$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2851886f-cac6-34bd-8e75-56d47090f207.roa File: 2851886f-cac6-34bd-8e75-56d47090f207.roa (raw, json) Hash identifier: jIqo60DFsJ/7hqszwdZsf2B9NW0vjQ1QgIat5XvMkN4= Subject key identifier: C1:CC:69:4A:07:00:F6:83:DA:19:0F:CE:7B:AC:F6:EA:92:0A:5B:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830C83709721CA925732980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2851886f-cac6-34bd-8e75-56d47090f207.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.201.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c8:37:09:72:1c:a9:25:73:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=6b786420-72f9-4cc8-a2ea-458a5cef9eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:85:0e:0a:eb:16:a8:ab:06:53:77:83:85: c9:33:2a:a1:cc:1c:86:78:ea:34:61:dd:71:89:e0: 40:11:c3:fb:db:ad:7b:69:c2:c4:4e:83:5a:bd:ff: 87:dd:b8:be:a9:fe:5a:15:7a:45:7a:da:4f:15:8a: 6e:cb:5d:a5:e2:52:9f:dc:3f:80:82:03:24:05:49: 06:18:ae:a4:13:63:59:3b:be:cf:61:47:8d:7b:ed: 7a:3c:57:14:ef:64:15:cd:3c:6b:77:11:da:89:a7: 15:cc:23:ab:fb:65:60:cd:a5:92:85:4a:48:6b:9d: 43:5e:f0:4b:e5:f6:60:20:12:0e:7a:3f:dd:70:ed: 30:c2:5f:32:ca:cc:76:a0:b5:3f:05:1a:73:84:f0: f5:19:f8:a4:1c:f4:ee:38:3d:c8:61:2d:95:95:52: 1d:db:ce:39:99:42:c4:f4:45:2c:d3:5d:ae:1c:ba: 90:fd:18:3d:32:ed:b2:29:91:f0:09:83:41:7d:69: 61:0a:58:39:99:c0:80:9e:4e:02:13:4c:3e:b7:4d: 60:e0:42:24:f3:64:ef:c7:06:3c:d4:89:45:10:49: 11:bb:58:32:34:3a:55:42:78:c8:9e:b0:bb:e5:eb: 21:cd:0d:48:d5:24:5a:dd:4b:78:27:21:f6:b7:14: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CC:69:4A:07:00:F6:83:DA:19:0F:CE:7B:AC:F6:EA:92:0A:5B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2851886f-cac6-34bd-8e75-56d47090f207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7a:0b:a3:73:d2:68:d3:a2:a3:7c:79:5f:53:04:7d:d8:7f: 1e:a4:cb:3c:d1:32:a4:e1:ce:18:94:47:f5:9c:1e:68:11:6c: c1:50:8d:eb:63:fa:27:97:2c:55:ea:3c:d5:32:72:5b:30:04: 30:9a:93:9a:ba:f6:f1:b9:58:b3:00:be:e5:1e:67:e0:68:ae: 0e:8c:20:d3:e5:17:67:a4:3d:43:3d:7a:0a:7d:9e:fb:1a:01: 12:5c:c8:1d:e2:5b:77:16:ee:15:51:81:b4:e1:93:f8:5b:8f: 95:9d:a1:0e:76:7f:b0:5c:90:1c:75:30:30:b4:8b:ab:74:a9: 9b:35:b8:42:31:14:82:a4:3c:2a:9a:f2:bf:04:de:5d:06:b5: ed:df:86:f7:2f:e3:25:6c:61:a6:2d:ff:6c:22:46:79:5f:31: 60:e9:ee:8d:a3:6a:b8:46:ef:9f:9a:3f:eb:08:99:c9:2b:21: 86:34:ab:a6:15:3b:a7:fe:0c:20:8f:93:2b:02:4b:d6:27:0e: 6a:51:e4:90:0f:af:f8:41:44:15:2a:13:6e:1f:0a:59:62:7d: 6c:7d:0f:0f:5a:c9:81:af:06:21:42:dd:79:dd:2c:8d:08:6d: c1:48:6f:bc:3d:99:66:6f:1f:43:5f:9e:e0:fd:76:ae:38:23: 0b:ca:88:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMg3CXIcqSVzKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NmI3ODY0MjAtNzJmOS00Y2M4LWEyZWEtNDU4YTVjZWY5ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig6FDgrrFqirBlN3g4XJMyqhzByGeOo0Yd1x ieBAEcP72617acLEToNavf+H3bi+qf5aFXpFetpPFYpuy12l4lKf3D+AggMkBUkG GK6kE2NZO77PYUeNe+16PFcU72QVzTxrdxHaiacVzCOr+2VgzaWShUpIa51DXvBL 5fZgIBIOej/dcO0wwl8yysx2oLU/BRpzhPD1GfikHPTuOD3IYS2VlVId2845mULE 9EUs012uHLqQ/Rg9Mu2yKZHwCYNBfWlhClg5mcCAnk4CE0w+t01g4EIk82TvxwY8 1IlFEEkRu1gyNDpVQnjInrC75eshzQ1I1SRa3Ut4JyH2txQf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHMaUoHAPaD2hkPznus9uqSClsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1MTg4NmYtY2FjNi0z NGJkLThlNzUtNTZkNDcwOTBmMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl6C6Nz0mjToqN8eV9TBH3Yfx6kyzzRMqThzhiUR/WcHmgRbMFQjetj +ieXLFXqPNUyclswBDCak5q69vG5WLMAvuUeZ+Borg6MINPlF2ekPUM9egp9nvsa ARJcyB3iW3cW7hVRgbThk/hbj5WdoQ52f7BckBx1MDC0i6t0qZs1uEIxFIKkPCqa 8r8E3l0Gte3fhvcv4yVsYaYt/2wiRnlfMWDp7o2jarhG75+aP+sImckrIYY0q6YV O6f+DCCPkysCS9YnDmpR5JAPr/hBRBUqE24fCllifWx9Dw9ayYGvBiFC3XndLI0I bcFIb7w9mWZvH0NfnuD9dq44IwvKiMs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:22 2025 by rpki-client