6:d4:83:f5:58:24:cf:84: a3:49:07:e4:f1:ce:bb:9b:23:ad:8d:01:a3:35:bf: 67:0b:ef:27:c4:32:5b:50:9e:73:32:67:3c:00:4d: 2c:89:ac:57:2d:d3:88:7d:d7:d0:58:bd:f2:51:e6: 89:f4:ae:1d:38:63:41:45:32:fa:35:8d:78:74:f8: 3b:1f:01:a4:4e:16:5a:23:b4:5d:78:92:70:16:8f: f2:20:ba:ab:be:3a:04:34:90:28:b9:c3:40:74:30: 51:f8:73:58:61:ac:84:3d:8e:56:5d:de:10:8c:88: 11:9d:4e:b0:d6:86:63:2b:21:5b:41:6a:28:09:b3: 1d:0c:46:6a:44:7b:44:bd:88:67:b6:33:62:23:4a: 81:ba:0a:f5:06:b2:95:d9:00:4b:d2:39:ef:c7:b7: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A5:61:7C:98:49:67:06:8D:9E:A2:61:9C:D7:D5:04:EE:AF:EB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d61793f-84ee-3348-a534-8e65c1a21f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:04:5b:41:d0:64:16:e4:cb:98:e8:6f:4f:1e:f0:fd:2f:c2: d8:38:d4:af:42:4e:29:4d:2d:29:00:57:02:3a:cc:9d:ab:02: 3d:92:9e:7a:60:4f:44:b8:9d:bd:d4:4b:e7:7e:92:ad:20:a2: e3:b4:9f:0f:ff:8c:ed:13:ed:42:fd:a2:88:5c:d8:1a:ca:05: 33:49:8b:58:8b:15:c5:ec:3c:9f:de:eb:97:b3:b6:9f:2f:bd: c5:86:ec:db:aa:c2:5f:d2:c5:6d:ac:75:c5:00:70:8d:c5:26: d1:81:39:25:42:7e:be:91:1d:84:52:0a:bd:18:51:b1:d6:dd: bd:c5:3c:4a:57:6a:c7:5b:a2:5d:05:2b:05:34:6d:15:30:ed: da:a4:3d:4a:ac:b7:a9:08:c9:c6:ec:6e:6d:d2:fd:15:55:2b: bd:f1:80:93:79:00:39:80:dd:f9:27:2e:58:76:b4:be:08:37: ce:c1:c1:82:20:f7:62:77:1f:f8:73:d3:70:9a:b7:f8:be:1e: 6c:ed:82:02:15:68:ab:90:d8:eb:28:2e:bf:00:55:c7:12:ca: 3b:e2:af:82:7e:fd:aa:83:38:9b:5a:6f:e2:51:9d:23:25:6d: 35:23:37:3b:7c:bf:ba:61:0e:56:7a:a4:bf:5e:7c:36:59:18: 5a:22:43:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4i6jtQu11rDm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk Yzk0ZmQzMDMtZTkxYS00NWJjLWEyMTItMTI4MWEwYmEwNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLauZ1kb5VMeK55XTu3CUOuT7lZlBbWrhgs3 lR4AecGxL1N99sBurYmIQb67e+xvU9k9NG0gDFtZEDNay+5fddVzct53x6wThaLY yeQuAZ6mQis7qtYSJNzCrNjfafS35tSD9Vgkz4SjSQfk8c67myOtjQGjNb9nC+8n xDJbUJ5zMmc8AE0siaxXLdOIfdfQWL3yUeaJ9K4dOGNBRTL6NY14dPg7HwGkThZa I7RdeJJwFo/yILqrvjoENJAoucNAdDBR+HNYYayEPY5WXd4QjIgRnU6w1oZjKyFb QWooCbMdDEZqRHtEvYhntjNiI0qBugr1BrKV2QBL0jnvx7dKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+lYXyYSWcGjZ6iYZzX1QTur+tzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQ2MTc5M2YtODRlZS0z MzQ4LWE1MzQtOGU2NWMxYTIxZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9EvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkEW0HQZBbky5job08e8P0vwtg41K9CTilNLSkAVwI6zJ2rAj2Snnpg T0S4nb3US+d+kq0gouO0nw//jO0T7UL9oohc2BrKBTNJi1iLFcXsPJ/e65eztp8v vcWG7Nuqwl/SxW2sdcUAcI3FJtGBOSVCfr6RHYRSCr0YUbHW3b3FPEpXasdbol0F KwU0bRUw7dqkPUqst6kIycbsbm3S/RVVK73xgJN5ADmA3fknLlh2tL4IN87BwYIg 92J3H/hz03Cat/i+HmztggIVaKuQ2OsoLr8AVccSyjvir4J+/aqDOJtab+JRnSMl bTUjNzt8v7phDlZ6pL9efDZZGFoiQ6o= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:53 2025 by rpki-client