$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa File: 2ac27858-388a-3d35-be99-292c759ab34a.roa (raw, json) Hash identifier: XMQyfoIFpF81ZcVUgpPWG1xZ9qrgrratzfbH1Uzs+uk= Subject key identifier: D4:ED:13:0A:0B:A2:AE:39:97:23:0A:C2:D6:44:5F:51:59:01:D8:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584890760DEA87F16ED0E1D59180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.197.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0d:ea:87:f1:6e:d0:e1:d5:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=c7e17156-c360-4445-bd52-e5c030ec62e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:e2:1a:ca:ff:cb:97:86:0d:8a:ba:df:c5: 43:24:16:ee:2d:83:0c:4f:82:96:99:c3:6e:9e:ca: f7:96:26:ae:fb:b3:c8:36:71:d4:87:24:5c:60:13: 95:84:95:4b:e0:d4:01:21:18:a4:cf:35:54:43:c7: 38:87:76:50:4c:a3:d2:64:22:f3:c1:9f:ba:44:99: a8:b1:58:26:31:9c:27:2b:0b:2b:bd:39:9d:7c:5a: 6d:3a:32:8e:71:76:72:62:61:dd:50:13:d7:ca:37: a0:61:ee:21:f0:ed:a5:87:79:75:22:b2:62:3c:36: f8:f9:11:fb:be:54:84:65:0b:de:6e:77:73:93:e7: c4:cd:7f:5e:cd:2c:4d:4c:72:21:1e:de:c3:51:91: 4d:d2:6c:6a:23:5c:19:b6:d3:fb:fa:51:61:61:70: a2:89:46:41:27:c5:4d:ae:df:4a:9e:91:1f:6f:23: ee:38:d3:e0:9d:8a:c2:3a:f7:a1:4d:91:ea:e4:35: bc:1b:fd:5e:f5:74:e8:69:41:97:77:0d:ed:6b:19: 43:db:f2:a3:fd:07:9b:47:bb:4e:b6:8a:d9:cf:80: 2f:57:f5:4e:20:0b:0c:01:f0:d0:c1:cd:76:0b:93: 44:65:68:9c:9c:4e:ea:b3:1b:ff:26:37:7a:ad:93: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:ED:13:0A:0B:A2:AE:39:97:23:0A:C2:D6:44:5F:51:59:01:D8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cb:85:b1:25:e4:14:c2:ee:65:a5:c4:7d:f9:b0:62:93:2e: 7a:a9:fe:3d:38:94:03:b8:0c:1f:f1:fa:3b:08:53:27:e7:c2: f9:b8:e9:42:8f:77:a1:f7:84:1f:b7:cb:cf:ac:15:9f:79:ce: 3a:a9:9e:4b:dc:8e:32:e4:bb:09:2f:e4:70:bd:07:b8:2d:f9: c5:77:f2:d6:cd:cc:46:02:4b:2b:da:8f:da:98:64:f1:1f:a1: f5:97:6d:09:70:45:2c:0f:18:2c:10:ed:d3:28:7d:00:1d:0f: b1:5e:0d:1c:b4:87:5c:d6:eb:5f:bb:53:9b:85:90:47:20:66: 09:ea:ac:42:77:9c:4a:98:13:79:95:11:26:b3:4e:08:91:8b: a2:a4:45:87:58:44:e3:f2:1e:60:e3:d3:00:30:91:4d:7c:f8: 4e:f4:66:e5:24:ce:47:a8:af:ff:a8:bb:99:36:d3:75:4d:b2: 75:1d:7a:0b:da:54:5e:59:8c:5c:22:ce:01:a0:52:cc:1c:a8: 19:e4:d3:93:9f:d7:69:40:7e:c2:d3:6a:2d:48:4c:52:bb:31: 54:99:1b:fd:40:ca:4a:bb:e3:14:7a:07:63:db:7d:8c:1a:ad: 75:49:c0:48:a2:80:35:39:7b:4d:5e:7d:5f:55:82:62:70:d9: ba:3f:a9:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg3qh/Fu0OHVkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk YzdlMTcxNTYtYzM2MC00NDQ1LWJkNTItZTVjMDMwZWM2MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiADiGsr/y5eGDYq638VDJBbuLYMMT4KWmcNu nsr3liau+7PINnHUhyRcYBOVhJVL4NQBIRikzzVUQ8c4h3ZQTKPSZCLzwZ+6RJmo sVgmMZwnKwsrvTmdfFptOjKOcXZyYmHdUBPXyjegYe4h8O2lh3l1IrJiPDb4+RH7 vlSEZQvebndzk+fEzX9ezSxNTHIhHt7DUZFN0mxqI1wZttP7+lFhYXCiiUZBJ8VN rt9KnpEfbyPuONPgnYrCOvehTZHq5DW8G/1e9XToaUGXdw3taxlD2/Kj/QebR7tO torZz4AvV/VOIAsMAfDQwc12C5NEZWicnE7qsxv/Jjd6rZO79QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTtEwoLoq45lyMKwtZEX1FZAdgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFjMjc4NTgtMzg4YS0z ZDM1LWJlOTktMjkyYzc1OWFiMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHLhbEl5BTC7mWlxH35sGKTLnqp/j04lAO4DB/x+jsIUyfnwvm46UKP d6H3hB+3y8+sFZ95zjqpnkvcjjLkuwkv5HC9B7gt+cV38tbNzEYCSyvaj9qYZPEf ofWXbQlwRSwPGCwQ7dMofQAdD7FeDRy0h1zW61+7U5uFkEcgZgnqrEJ3nEqYE3mV ESazTgiRi6KkRYdYROPyHmDj0wAwkU18+E70ZuUkzkeor/+ou5k203VNsnUdegva VF5ZjFwizgGgUswcqBnk05Of12lAfsLTai1ITFK7MVSZG/1Aykq74xR6B2PbfYwa rXVJwEiigDU5e01efV9VgmJw2bo/qZI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:23 2025 by rpki-client