$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa File: 3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa (raw, json) Hash identifier: 7j87uU2bRhvXLSpbUG9e85bBy2m3B0nxAo3x4JwpfrY= Subject key identifier: C0:D0:0F:E7:58:2B:DD:A1:86:D3:5F:E9:33:1D:D9:E2:D7:2F:07:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B5FB8203EF5B459A32E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.223.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5f:b8:20:3e:f5:b4:59:a3:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=32a81ffc-6cd8-4d5e-8e63-3f7e961123c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:a1:e1:06:ef:15:63:2b:5b:b5:f5:b3:f0: 24:d5:ed:e5:42:4d:3c:05:7f:98:16:31:d8:f0:7e: aa:aa:1c:ec:60:92:df:da:f4:db:cb:f3:8c:4b:9e: 79:a6:5e:c9:06:a8:96:d9:ed:28:84:02:c0:d7:f7: 57:13:43:2a:82:cc:1e:76:45:c0:bc:c5:1d:55:a6: 46:af:10:af:3f:c7:b1:5d:c3:43:f5:01:f5:54:14: fd:d7:e5:f2:cd:87:23:e9:ea:14:4e:b5:b8:67:59: bc:1a:ee:a2:ce:c8:79:4b:5a:58:20:c7:c5:09:ab: bd:dd:d0:8b:f4:4f:05:b3:99:6b:38:3b:e4:8b:f4: 15:48:dd:5f:09:25:5c:e0:ae:1a:a2:60:64:8f:52: 50:cc:ef:38:73:5b:53:20:e8:c6:2c:67:2b:49:68: fd:de:45:de:00:1b:66:8d:0d:ba:08:5c:ed:77:a3: 41:0f:68:e0:66:f7:b2:62:ff:50:5d:08:2f:f2:da: 98:e4:49:59:3b:d4:33:0a:9b:d2:23:62:b9:2a:d5: 2e:44:d0:f2:f1:8e:82:f1:f4:89:a0:09:03:1a:b6: ec:6b:32:dc:d5:a8:cf:e8:6c:c3:ee:6a:22:47:79: 5d:b4:85:3b:d7:35:66:a3:3a:c4:66:5e:0b:6a:2c: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D0:0F:E7:58:2B:DD:A1:86:D3:5F:E9:33:1D:D9:E2:D7:2F:07:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:65:e3:da:23:60:11:f1:ee:67:62:72:0a:76:f7:57:2a:50: 16:0e:ce:00:b9:ca:dd:7c:5f:b4:b3:f0:f4:fb:7b:14:4a:b7: 97:57:6c:d4:fa:db:cf:bf:00:e0:28:da:40:02:97:c9:54:e3: e2:75:2c:24:80:8b:41:72:c7:26:d5:be:e1:e1:ee:6d:94:63: 31:69:06:c7:8a:2a:01:4b:27:15:39:91:0f:bb:d9:d6:6f:db: c4:61:c6:fa:1f:7d:a8:20:ad:40:8b:49:5f:c3:e0:05:2e:b2: 13:c5:d4:3f:75:31:d0:55:b0:b0:5e:4e:9d:de:d0:7e:78:5b: 60:26:f8:17:13:02:be:47:db:ba:07:35:25:3a:94:be:ee:5c: b4:47:ca:29:73:61:9c:bb:1d:9c:65:e4:d3:fe:9b:20:d8:6c: 5d:5d:c5:18:81:8c:52:94:97:e4:90:63:6d:54:fd:6c:33:b4: f6:47:e0:2c:a9:9a:48:2d:08:fe:da:27:93:58:88:8f:63:31: 8f:32:b2:fc:94:88:85:b7:17:45:0e:b7:97:a0:08:16:f3:98: 00:7a:1c:4d:8e:bd:2e:37:6d:8d:29:0b:f6:a9:26:08:81:2b: 1f:4d:e4:05:0c:0b:13:6e:2f:8a:a0:60:2a:3d:6d:71:26:77: 5a:ee:b2:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1+4ID71tFmjLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MzJhODFmZmMtNmNkOC00ZDVlLThlNjMtM2Y3ZTk2MTEyM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD2h4QbvFWMrW7X1s/Ak1e3lQk08BX+YFjHY 8H6qqhzsYJLf2vTby/OMS555pl7JBqiW2e0ohALA1/dXE0MqgswedkXAvMUdVaZG rxCvP8exXcND9QH1VBT91+XyzYcj6eoUTrW4Z1m8Gu6izsh5S1pYIMfFCau93dCL 9E8Fs5lrODvki/QVSN1fCSVc4K4aomBkj1JQzO84c1tTIOjGLGcrSWj93kXeABtm jQ26CFztd6NBD2jgZveyYv9QXQgv8tqY5ElZO9QzCpvSI2K5KtUuRNDy8Y6C8fSJ oAkDGrbsazLc1ajP6GzD7moiR3ldtIU71zVmozrEZl4Laix9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDQD+dYK92hhtNf6TMd2eLXLwfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YxOGUwZmYtNWY4My0z MTE2LWFjNjMtM2E5Y2VkY2Y1NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhl49ojYBHx7mdicgp291cqUBYOzgC5yt18X7Sz8PT7exRKt5dXbNT6 28+/AOAo2kACl8lU4+J1LCSAi0FyxybVvuHh7m2UYzFpBseKKgFLJxU5kQ+72dZv 28RhxvoffaggrUCLSV/D4AUushPF1D91MdBVsLBeTp3e0H54W2Am+BcTAr5H27oH NSU6lL7uXLRHyilzYZy7HZxl5NP+myDYbF1dxRiBjFKUl+SQY21U/WwztPZH4Cyp mkgtCP7aJ5NYiI9jMY8ysvyUiIW3F0UOt5egCBbzmAB6HE2OvS43bY0pC/apJgiB Kx9N5AUMCxNuL4qgYCo9bXEmd1rusqw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:54 2025 by rpki-client