$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2733e910-0f39-30b6-8f5b-dff7d69aa975.roa File: 2733e910-0f39-30b6-8f5b-dff7d69aa975.roa (raw, json) Hash identifier: ZzuJaZ9mod3ZNhmnFNhQ/HLkbbxE0EZ4wZaxPgjLa3A= Subject key identifier: C7:E3:6D:47:38:61:F4:45:4F:BE:EF:93:2C:75:D8:E2:67:98:A0:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DC7066DC3D8AADFC2FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2733e910-0f39-30b6-8f5b-dff7d69aa975.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.205.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:dc:70:66:dc:3d:8a:ad:fc:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=e8ca0a0c-b24e-4b3a-8c2e-3b07b26fb8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:73:bd:bb:44:8c:8f:0a:11:e7:e6:da:ba: a1:a6:03:85:c9:53:17:a5:39:7f:26:d4:23:c7:86: b6:b3:72:75:90:62:9d:d0:c3:71:3e:13:9e:74:e3: 45:f8:aa:5e:32:29:65:95:2f:77:e3:a1:d5:cb:73: e2:e6:a2:df:b9:cf:66:6d:2c:2b:7b:3e:d6:f8:28: b1:4c:7f:7d:76:98:66:9e:1b:5e:d4:ef:06:85:89: 60:a7:8a:94:7a:ac:9c:74:e2:96:3b:2a:5f:ff:5d: 22:1b:ab:5e:29:3b:bb:99:7f:e2:0f:6b:22:4f:9b: 82:35:5b:e9:24:94:2f:4e:e5:ce:28:1d:95:79:31: d5:b6:75:b3:c2:f6:82:43:ea:ab:10:a8:c6:f5:9c: 0b:17:e4:d2:bd:41:85:97:f3:93:e7:8d:3e:26:71: dc:12:df:0c:89:5b:a7:bf:f1:c0:ce:62:a4:a7:20: 2f:aa:7e:d6:34:de:4e:02:19:6e:56:9c:f8:6c:ca: 04:e9:61:39:5a:6f:36:be:af:85:9a:be:d1:bb:6c: f4:6d:41:12:5f:d6:d0:d5:41:b5:19:cc:f9:6f:d0: b7:85:72:d4:96:4e:1f:c7:fb:5d:29:1d:30:fd:a3: 15:d1:29:d6:03:07:61:c1:87:f4:c2:63:8e:cd:a1: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E3:6D:47:38:61:F4:45:4F:BE:EF:93:2C:75:D8:E2:67:98:A0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2733e910-0f39-30b6-8f5b-dff7d69aa975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:38:aa:26:a1:43:63:bf:f5:18:d1:64:cf:21:f7:f4:ac:b4: fb:db:15:20:56:84:54:d4:79:b6:13:4b:1e:72:54:74:8f:b8: e4:d0:fe:13:b6:5b:b0:55:6d:cc:a0:ff:e0:32:52:c8:82:6f: 98:80:94:6d:41:a2:ec:bf:b8:14:32:2f:ec:21:67:82:75:50: 8e:d0:fe:b5:df:36:47:20:15:d3:d2:b5:2c:a6:11:86:2c:fe: ac:64:e3:ff:58:d0:9a:af:7d:4a:13:09:db:f3:f4:55:66:49: 51:11:05:22:bc:46:dc:6a:aa:0e:15:40:19:27:fa:47:9a:8c: a5:c7:a6:6e:b6:76:3f:54:d0:cf:e6:0c:32:fc:cd:77:22:80: 93:85:ba:bf:1d:52:a8:a4:31:d5:bc:ff:6f:cc:ca:a1:47:30: f2:d7:6a:89:65:39:af:55:81:31:f7:cb:43:6a:46:55:f9:42: 10:91:52:fd:87:b4:b9:53:2b:16:ae:24:3d:c5:6e:61:3b:6d: 2e:6a:a8:71:07:61:d2:bb:d7:0a:c0:fa:2d:4d:a6:45:32:00: dc:ad:21:04:0a:33:81:5d:9e:a0:23:99:00:f8:35:13:e1:58: 97:72:cc:4c:0f:bb:fc:85:9f:ad:0d:f7:f7:79:be:4a:5a:c5: d8:51:7a:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NxwZtw9iq38L8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZThjYTBhMGMtYjI0ZS00YjNhLThjMmUtM2IwN2IyNmZiOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/9zvbtEjI8KEefm2rqhpgOFyVMXpTl/JtQj x4a2s3J1kGKd0MNxPhOedONF+KpeMilllS9346HVy3Pi5qLfuc9mbSwrez7W+Cix TH99dphmnhte1O8GhYlgp4qUeqycdOKWOypf/10iG6teKTu7mX/iD2siT5uCNVvp JJQvTuXOKB2VeTHVtnWzwvaCQ+qrEKjG9ZwLF+TSvUGFl/OT540+JnHcEt8MiVun v/HAzmKkpyAvqn7WNN5OAhluVpz4bMoE6WE5Wm82vq+Fmr7Ru2z0bUESX9bQ1UG1 Gcz5b9C3hXLUlk4fx/tdKR0w/aMV0SnWAwdhwYf0wmOOzaGjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfjbUc4YfRFT77vkyx12OJnmKB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjczM2U5MTAtMGYzOS0z MGI2LThmNWItZGZmN2Q2OWFhOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA4qiahQ2O/9RjRZM8h9/SstPvbFSBWhFTUebYTSx5yVHSPuOTQ/hO2 W7BVbcyg/+AyUsiCb5iAlG1Bouy/uBQyL+whZ4J1UI7Q/rXfNkcgFdPStSymEYYs /qxk4/9Y0JqvfUoTCdvz9FVmSVERBSK8Rtxqqg4VQBkn+keajKXHpm62dj9U0M/m DDL8zXcigJOFur8dUqikMdW8/2/MyqFHMPLXaollOa9VgTH3y0NqRlX5QhCRUv2H tLlTKxauJD3FbmE7bS5qqHEHYdK71wrA+i1NpkUyANytIQQKM4FdnqAjmQD4NRPh WJdyzEwPu/yFn60N9/d5vkpaxdhRepg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:42 2025 by rpki-client