$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa File: 33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa (raw, json) Hash identifier: 2lQPSZkSmOvolIqceeuJfnfBEjoNcYIVHUascHyHXQA= Subject key identifier: 65:52:DB:90:22:68:04:7D:D8:C4:C3:F6:02:3F:D2:06:23:ED:D8:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DDCDACF86CFF6E74C160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 23693 IP address blocks: 23.195.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dd:cd:ac:f8:6c:ff:6e:74:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=18d6767a-a4c6-4954-bfe3-b583db2cf372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:59:fc:4a:f3:d8:e1:7c:2d:e3:e7:5c:6d: af:89:51:69:41:03:8f:f9:a5:6f:d2:6c:c5:e9:aa: da:cd:53:34:2a:0a:c1:d4:ea:7e:6b:2a:da:cd:2a: 04:99:ce:39:a8:80:62:ea:e1:04:9f:38:1f:20:99: 7b:9e:96:e2:d2:b3:14:c8:57:9d:6d:87:2d:8b:1c: 60:73:b8:43:4e:39:df:aa:e2:ff:4b:cc:13:d0:f3: 75:89:32:de:a5:be:fc:60:b5:58:af:53:ff:c3:b5: 2a:6a:9b:b6:4b:0d:40:8e:59:bc:2c:a3:9b:64:0f: 18:fd:a1:d5:9d:5d:ce:d2:3f:38:a7:40:63:79:8c: 06:64:53:c5:7f:f1:e3:40:3f:42:94:23:63:5f:b4: 4f:f8:23:9a:55:46:96:09:7d:34:33:1b:7f:e6:46: c1:4d:42:44:2b:68:66:1a:83:20:1a:22:be:85:c5: b4:7f:dc:71:e2:25:ac:a1:3c:be:d1:ea:68:ed:a3: 47:06:4f:6e:0f:70:8e:c4:01:0b:90:29:18:f3:eb: 3a:de:3c:20:a0:c7:f1:72:c4:fb:db:1e:1b:db:a3: 40:5d:28:09:aa:d4:9c:22:3f:56:cc:69:3d:7b:8c: 20:38:5f:af:ce:67:7b:f0:09:ff:da:d3:95:dc:1e: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:52:DB:90:22:68:04:7D:D8:C4:C3:F6:02:3F:D2:06:23:ED:D8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ef:49:a7:95:5e:08:00:d8:05:03:65:2a:3b:51:62:a6:11: 1a:71:d6:d3:5e:92:fe:d9:df:36:9e:90:62:9b:b9:9f:1b:8e: 46:31:60:d3:07:b5:cb:8d:cc:6e:c8:54:53:5b:d8:c5:8e:bb: 81:eb:45:00:55:4a:80:73:c7:fb:2c:e6:b2:4c:bc:98:a8:0a: b2:1a:84:2a:0e:ba:dc:4b:e4:bc:64:43:be:17:b4:df:94:9a: 88:34:8e:56:85:d7:4f:fb:15:34:18:ad:cc:09:17:e8:ba:2f: 1c:b5:cd:f0:70:9d:64:9d:0c:cf:bd:c6:2d:33:08:50:05:0a: de:54:7c:c4:15:fc:41:33:cb:7a:c7:e5:2e:c0:ef:8e:ae:27: 77:31:d1:0c:90:b5:6e:d4:9d:c8:5c:9f:23:e8:77:4a:6b:89: 14:61:e7:47:61:92:b5:b6:17:68:2c:8a:61:ac:0e:00:7b:36: 4d:b8:55:1e:70:10:53:fe:98:cd:8d:d9:1e:2e:46:71:cd:fc: 27:a1:9d:cd:d7:81:29:9f:7c:09:7c:b1:36:85:a8:4a:ac:60: 7a:8f:0f:40:a7:13:6c:92:87:03:1f:0e:ca:4b:d7:be:c7:07: 9e:a5:84:7c:aa:db:49:d9:a1:28:83:3b:dc:f6:a8:07:29:74: c3:d9:cf:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN3NrPhs/250wWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MThkNjc2N2EtYTRjNi00OTU0LWJmZTMtYjU4M2RiMmNmMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aZZ/Erz2OF8LePnXG2viVFpQQOP+aVv0mzF 6arazVM0KgrB1Op+ayrazSoEmc45qIBi6uEEnzgfIJl7npbi0rMUyFedbYctixxg c7hDTjnfquL/S8wT0PN1iTLepb78YLVYr1P/w7Uqapu2Sw1Ajlm8LKObZA8Y/aHV nV3O0j84p0BjeYwGZFPFf/HjQD9ClCNjX7RP+COaVUaWCX00Mxt/5kbBTUJEK2hm GoMgGiK+hcW0f9xx4iWsoTy+0epo7aNHBk9uD3COxAELkCkY8+s63jwgoMfxcsT7 2x4b26NAXSgJqtScIj9WzGk9e4wgOF+vzmd78An/2tOV3B6EWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVS25AiaAR92MTD9gI/0gYj7dgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNjMmMwMTYtMzc4OC0z OTVmLWE0YTYtYTUxZTdlYTdhNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8M0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDvSaeVXggA2AUDZSo7UWKmERpx1tNekv7Z3zaekGKbuZ8bjkYxYNMH tcuNzG7IVFNb2MWOu4HrRQBVSoBzx/ss5rJMvJioCrIahCoOutxL5LxkQ74XtN+U mog0jlaF10/7FTQYrcwJF+i6Lxy1zfBwnWSdDM+9xi0zCFAFCt5UfMQV/EEzy3rH 5S7A746uJ3cx0QyQtW7UnchcnyPod0priRRh50dhkrW2F2gsimGsDgB7Nk24VR5w EFP+mM2N2R4uRnHN/Cehnc3XgSmffAl8sTaFqEqsYHqPD0CnE2yShwMfDspL177H B56lhHyq20nZoSiDO9z2qAcpdMPZz5c= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:20 2025 by rpki-client