$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa File: 2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa (raw, json) Hash identifier: LFs5RAu0xSnkHFcvCGGyLcVyDtfDNlfdrobobakR7Jc= Subject key identifier: 5F:4A:D8:9E:09:8B:60:7C:77:E5:F2:71:6D:29:2C:5C:38:41:FA:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584890760CDC8BB38D5FBDB2A300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.192.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0c:dc:8b:b3:8d:5f:bd:b2:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=3f5ebbcb-33fe-42f3-bb40-02c6fe2a003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:1b:5d:ff:32:58:92:d1:9f:a5:85:41:ab: 65:e4:56:2d:03:05:78:65:1c:94:36:4c:b5:c6:c6: 0b:6c:d3:fa:d8:9e:e7:d0:40:58:14:4c:04:a2:d2: 40:41:61:ff:15:e2:29:ba:5f:ed:c4:46:ce:9d:c7: 12:e2:e3:84:7d:78:0c:9f:ff:87:0f:ce:e0:e2:37: 8f:29:b7:06:3f:96:13:b0:08:98:cc:8d:7d:f3:9e: ba:2c:85:da:bb:aa:a5:d4:ec:72:b5:8e:14:f3:25: 40:d7:14:1d:65:f8:54:a0:fd:95:c8:3b:1e:25:1d: be:e7:fc:4b:81:06:49:96:28:34:e2:e3:47:78:15: 97:45:a8:e0:45:da:44:8b:7c:11:ca:c5:16:74:da: 6b:e3:88:2c:59:d4:47:0c:8a:91:57:ca:10:dc:53: 84:c9:31:18:9d:e8:99:b7:90:ce:69:fe:33:7d:5e: 19:2c:52:70:b7:1c:be:42:6e:d8:72:2b:59:7e:e7: 76:1a:cc:c5:0e:71:64:50:9a:a5:0c:c9:48:9e:5a: 0e:6f:05:e3:c9:2c:04:69:87:3c:70:fa:8a:0e:0e: 8d:d0:f9:f6:54:03:35:fc:e8:10:a3:19:6b:b1:8c: 28:80:2b:52:9b:8f:9b:55:60:e1:cc:c8:8a:bc:26: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:D8:9E:09:8B:60:7C:77:E5:F2:71:6D:29:2C:5C:38:41:FA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:14:1f:b4:4d:94:53:ad:45:0b:ee:0e:32:39:67:b6:13:0b: 61:c2:f2:84:0c:ea:bd:32:59:1c:31:c4:ee:3c:25:f4:f9:03: f9:4a:36:d6:04:1c:eb:db:78:e8:e6:b8:e9:6c:2e:42:99:4b: 53:6d:52:be:2b:5d:16:99:df:15:ae:34:dd:a4:a2:43:bb:2e: 70:c7:7e:55:ee:42:5b:3c:65:7e:8d:90:4e:6c:a6:e5:01:f8: 69:fa:4e:1c:64:8f:27:d5:7d:d6:97:a0:8b:7c:0f:57:69:64: 98:d5:09:7d:43:3d:6e:45:89:80:7b:be:a1:f9:a5:87:62:35: ae:00:e3:4e:a8:ec:2b:16:81:53:bd:9b:cd:fb:f4:29:ba:81: e9:3d:76:f1:2e:b5:f3:42:5c:b3:c1:25:07:e5:a2:d1:20:ce: 6a:54:80:f8:f4:1c:31:7c:8f:57:ca:86:bf:0b:08:b0:63:16: 92:62:71:71:33:9a:0b:37:23:f4:33:f1:76:62:e5:20:9f:7a: a4:aa:4f:8c:37:32:05:5e:f7:55:f9:06:3d:6f:c3:de:74:81: d4:4d:58:56:86:72:2c:36:7c:b4:e9:aa:5a:ac:e1:b7:4f:08: e6:c5:4f:07:d0:9c:06:ba:2b:ae:80:d9:5f:c2:17:0a:11:f2: ad:cc:d1:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgzci7ONX72yowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk M2Y1ZWJiY2ItMzNmZS00MmYzLWJiNDAtMDJjNmZlMmEwMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmIbXf8yWJLRn6WFQatl5FYtAwV4ZRyUNky1 xsYLbNP62J7n0EBYFEwEotJAQWH/FeIpul/txEbOnccS4uOEfXgMn/+HD87g4jeP KbcGP5YTsAiYzI198566LIXau6ql1OxytY4U8yVA1xQdZfhUoP2VyDseJR2+5/xL gQZJlig04uNHeBWXRajgRdpEi3wRysUWdNpr44gsWdRHDIqRV8oQ3FOEyTEYneiZ t5DOaf4zfV4ZLFJwtxy+Qm7YcitZfud2GszFDnFkUJqlDMlInloObwXjySwEaYc8 cPqKDg6N0Pn2VAM1/OgQoxlrsYwogCtSm4+bVWDhzMiKvCb3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9K2J4Ji2B8d+XycW0pLFw4QfobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUxYjllZjQtNGNlMC0z NWMwLWI0NzktZjVmODUxNTBlNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQUH7RNlFOtRQvuDjI5Z7YTC2HC8oQM6r0yWRwxxO48JfT5A/lKNtYE HOvbeOjmuOlsLkKZS1NtUr4rXRaZ3xWuNN2kokO7LnDHflXuQls8ZX6NkE5spuUB +Gn6ThxkjyfVfdaXoIt8D1dpZJjVCX1DPW5FiYB7vqH5pYdiNa4A406o7CsWgVO9 m8379Cm6gek9dvEutfNCXLPBJQflotEgzmpUgPj0HDF8j1fKhr8LCLBjFpJicXEz mgs3I/Qz8XZi5SCfeqSqT4w3MgVe91X5Bj1vw950gdRNWFaGciw2fLTpqlqs4bdP CObFTwfQnAa6K66A2V/CFwoR8q3M0fI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:37 2025 by rpki-client