$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2284a2ff-a865-3d99-bda9-1a23013d6589.roa File: 2284a2ff-a865-3d99-bda9-1a23013d6589.roa (raw, json) Hash identifier: SrCqdrm773YTbXU/cadd3qjBTnUVd147VporcUgIZ1Y= Subject key identifier: AF:77:58:DA:62:DB:F2:BE:AA:1A:77:3C:F9:06:33:6A:7A:3E:44:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DDAF4F3BE141AC921B10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2284a2ff-a865-3d99-bda9-1a23013d6589.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.195.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dd:af:4f:3b:e1:41:ac:92:1b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=af9cd902-3413-444d-bab1-91dc764643fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:30:f5:82:66:ef:e0:26:c3:40:e1:d1:0e: 78:b7:34:b8:27:ca:41:17:37:31:88:f3:0e:91:c9: 29:d0:ab:d5:cd:10:3d:e6:70:96:38:53:24:65:eb: 48:cd:47:21:1f:cc:40:97:47:cb:cd:6e:d4:f5:0e: fc:4e:95:d6:92:d2:7f:b3:2d:2b:ed:74:a7:5c:31: c0:60:93:e8:bf:95:4a:e5:5d:f4:73:da:2f:59:f2: bb:b5:cc:a9:d9:47:64:a9:4f:e1:31:36:f6:fa:81: 4a:83:4a:ff:66:bf:ae:a7:08:ff:a8:bd:91:65:6a: 06:88:44:78:8c:16:12:b9:e5:36:5d:88:33:62:cb: 03:ca:8b:8b:9b:12:e9:bd:eb:08:d0:9b:a6:ae:a2: b0:88:76:d6:44:2d:30:2b:61:ae:10:dd:bc:58:dc: 4b:8a:00:dd:a6:27:ce:f2:01:db:37:c9:b6:8f:56: a1:6c:56:90:0b:1d:f9:be:d9:86:4d:71:3b:5b:85: 92:b8:4a:55:60:1a:e2:4b:b6:0c:26:60:eb:f0:18: 76:5f:77:f2:54:89:69:01:13:a5:18:a9:57:25:84: 25:fd:d1:b3:f5:03:f7:3c:3e:f7:9a:98:10:8c:55: 4b:d2:9e:0d:ab:2b:0b:90:a9:8c:ef:6b:ac:89:25: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:77:58:DA:62:DB:F2:BE:AA:1A:77:3C:F9:06:33:6A:7A:3E:44:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2284a2ff-a865-3d99-bda9-1a23013d6589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:71:ee:8c:2a:61:e2:91:34:eb:80:dc:9b:dc:8e:8b:69:23: f8:1c:fc:64:7a:19:77:e6:b8:af:95:73:21:c5:ba:b6:dc:18: 51:db:4a:96:57:aa:ca:2d:70:37:47:98:d0:7c:fe:07:19:99: 65:d4:05:94:4f:30:6c:86:57:29:34:11:c3:3d:eb:82:8b:b6: f3:ed:c1:34:ba:10:de:1e:53:67:d5:df:85:76:c7:a5:34:e8: 06:41:22:53:f5:1f:b4:2d:06:10:bb:c0:a1:ee:11:2e:24:4c: 4d:84:27:e6:a0:5d:c0:61:dc:2e:ab:b6:38:7e:76:d7:61:fb: 09:31:2a:fe:21:ad:cb:2d:e6:54:a7:dc:07:74:a0:24:76:17: 0c:68:46:6a:cc:30:50:f7:66:62:7d:d4:8f:03:b3:84:dd:b6: 8c:37:28:42:61:db:69:11:ca:a4:19:ec:1a:8c:af:74:e0:e6: cb:67:ca:3e:9d:40:72:21:0e:2d:60:7f:bf:78:1e:67:40:38: ad:63:db:c4:61:6e:88:2e:9a:95:3e:e5:8a:e0:3c:59:19:b4: 4b:aa:96:67:9e:55:18:ed:57:46:94:c9:ff:94:30:e5:a0:d9: 00:fe:f3:58:71:64:68:59:d3:da:4b:cc:6d:9f:fe:f3:99:c4: 1c:be:bc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN2vTzvhQaySGxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YWY5Y2Q5MDItMzQxMy00NDRkLWJhYjEtOTFkYzc2NDY0M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp64w9YJm7+Amw0Dh0Q54tzS4J8pBFzcxiPMO kckp0KvVzRA95nCWOFMkZetIzUchH8xAl0fLzW7U9Q78TpXWktJ/sy0r7XSnXDHA YJPov5VK5V30c9ovWfK7tcyp2UdkqU/hMTb2+oFKg0r/Zr+upwj/qL2RZWoGiER4 jBYSueU2XYgzYssDyouLmxLpvesI0JumrqKwiHbWRC0wK2GuEN28WNxLigDdpifO 8gHbN8m2j1ahbFaQCx35vtmGTXE7W4WSuEpVYBriS7YMJmDr8Bh2X3fyVIlpAROl GKlXJYQl/dGz9QP3PD73mpgQjFVL0p4NqysLkKmM72usiSWp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK93WNpi2/K+qhp3PPkGM2p6PkQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI4NGEyZmYtYTg2NS0z ZDk5LWJkYTktMWEyMzAxM2Q2NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9x7owqYeKRNOuA3JvcjotpI/gc/GR6GXfmuK+VcyHFurbcGFHbSpZX qsotcDdHmNB8/gcZmWXUBZRPMGyGVyk0EcM964KLtvPtwTS6EN4eU2fV34V2x6U0 6AZBIlP1H7QtBhC7wKHuES4kTE2EJ+agXcBh3C6rtjh+dtdh+wkxKv4hrcst5lSn 3Ad0oCR2FwxoRmrMMFD3ZmJ91I8Ds4Tdtow3KEJh22kRyqQZ7BqMr3Tg5stnyj6d QHIhDi1gf794HmdAOK1j28RhbogumpU+5YrgPFkZtEuqlmeeVRjtV0aUyf+UMOWg 2QD+81hxZGhZ09pLzG2f/vOZxBy+vJA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:38 2025 by rpki-client