$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa File: 3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa (raw, json) Hash identifier: NAr5SAPbCTu7aWHMiIdr6WZTyg+zpB/fFx1hIVLlOAI= Subject key identifier: E2:05:F9:DE:11:F3:39:D9:76:87:C4:3D:D1:8D:D6:22:D4:9F:DA:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848907610B13B7541BC07926500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 16625 IP address blocks: 23.200.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:10:b1:3b:75:41:bc:07:92:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=d190fef1-a1eb-4619-9b08-bb96ddcd179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:e9:65:1e:44:78:d7:01:2e:fd:10:da:6f: 6f:5e:ad:84:3e:c5:32:b6:c7:10:d6:aa:d8:fb:52: d2:a9:7f:a7:ea:d8:dd:02:7a:5e:6b:4b:72:1f:1f: d3:75:50:00:1c:31:6d:21:d3:e0:56:04:12:ce:7d: c2:3d:7d:9f:6f:dd:52:50:89:db:b5:43:21:ed:b7: 3f:eb:9b:73:d2:98:dc:eb:a4:ea:35:1e:d5:6d:7c: 1d:cc:74:60:ba:41:4a:f1:fe:7b:c3:14:bd:26:f2: 0c:12:12:a9:b8:21:b4:b1:11:11:69:2d:5c:b5:f2: 95:f4:62:8f:df:d9:00:77:38:20:a4:fb:41:c5:db: 37:54:db:3f:94:ba:45:e2:4f:76:35:3c:aa:3f:5e: 29:28:35:2e:c3:73:27:6b:13:97:34:a7:23:46:e4: 65:ee:27:01:96:97:6d:94:c0:81:80:36:36:5a:ba: bb:01:36:db:33:36:41:58:31:00:a7:ed:b9:45:af: 94:c8:30:4c:88:a9:0c:6f:37:f4:c0:b4:b9:e5:3a: af:e2:c4:ce:30:8b:11:de:6b:1e:ea:ad:c2:10:1d: b6:6f:37:c4:70:71:e3:f4:4f:84:94:00:51:c4:71: 88:45:00:86:6a:4f:13:19:61:11:3a:66:f4:ca:22: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:F9:DE:11:F3:39:D9:76:87:C4:3D:D1:8D:D6:22:D4:9F:DA:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:77:0b:13:39:89:4a:3a:10:b7:62:69:28:07:9e:a0:a1:ab: de:5b:7c:02:4a:f2:7f:3c:86:4d:39:4c:16:97:3e:3f:92:ad: b8:75:0e:c1:28:56:1b:b4:11:45:f4:23:54:f2:81:61:c4:f0: 74:1b:f4:75:83:d4:a0:ce:b4:2a:ee:86:b8:47:5f:09:c5:39: 75:a0:75:8b:24:26:dd:0e:b8:01:a6:cb:92:04:75:82:3c:29: c4:bb:c9:aa:a1:a8:d1:b4:ef:06:ff:47:1a:16:9b:69:ce:67: 87:cd:04:89:96:50:91:71:f0:a2:9f:f5:f1:fc:e4:1f:7f:f0: 9c:97:98:6b:7e:34:84:f6:92:52:20:d9:15:40:d6:0b:65:85: 12:f4:bf:ab:8e:23:67:2a:d3:94:59:35:64:8b:09:41:a7:8d: 37:89:e6:8e:b5:a7:a4:db:23:7c:d4:51:c1:57:91:2d:58:1c: 37:8c:16:7b:2b:f1:74:6a:6a:e8:7f:98:64:90:f2:43:8e:80: 6c:34:6d:ba:e3:24:36:b8:19:17:0b:b4:f6:e0:6c:73:a8:9d: 9a:1f:18:e9:42:95:a2:90:98:3e:3b:78:b7:b2:b1:f3:5a:e5: eb:65:59:67:1c:96:2b:78:e2:a7:47:b0:b0:a5:d6:25:2e:b7: 02:0e:2e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdhCxO3VBvAeSZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZDE5MGZlZjEtYTFlYi00NjE5LTliMDgtYmI5NmRkY2QxNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+7pZR5EeNcBLv0Q2m9vXq2EPsUytscQ1qrY +1LSqX+n6tjdAnpea0tyHx/TdVAAHDFtIdPgVgQSzn3CPX2fb91SUInbtUMh7bc/ 65tz0pjc66TqNR7VbXwdzHRgukFK8f57wxS9JvIMEhKpuCG0sRERaS1ctfKV9GKP 39kAdzggpPtBxds3VNs/lLpF4k92NTyqP14pKDUuw3MnaxOXNKcjRuRl7icBlpdt lMCBgDY2Wrq7ATbbMzZBWDEAp+25Ra+UyDBMiKkMbzf0wLS55Tqv4sTOMIsR3mse 6q3CEB22bzfEcHHj9E+ElABRxHGIRQCGak8TGWEROmb0yiLxWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIF+d4R8znZdofEPdGN1iLUn9rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjNzg2ZDItYTdkNS0z NGI1LWI0MjctNTNhNDk3YzIwZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8iwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV3CxM5iUo6ELdiaSgHnqChq95bfAJK8n88hk05TBaXPj+Srbh1DsEo Vhu0EUX0I1TygWHE8HQb9HWD1KDOtCruhrhHXwnFOXWgdYskJt0OuAGmy5IEdYI8 KcS7yaqhqNG07wb/RxoWm2nOZ4fNBImWUJFx8KKf9fH85B9/8JyXmGt+NIT2klIg 2RVA1gtlhRL0v6uOI2cq05RZNWSLCUGnjTeJ5o61p6TbI3zUUcFXkS1YHDeMFnsr 8XRqauh/mGSQ8kOOgGw0bbrjJDa4GRcLtPbgbHOonZofGOlClaKQmD47eLeysfNa 5etlWWcclit44qdHsLCl1iUutwIOLlA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:48:30 2025 by rpki-client