$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33dd5757-3f3d-3cd8-af7d-67dedea00b24.roa File: 33dd5757-3f3d-3cd8-af7d-67dedea00b24.roa (raw, json) Hash identifier: 3WoF9OGQVtrzwHEOTmOl8KcNdunJOpjuL6zd/9qOINo= Subject key identifier: CC:E4:9A:B6:67:4B:05:7E:FA:77:58:12:16:F5:08:B4:C6:AA:24:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584898D614AC013111DCC4408F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33dd5757-3f3d-3cd8-af7d-67dedea00b24.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.192.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:14:ac:01:31:11:dc:c4:40:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=77efef17-ae35-4097-9843-457c52dfbedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:a4:49:54:20:0d:ca:9b:d8:e2:d6:81:20: d1:11:46:fa:36:fa:ce:cb:aa:a9:9c:cd:ec:28:05: 0e:a9:48:2d:56:7f:d7:34:ad:fe:65:09:58:ac:21: 72:b4:f8:5e:57:b6:be:ab:2d:68:e6:71:8c:ce:9b: 58:08:60:03:ce:fd:be:11:11:6b:ed:ca:da:05:03: e6:29:b0:4a:2c:49:ea:fd:a0:ae:49:48:d8:23:7b: 9b:ac:80:7c:9b:3f:50:78:98:e5:ad:10:10:67:ad: 13:63:fd:33:aa:fa:df:bb:da:db:e6:e9:bd:0d:ad: 45:fe:df:71:7a:07:17:84:d0:5c:43:d5:8a:bb:a8: 4b:a2:85:04:70:dd:7a:ba:ef:e6:21:e8:61:41:c5: 5c:c9:ad:1d:88:29:53:b1:31:4e:eb:6c:5e:60:f0: 1c:0f:f4:07:36:b5:6d:35:40:94:22:48:ca:e8:cc: f1:de:c5:33:22:3c:39:c2:fa:74:28:3d:21:f1:f7: a6:1e:5f:67:d8:24:ef:43:4e:74:62:aa:84:00:3f: 11:1a:84:e4:d0:52:32:86:bc:26:51:69:cd:96:9e: bb:1b:de:1e:95:37:8c:54:5f:04:fb:cf:1d:be:e4: ed:44:67:02:61:8b:56:1e:89:12:6a:19:b0:ec:d6: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E4:9A:B6:67:4B:05:7E:FA:77:58:12:16:F5:08:B4:C6:AA:24:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33dd5757-3f3d-3cd8-af7d-67dedea00b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:01:be:00:ef:10:c8:63:46:e4:2c:c9:4b:2b:ea:d9:1c:97: 18:2a:64:8c:a1:62:46:19:17:eb:51:75:8f:89:ce:fb:d1:a2: 23:ab:1b:49:5e:cc:10:a4:05:97:69:c9:02:3f:14:74:e7:93: 6f:7b:ce:38:53:3b:c8:43:55:c3:ea:9b:07:c2:86:54:f5:80: 99:10:4e:d9:56:1c:3a:41:cb:2c:e2:03:1c:68:73:7e:d4:12: 69:35:03:7e:0c:1d:17:7f:1e:56:8c:1e:71:c5:01:92:b4:c6: 34:ed:85:6d:ec:cf:62:38:9d:a7:a9:10:c8:bd:dc:f9:93:ca: a5:19:53:88:f2:47:fb:a2:6b:3e:35:7f:62:6e:d8:ad:fe:72: 90:c4:71:c4:56:b9:a6:91:49:53:04:09:55:f7:0e:64:8e:a5: e6:45:8f:c8:8b:69:f7:3d:3a:05:4d:e5:27:c0:0e:10:9d:41: 3b:3c:86:00:b7:92:47:f9:9b:08:a1:1c:20:07:b3:65:29:5b: ff:ff:39:54:84:07:a8:6d:41:9d:a8:94:fd:d2:d8:cd:53:9d: c3:dc:6a:4d:8e:5e:a3:97:79:19:22:50:22:92:ad:c0:1f:ae: 5b:f0:6a:b5:7a:dc:44:3a:c1:3f:51:59:30:a5:a4:87:bf:1b: f1:8a:c0:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1hSsATER3MRAjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NzdlZmVmMTctYWUzNS00MDk3LTk4NDMtNDU3YzUyZGZiZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn32kSVQgDcqb2OLWgSDREUb6NvrOy6qpnM3s KAUOqUgtVn/XNK3+ZQlYrCFytPheV7a+qy1o5nGMzptYCGADzv2+ERFr7craBQPm KbBKLEnq/aCuSUjYI3ubrIB8mz9QeJjlrRAQZ60TY/0zqvrfu9rb5um9Da1F/t9x egcXhNBcQ9WKu6hLooUEcN16uu/mIehhQcVcya0diClTsTFO62xeYPAcD/QHNrVt NUCUIkjK6Mzx3sUzIjw5wvp0KD0h8femHl9n2CTvQ050YqqEAD8RGoTk0FIyhrwm UWnNlp67G94elTeMVF8E+88dvuTtRGcCYYtWHokSahmw7NbJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzkmrZnSwV++ndYEhb1CLTGqiQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNkZDU3NTctM2YzZC0z Y2Q4LWFmN2QtNjdkZWRlYTAwYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8B/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkBvgDvEMhjRuQsyUsr6tkclxgqZIyhYkYZF+tRdY+JzvvRoiOrG0le zBCkBZdpyQI/FHTnk297zjhTO8hDVcPqmwfChlT1gJkQTtlWHDpByyziAxxoc37U Emk1A34MHRd/HlaMHnHFAZK0xjTthW3sz2I4naepEMi93PmTyqUZU4jyR/uiaz41 f2Ju2K3+cpDEccRWuaaRSVMECVX3DmSOpeZFj8iLafc9OgVN5SfADhCdQTs8hgC3 kkf5mwihHCAHs2UpW///OVSEB6htQZ2olP3S2M1TncPcak2OXqOXeRkiUCKSrcAf rlvwarV63EQ6wT9RWTClpIe/G/GKwKI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:33 2025 by rpki-client