$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa File: 439a45eb-6aac-3e07-a6cd-a58855498729.roa (raw, json) Hash identifier: +hO5qnXZ+h+3F8/aB4INab1xSpuqyGY/daJ47BO1K98= Subject key identifier: E4:8E:1F:C6:1C:11:E3:83:52:69:4D:E2:E7:3F:19:AB:35:F3:D5:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6C2B6F2A969EAA460B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.199.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6c:2b:6f:2a:96:9e:aa:46:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=d7b11856-4eee-4341-bc36-eeb63c2e9db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:f5:87:64:fd:0e:cf:e7:98:81:d0:83:c3: 84:86:78:7d:3f:b8:68:15:e4:d9:1d:be:0e:be:89: 88:3c:46:b1:d3:fa:ec:51:eb:76:c6:68:9d:6f:fa: fa:d7:1a:5f:23:3e:d6:52:4a:a6:d3:08:12:d4:21: 3f:62:1b:a5:40:81:9b:ba:fa:e9:63:ab:aa:23:cb: 0d:8f:a8:b5:77:e4:43:ba:6b:f2:e4:8a:63:8e:2a: ec:41:5e:e0:ad:a1:9a:38:0f:88:58:3c:a9:03:25: a4:83:34:4c:ff:e6:91:71:ef:09:20:b2:d3:40:5c: 07:ad:cf:9f:de:e1:49:f0:03:8d:90:d7:11:59:42: 37:96:10:24:91:51:cc:ae:ac:16:1a:54:16:6e:11: fe:4a:98:cd:b8:52:bc:9a:3b:c4:a7:21:97:75:db: 60:02:22:ce:e0:1d:0d:a5:0e:43:75:3f:2c:43:58: e2:f3:cd:bc:fd:f4:a7:3c:4b:68:7b:db:79:7c:6a: d1:b5:65:b5:01:22:d7:08:be:f4:bf:85:37:22:66: 52:8d:f3:01:e7:6b:5f:e4:40:e7:f3:c2:e4:00:8b: 84:11:b9:77:dd:06:b7:08:bc:1b:92:45:4c:56:75: 11:75:4d:87:15:e0:65:02:a1:5b:c8:f3:46:4a:74: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:1F:C6:1C:11:E3:83:52:69:4D:E2:E7:3F:19:AB:35:F3:D5:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ec:0c:91:eb:ea:9b:81:d8:7b:33:f4:a0:37:e4:a0:d6:cb: 6a:68:49:41:ed:0a:de:f1:8f:cb:85:6b:89:84:24:89:11:7e: 24:bd:95:2a:bd:57:f7:ed:f8:6d:e4:2e:57:87:7d:ff:f3:5f: cf:bc:24:45:c1:b2:8a:5c:70:39:49:39:e9:0c:d4:45:cf:94: 30:20:54:44:34:ea:73:1e:7a:db:fa:5a:b6:d6:33:d2:8f:ba: a3:96:e0:eb:41:e6:3e:c6:4e:84:ac:82:92:a6:e5:6a:ab:67: 69:c4:35:c7:02:db:3f:cb:ee:16:f5:f8:db:47:40:bb:44:74: 0e:c7:3f:9e:b3:0b:89:55:0e:ec:89:de:76:25:e0:16:4f:7a: 87:62:d7:9f:25:af:7b:be:fc:dd:b9:9a:bf:31:82:2f:69:9f: d9:82:6f:9f:0c:fc:2e:55:62:1f:21:44:18:d1:9d:98:c9:78: 84:94:7f:fd:dd:c8:9d:c0:6c:35:8e:46:64:9c:fc:f2:d0:3b: c6:a5:db:2a:23:64:32:02:ff:4f:7a:51:b9:7a:e0:24:23:d6: 7f:3f:a0:e6:ee:cc:f4:f5:6c:88:61:d8:85:dd:85:b0:f1:ca: 6b:65:ad:b6:68:74:ba:b4:51:76:00:18:bf:f0:42:d0:39:ef: a7:30:29:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2wrbyqWnqpGCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDdiMTE4NTYtNGVlZS00MzQxLWJjMzYtZWViNjNjMmU5ZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRH1h2T9Ds/nmIHQg8OEhnh9P7hoFeTZHb4O vomIPEax0/rsUet2xmidb/r61xpfIz7WUkqm0wgS1CE/YhulQIGbuvrpY6uqI8sN j6i1d+RDumvy5IpjjirsQV7graGaOA+IWDypAyWkgzRM/+aRce8JILLTQFwHrc+f 3uFJ8AONkNcRWUI3lhAkkVHMrqwWGlQWbhH+SpjNuFK8mjvEpyGXddtgAiLO4B0N pQ5DdT8sQ1ji8828/fSnPEtoe9t5fGrRtWW1ASLXCL70v4U3ImZSjfMB52tf5EDn 88LkAIuEEbl33Qa3CLwbkkVMVnURdU2HFeBlAqFbyPNGSnRmiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSOH8YcEeODUmlN4uc/Gas189WcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM5YTQ1ZWItNmFhYy0z ZTA3LWE2Y2QtYTU4ODU1NDk4NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8cwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXsDJHr6puB2Hsz9KA35KDWy2poSUHtCt7xj8uFa4mEJIkRfiS9lSq9 V/ft+G3kLleHff/zX8+8JEXBsopccDlJOekM1EXPlDAgVEQ06nMeetv6WrbWM9KP uqOW4OtB5j7GToSsgpKm5WqrZ2nENccC2z/L7hb1+NtHQLtEdA7HP56zC4lVDuyJ 3nYl4BZPeodi158lr3u+/N25mr8xgi9pn9mCb58M/C5VYh8hRBjRnZjJeISUf/3d yJ3AbDWORmSc/PLQO8al2yojZDIC/096Ubl64CQj1n8/oObuzPT1bIhh2IXdhbDx ymtlrbZodLq0UXYAGL/wQtA576cwKWA= -----END CERTIFICATE-----Generated at Sat Apr 5 14:14:18 2025 by rpki-client