$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa File: 411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa (raw, json) Hash identifier: dHIf9t1ms/KChmcHHJOp+uwDaxzDk5hgHxC0QlZZD/w= Subject key identifier: 26:25:8E:0B:16:DE:C2:97:7A:81:62:5D:AB:FF:ED:15:FE:07:05:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB9382F2BF21F99D05FC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.209.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:93:82:f2:bf:21:f9:9d:05:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=03da2cd0-8178-4e47-8e60-0324c579bddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:12:12:d5:19:ab:96:0a:5d:de:f9:3a:f1: 3f:a3:8f:76:ef:47:e6:62:d9:2b:9e:07:e9:10:45: fc:49:d5:9f:f4:a9:67:20:7c:2f:c8:d6:cd:2e:87: 34:ad:1d:31:19:87:d6:ea:45:22:c1:07:70:d4:e3: b5:a7:b1:f5:50:df:3d:52:6f:3a:36:38:dc:7e:72: 27:0c:7b:a9:f7:73:53:c8:f6:ca:8e:a7:f2:37:a9: f2:c0:7b:84:9a:5a:93:73:e7:ae:8d:b3:5f:72:b8: bb:72:72:77:d9:42:13:c1:c0:e7:18:28:2b:5c:8f: 26:c8:ee:b1:b2:59:54:60:9d:a3:cf:b5:43:1f:11: c4:e3:44:c9:18:fb:d5:e5:db:18:dd:eb:80:3a:5c: ec:a7:3c:1a:2e:05:b0:54:e1:16:b0:b0:aa:24:c1: b2:7c:06:fe:c3:31:c9:b1:57:42:30:a5:90:45:06: 4a:6f:89:af:de:68:08:69:87:d1:78:85:cd:12:00: 8b:0c:f4:9e:fe:26:b5:69:50:55:17:6a:67:12:9e: 72:0d:d6:d1:1d:85:57:5a:75:d1:e3:5a:f8:a4:5b: 9a:7e:af:17:f2:26:d0:93:c2:27:79:be:26:b5:74: d9:8b:70:77:05:fa:2e:09:7a:66:3c:ed:6f:1f:2c: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:8E:0B:16:DE:C2:97:7A:81:62:5D:AB:FF:ED:15:FE:07:05:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/411f6a29-0d6a-3367-9f26-773cbe2dd6b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:49:28:5e:62:d4:85:8f:d5:1a:c9:52:54:06:a1:d0:c3:ef: 0d:7b:cb:99:99:9f:8d:da:07:a8:da:e2:05:2e:2e:97:3e:ee: 8b:01:e1:43:90:68:59:5a:c2:3b:b6:70:14:24:dd:a5:7a:f2: 9c:30:92:dd:ba:7e:76:6f:cb:a7:02:fb:4b:aa:c9:da:ec:c1: 73:1e:44:bb:64:c6:41:bf:4d:b6:f4:f4:40:f2:a6:71:b1:05: b1:f9:96:f2:22:ed:a7:bd:38:e5:3a:f1:62:d3:3e:93:99:bb: c9:44:f7:81:00:44:8e:44:19:23:e4:9f:be:44:62:72:69:ab: 15:e6:1f:ef:51:68:21:2c:35:5b:4f:4d:b4:cc:4f:11:25:de: 13:61:b4:a3:cc:93:3a:ba:63:57:74:7f:53:a4:a9:45:af:ce: d9:2f:9f:2c:48:13:e6:c1:37:5f:bb:d3:a1:21:32:6c:de:4d: 43:3c:1d:60:37:df:e7:02:b3:57:09:b4:03:3c:a7:51:d4:72: 79:27:77:67:a5:65:fa:53:5a:7a:65:0b:8c:16:1c:b3:74:d0: 30:b6:fa:a2:c5:3a:ef:e3:03:18:77:c0:97:46:f2:14:1a:72: ac:c0:8d:93:bf:6b:e5:35:0f:be:0c:1b:ae:84:27:41:18:84: 36:59:0a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5OC8r8h+Z0F/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MDNkYTJjZDAtODE3OC00ZTQ3LThlNjAtMDMyNGM1NzliZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwESEtUZq5YKXd75OvE/o49270fmYtkrngfp EEX8SdWf9KlnIHwvyNbNLoc0rR0xGYfW6kUiwQdw1OO1p7H1UN89Um86NjjcfnIn DHup93NTyPbKjqfyN6nywHuEmlqTc+eujbNfcri7cnJ32UITwcDnGCgrXI8myO6x sllUYJ2jz7VDHxHE40TJGPvV5dsY3euAOlzspzwaLgWwVOEWsLCqJMGyfAb+wzHJ sVdCMKWQRQZKb4mv3mgIaYfReIXNEgCLDPSe/ia1aVBVF2pnEp5yDdbRHYVXWnXR 41r4pFuafq8X8ibQk8Ineb4mtXTZi3B3BfouCXpmPO1vHyxtSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYljgsW3sKXeoFiXav/7RX+BwVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDExZjZhMjktMGQ2YS0z MzY3LTlmMjYtNzczY2JlMmRkNmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVJKF5i1IWP1RrJUlQGodDD7w17y5mZn43aB6ja4gUuLpc+7osB4UOQ aFlawju2cBQk3aV68pwwkt26fnZvy6cC+0uqydrswXMeRLtkxkG/Tbb09EDypnGx BbH5lvIi7ae9OOU68WLTPpOZu8lE94EARI5EGSPkn75EYnJpqxXmH+9RaCEsNVtP TbTMTxEl3hNhtKPMkzq6Y1d0f1OkqUWvztkvnyxIE+bBN1+706EhMmzeTUM8HWA3 3+cCs1cJtAM8p1HUcnknd2elZfpTWnplC4wWHLN00DC2+qLFOu/jAxh3wJdG8hQa cqzAjZO/a+U1D74MG66EJ0EYhDZZCmg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:13 2025 by rpki-client