$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3775d396-c1bb-3e60-9da4-a4b911058619.roa File: 3775d396-c1bb-3e60-9da4-a4b911058619.roa (raw, json) Hash identifier: BFfbAYw8MQH983s3QKRbA11Z+fyVOyfm4pxJqG+Tb6E= Subject key identifier: 10:68:E2:C0:FC:7D:A1:47:CD:17:0E:28:63:72:95:0A:62:66:29:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BABCD206F26386C0F69C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3775d396-c1bb-3e60-9da4-a4b911058619.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.222.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:ab:cd:20:6f:26:38:6c:0f:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=a37c2dec-26f0-46a6-a730-7c60d41a6b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:4d:7a:4a:6f:94:d3:27:7b:7c:d0:a8:b0: 5f:56:b4:38:ac:65:43:f3:57:dd:6f:30:53:04:ce: 23:be:59:01:72:4a:f0:61:75:45:ab:a9:6b:52:dd: 91:52:78:ce:bb:70:a9:06:04:d9:7d:c3:b6:74:9b: ad:19:a2:60:b7:0a:6f:c6:53:55:16:c5:3e:3a:72: 87:37:cb:77:e6:c2:92:0f:8d:db:37:e2:55:9f:87: 2c:aa:d3:26:b1:d7:7b:e9:7a:ab:4c:70:ea:7e:0b: 83:71:cd:d0:92:95:24:14:0b:19:a9:99:83:89:73: 21:4a:83:5b:8d:07:11:68:ab:05:b1:e8:7e:64:64: cc:80:20:cd:54:d6:41:69:85:b1:01:87:01:5b:6a: 3b:9e:22:b3:3e:ea:4d:d9:4a:ab:d9:62:1b:2f:c2: eb:01:23:24:4d:a1:cc:51:7e:ce:e8:64:55:30:9a: de:64:4c:e5:5f:0f:0f:fa:d3:f8:b2:f5:cd:a4:b6: 01:9e:44:de:3f:53:9a:51:22:83:6f:54:33:88:e7: 83:4f:1a:a2:16:15:17:90:63:51:d2:3b:8d:c3:6b: fd:21:97:83:1d:d1:a6:36:49:91:b1:63:2a:1c:27: 58:73:06:f3:87:b5:82:8c:80:c1:b3:af:fe:f9:80: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:E2:C0:FC:7D:A1:47:CD:17:0E:28:63:72:95:0A:62:66:29:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3775d396-c1bb-3e60-9da4-a4b911058619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:38:c1:b6:81:c4:6f:cc:e7:bf:61:1b:f4:0c:44:49:20:ef: f9:7b:97:e6:16:44:95:21:7a:a6:cb:32:2e:c3:1f:5e:8c:46: 72:f9:fd:f8:a5:0b:a9:ec:c0:00:2a:e8:5f:e1:9d:b4:ae:2c: 38:64:69:e1:01:43:31:6f:dd:a1:43:c3:6d:f7:a1:22:a7:ba: aa:57:62:77:6f:0a:ed:9a:5d:06:34:b5:56:de:ea:91:e4:7b: 41:b4:83:fe:55:38:15:b9:6c:82:9b:3c:83:dc:a0:48:d2:77: 0b:80:b9:86:5a:f8:79:e3:88:51:9f:97:5d:7c:8a:2f:81:f2: 95:b1:bf:d7:0c:6a:30:3b:bf:ff:01:9d:76:99:98:a0:3c:d1: 97:7b:9a:b9:75:8d:04:23:28:93:7a:97:44:b1:93:99:ad:cd: e9:5d:42:99:26:d3:58:37:e8:a2:38:b6:47:0f:f0:ff:3c:04: f5:53:10:25:43:85:bc:b5:5a:81:e3:77:73:4b:0d:59:67:8c: 4c:33:74:a7:5f:4e:bd:0f:96:7a:33:af:d5:6d:dc:25:0e:2d: b5:8e:e4:0c:a3:d2:59:ce:0e:1f:66:03:50:c1:3e:1a:32:12: ae:81:d2:72:e3:02:a3:67:10:5d:3f:ad:77:aa:92:ed:ac:15: e9:8a:f7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6vNIG8mOGwPacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YTM3YzJkZWMtMjZmMC00NmE2LWE3MzAtN2M2MGQ0MWE2YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbxNekpvlNMne3zQqLBfVrQ4rGVD81fdbzBT BM4jvlkBckrwYXVFq6lrUt2RUnjOu3CpBgTZfcO2dJutGaJgtwpvxlNVFsU+OnKH N8t35sKSD43bN+JVn4csqtMmsdd76XqrTHDqfguDcc3QkpUkFAsZqZmDiXMhSoNb jQcRaKsFseh+ZGTMgCDNVNZBaYWxAYcBW2o7niKzPupN2Uqr2WIbL8LrASMkTaHM UX7O6GRVMJreZEzlXw8P+tP4svXNpLYBnkTeP1OaUSKDb1QziOeDTxqiFhUXkGNR 0juNw2v9IZeDHdGmNkmRsWMqHCdYcwbzh7WCjIDBs6/++YCRkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBo4sD8faFHzRcOKGNylQpiZilqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzc3NWQzOTYtYzFiYi0z ZTYwLTlkYTQtYTRiOTExMDU4NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE4wbaBxG/M579hG/QMREkg7/l7l+YWRJUheqbLMi7DH16MRnL5/fil C6nswAAq6F/hnbSuLDhkaeEBQzFv3aFDw233oSKnuqpXYndvCu2aXQY0tVbe6pHk e0G0g/5VOBW5bIKbPIPcoEjSdwuAuYZa+HnjiFGfl118ii+B8pWxv9cMajA7v/8B nXaZmKA80Zd7mrl1jQQjKJN6l0Sxk5mtzeldQpkm01g36KI4tkcP8P88BPVTECVD hby1WoHjd3NLDVlnjEwzdKdfTr0Plnozr9Vt3CUOLbWO5Ayj0lnODh9mA1DBPhoy Eq6B0nLjAqNnEF0/rXeqku2sFemK970= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:58 2025 by rpki-client