$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d25079e-6abe-39d1-b329-240c3b8404a5.roa File: 3d25079e-6abe-39d1-b329-240c3b8404a5.roa (raw, json) Hash identifier: zsSArGmmv29VBZXaxKdUyBmOWSRcld7zSWDIBHsDHF4= Subject key identifier: 32:C0:9D:47:4C:36:0D:7D:CA:DA:AB:22:85:85:0B:DC:D7:35:67:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DC9F38773C75184CAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d25079e-6abe-39d1-b329-240c3b8404a5.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.194.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dc:9f:38:77:3c:75:18:4c:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=ad7aef94-8107-49e8-832c-7ba7b3f24b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:48:ca:7e:9e:53:38:b1:da:34:8c:80:50: 34:01:55:b4:e5:5c:0a:58:8a:e5:a5:79:dc:57:20: 32:2a:f4:3d:5c:88:23:6c:46:1a:25:2b:9e:79:0a: 7e:dc:06:23:e2:15:8d:4f:5d:e8:4d:c7:a3:e4:4c: 7f:da:87:85:8b:b1:3c:c6:37:53:d6:c2:99:6a:aa: 78:9c:44:c0:23:58:ed:92:01:d9:59:7a:08:33:0f: 86:ca:94:cc:57:ec:b7:7b:a0:1d:bc:4f:bd:eb:21: d9:61:3f:4a:18:44:e0:da:33:55:05:ce:e8:d9:d2: c8:19:43:6c:4e:a9:5a:7e:6e:6b:16:7a:1d:12:64: 82:6a:68:ab:d2:27:a8:dd:f1:b5:32:43:2b:aa:d1: df:58:09:0a:ff:c3:fc:e7:6b:c2:70:63:62:7a:6f: 9d:9c:42:96:56:ad:64:70:f3:f6:e3:5b:d3:e1:c2: ed:40:62:15:5b:6d:9d:7b:8e:bc:3d:ae:b8:56:49: f9:3b:19:02:bb:04:cb:19:04:25:d0:2a:84:c4:32: f0:d4:d4:13:67:3d:fc:2a:e7:1f:5c:51:90:38:f8: 21:2a:80:ba:05:ac:39:b0:fe:27:31:d5:fa:9c:51: 34:2f:f9:9f:09:e5:17:e4:b3:52:ef:44:39:f1:c8: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C0:9D:47:4C:36:0D:7D:CA:DA:AB:22:85:85:0B:DC:D7:35:67:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d25079e-6abe-39d1-b329-240c3b8404a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:85:97:57:a6:2c:28:5c:5e:f4:ce:5b:ec:56:81:f5:35:6e: 02:c4:30:36:53:68:85:96:23:b5:89:c5:c9:46:e9:b1:3a:c7: b4:ff:41:b6:33:11:f9:36:06:78:0c:cb:10:4e:3a:02:af:3c: f4:d6:99:6c:72:06:2f:4f:fa:12:c5:38:a7:66:16:3d:6d:b0: 66:8f:bf:bd:b6:9f:65:d2:f9:4c:c1:b1:73:29:89:07:6a:42: 8f:10:79:54:60:4f:60:86:40:bd:d3:ff:4f:c2:bf:e9:72:7a: 4f:ee:59:8e:fc:3d:7a:55:bc:80:0a:5a:3d:e3:c5:6e:a7:63: 24:19:b8:98:14:e2:5a:ec:37:9e:5c:cf:5d:30:77:e8:87:2c: 50:50:1a:40:4d:9c:ae:a7:c6:9c:ab:81:b7:57:f7:5b:67:c2: 71:88:01:30:a2:e5:1b:b3:bf:01:a3:a3:84:32:1c:99:1a:7d: a8:cd:6e:06:cf:2f:81:a2:27:c9:df:18:56:97:3e:f5:02:e2: 50:54:03:bd:a4:0d:3b:9a:76:89:de:61:41:c6:28:5f:bc:59: 7f:e3:26:45:c1:1e:93:35:ec:30:8f:83:2f:f8:9a:73:68:d6: 3b:af:21:89:ab:18:0a:14:57:85:76:56:68:d6:0d:da:7c:82: 4a:75:6e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANyfOHc8dRhMrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YWQ3YWVmOTQtODEwNy00OWU4LTgzMmMtN2JhN2IzZjI0YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxBIyn6eUzix2jSMgFA0AVW05VwKWIrlpXnc VyAyKvQ9XIgjbEYaJSueeQp+3AYj4hWNT13oTcej5Ex/2oeFi7E8xjdT1sKZaqp4 nETAI1jtkgHZWXoIMw+GypTMV+y3e6AdvE+96yHZYT9KGETg2jNVBc7o2dLIGUNs Tqlafm5rFnodEmSCamir0ieo3fG1MkMrqtHfWAkK/8P852vCcGNiem+dnEKWVq1k cPP241vT4cLtQGIVW22de468Pa64Vkn5OxkCuwTLGQQl0CqExDLw1NQTZz38Kucf XFGQOPghKoC6Baw5sP4nMdX6nFE0L/mfCeUX5LNS70Q58ciInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLAnUdMNg19ytqrIoWFC9zXNWcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QyNTA3OWUtNmFiZS0z OWQxLWIzMjktMjQwYzNiODQwNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSFl1emLChcXvTOW+xWgfU1bgLEMDZTaIWWI7WJxclG6bE6x7T/QbYz Efk2BngMyxBOOgKvPPTWmWxyBi9P+hLFOKdmFj1tsGaPv722n2XS+UzBsXMpiQdq Qo8QeVRgT2CGQL3T/0/Cv+lyek/uWY78PXpVvIAKWj3jxW6nYyQZuJgU4lrsN55c z10wd+iHLFBQGkBNnK6nxpyrgbdX91tnwnGIATCi5RuzvwGjo4QyHJkafajNbgbP L4GiJ8nfGFaXPvUC4lBUA72kDTuadoneYUHGKF+8WX/jJkXBHpM17DCPgy/4mnNo 1juvIYmrGAoUV4V2VmjWDdp8gkp1bnw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:31 2025 by rpki-client