$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c85398-411e-34e4-b043-c9a494bca990.roa File: 34c85398-411e-34e4-b043-c9a494bca990.roa (raw, json) Hash identifier: LDrvrC3/7oFk7/9syq1bqXV2G4JYdrUMO/cfNyNa8HU= Subject key identifier: F4:93:3F:BC:DA:52:C7:5B:39:45:DF:DE:62:8A:7D:D2:38:11:A4:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DC813DBB665564729900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c85398-411e-34e4-b043-c9a494bca990.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.205.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:dc:81:3d:bb:66:55:64:72:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=0cb81555-e25f-4cf6-9cf4-987e2cc123a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:88:2f:58:ce:d0:6e:43:0b:a7:84:16:92: ec:99:81:e2:25:45:3e:7d:84:8d:4b:df:f4:bf:7f: cb:c5:36:5c:b5:0d:2d:e1:4b:87:ab:96:3f:01:d6: bf:51:66:8a:0e:32:f6:81:bc:74:b3:34:4f:85:a4: 10:e2:29:ba:7a:d4:10:8f:64:d8:07:55:95:44:c5: 09:4c:d2:34:8e:cd:37:a6:e9:9e:6b:b5:08:94:3e: 90:35:b2:71:6d:3a:e4:91:99:b1:a9:07:b3:0d:6e: 7a:a5:e1:26:a8:49:da:99:94:da:db:36:99:18:49: 5d:c4:65:46:60:f4:34:0d:8e:e2:53:65:59:dd:d5: db:06:e2:83:b2:75:65:26:ac:de:a0:8b:2d:45:45: 34:8e:9f:63:d8:45:fc:3a:2c:cd:7d:55:6a:a1:87: a1:59:d4:ee:06:8a:b4:89:c7:5c:28:84:38:84:32: a5:30:50:be:44:0f:57:b2:49:de:a1:3a:53:bb:a4: b8:6e:47:d3:1c:29:11:91:9a:56:c2:11:8c:2c:71: bb:6f:4c:5c:2e:d8:9d:2c:b1:35:5b:99:fd:94:f3: 7e:49:2d:eb:3f:69:4e:e9:42:b8:f5:82:68:65:d1: 40:e8:f9:62:4e:fd:5d:7c:3c:dd:64:15:1b:0f:93: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:3F:BC:DA:52:C7:5B:39:45:DF:DE:62:8A:7D:D2:38:11:A4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c85398-411e-34e4-b043-c9a494bca990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:03:96:f6:30:84:ec:40:63:fb:ef:ab:be:0f:98:ae:48:57: dc:7d:03:57:9d:30:f4:4c:ef:60:cc:c6:aa:3e:65:a7:9f:bf: ab:43:26:1c:63:94:a1:ca:a6:be:a9:27:74:c1:f0:a1:cd:c3: d4:60:9a:8f:13:9f:4d:7d:89:47:6d:5f:a8:14:50:dc:d3:b8: 0a:38:79:87:a4:03:22:14:e5:73:1f:19:02:94:03:02:b7:c9: bd:84:13:43:fc:16:91:12:f0:33:08:a3:00:30:31:9a:5f:ac: 17:f1:b6:06:15:5e:b3:21:63:86:d6:88:ae:dd:a9:59:10:61: f8:25:bc:fa:8d:95:5d:4e:05:85:c8:f9:0a:f0:3a:3d:e8:5a: c4:a6:15:8e:84:c5:7f:06:9f:b8:db:f0:18:65:72:11:ec:ea: 05:c3:ba:b6:27:c5:b1:c8:cd:3b:3d:90:58:50:23:12:ab:b2: e9:82:81:29:c2:28:c3:4a:49:dc:80:12:b5:04:4e:68:23:3e: d8:a5:ab:6a:8d:7a:5a:07:b3:f1:2e:fb:3c:01:88:3e:b0:70: 6c:a0:41:c7:1f:d5:f3:3d:56:7f:43:43:6e:50:2c:27:fd:db: 24:2b:66:06:6d:23:c1:53:23:04:e1:c2:72:31:a9:91:8f:6e: f6:d3:27:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NyBPbtmVWRymQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MGNiODE1NTUtZTI1Zi00Y2Y2LTljZjQtOTg3ZTJjYzEyM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46GIL1jO0G5DC6eEFpLsmYHiJUU+fYSNS9/0 v3/LxTZctQ0t4UuHq5Y/Ada/UWaKDjL2gbx0szRPhaQQ4im6etQQj2TYB1WVRMUJ TNI0js03pumea7UIlD6QNbJxbTrkkZmxqQezDW56peEmqEnamZTa2zaZGEldxGVG YPQ0DY7iU2VZ3dXbBuKDsnVlJqzeoIstRUU0jp9j2EX8OizNfVVqoYehWdTuBoq0 icdcKIQ4hDKlMFC+RA9XskneoTpTu6S4bkfTHCkRkZpWwhGMLHG7b0xcLtidLLE1 W5n9lPN+SS3rP2lO6UK49YJoZdFA6PliTv1dfDzdZBUbD5PHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSTP7zaUsdbOUXf3mKKfdI4EaQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRjODUzOTgtNDExZS0z NGU0LWIwNDMtYzlhNDk0YmNhOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgDlvYwhOxAY/vvq74PmK5IV9x9A1edMPRM72DMxqo+Zaefv6tDJhxj lKHKpr6pJ3TB8KHNw9Rgmo8Tn019iUdtX6gUUNzTuAo4eYekAyIU5XMfGQKUAwK3 yb2EE0P8FpES8DMIowAwMZpfrBfxtgYVXrMhY4bWiK7dqVkQYfglvPqNlV1OBYXI +QrwOj3oWsSmFY6ExX8Gn7jb8BhlchHs6gXDurYnxbHIzTs9kFhQIxKrsumCgSnC KMNKSdyAErUETmgjPtilq2qNeloHs/Eu+zwBiD6wcGygQccf1fM9Vn9DQ25QLCf9 2yQrZgZtI8FTIwThwnIxqZGPbvbTJ80= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:59 2025 by rpki-client