$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44c9e6c0-bf03-35d9-bbda-ade49844ff93.roa File: 44c9e6c0-bf03-35d9-bbda-ade49844ff93.roa (raw, json) Hash identifier: kmu1nsrR5cI25T5Rb4jsqp1ln+0bK2hgiDUrXfLMpZk= Subject key identifier: 4A:5A:AA:01:11:7A:7F:67:A6:FB:D1:DA:7E:2C:BD:5D:B3:15:ED:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400CA6807B152BC0BBA14E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44c9e6c0-bf03-35d9-bbda-ade49844ff93.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.197.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:ca:68:07:b1:52:bc:0b:ba:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=88efd10b-09e0-40f6-8510-beed63de2a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:8c:84:d3:0c:4a:89:bb:9c:d2:98:b6:ef: 7c:63:82:3e:7e:6a:17:69:49:3a:88:34:e5:e4:b2: 47:5e:40:a4:bf:e9:25:73:bb:ea:78:05:95:5c:c1: 1a:94:db:d0:e5:c9:1d:e3:79:0a:69:ee:85:c7:27: 40:64:27:bf:22:32:36:b4:ed:0e:aa:cf:b5:1e:00: a6:1d:a7:63:07:a4:89:c7:af:18:4e:36:76:f8:da: c9:5f:f2:46:42:63:4e:d6:93:86:d2:e9:3d:ed:f7: 3f:1f:0d:2c:b8:77:75:3e:53:99:f5:7d:f4:db:5f: a1:33:12:8c:bf:87:18:ce:6e:f1:ab:9b:ac:a8:95: 82:07:42:4a:73:ed:f6:79:b3:ae:21:99:b3:b9:86: 2c:a3:0c:f4:26:e1:27:a3:93:3e:d5:ad:ff:4f:9a: cd:15:5a:77:6f:2c:23:a6:12:3c:53:15:63:e8:a9: a5:83:b9:73:ec:37:03:a4:40:46:1e:ba:af:fa:67: 9c:4a:51:e6:82:0e:13:1d:bf:b1:cf:30:c0:4c:94: e4:08:08:d5:ae:09:20:76:11:2d:30:6c:49:ad:79: fd:d3:89:9c:54:bd:20:c1:a7:bb:21:d1:36:fd:9a: 0a:56:b3:48:4b:4d:df:a9:15:af:52:16:24:a0:f0: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5A:AA:01:11:7A:7F:67:A6:FB:D1:DA:7E:2C:BD:5D:B3:15:ED:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44c9e6c0-bf03-35d9-bbda-ade49844ff93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f6:d4:77:82:09:de:41:51:67:3b:71:cc:8c:ac:26:09:f3: 6b:63:1c:5a:d0:27:f3:b6:00:3d:b1:39:47:6d:b7:67:59:59: 61:82:c8:ee:80:3b:6b:03:8d:d1:b2:57:dc:c9:48:51:bc:7d: bb:6f:9f:b7:9b:19:e5:9d:6d:1d:f1:02:97:8d:12:a8:7e:12: 31:e6:8e:4c:06:38:e7:4c:94:21:4f:08:1d:b0:35:59:14:fd: 10:75:74:d7:33:bd:d7:d3:4b:fb:b5:ae:c9:26:da:4b:0b:13: 66:74:83:ad:f7:3b:ee:35:08:7c:bd:a0:a1:ac:05:fe:39:87: b8:1d:68:40:c9:24:a9:f5:c5:c2:4d:0c:4b:7d:27:7a:7f:38: d6:27:ba:58:52:a8:a6:42:1f:c3:ca:03:40:b5:4c:28:eb:e2: e1:b5:74:8a:38:86:b4:b6:81:3d:24:e3:75:49:7f:20:83:7d: d7:cb:dd:79:73:dd:90:a9:06:0c:d6:aa:08:7a:9b:f8:4b:04: 04:c2:f9:3c:f1:26:d7:58:f8:6c:b5:19:16:22:17:66:4c:7b: 17:83:80:4f:dd:73:01:31:c2:3d:7e:7b:e5:97:a1:4c:c5:8a: 9f:76:c8:ee:7e:82:6a:3e:e6:d6:9f:f1:47:2f:f5:50:f7:c0: 28:1e:70:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMpoB7FSvAu6FOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ODhlZmQxMGItMDllMC00MGY2LTg1MTAtYmVlZDYzZGUyYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFKMhNMMSom7nNKYtu98Y4I+fmoXaUk6iDTl 5LJHXkCkv+klc7vqeAWVXMEalNvQ5ckd43kKae6FxydAZCe/IjI2tO0Oqs+1HgCm HadjB6SJx68YTjZ2+NrJX/JGQmNO1pOG0uk97fc/Hw0suHd1PlOZ9X3021+hMxKM v4cYzm7xq5usqJWCB0JKc+32ebOuIZmzuYYsowz0JuEno5M+1a3/T5rNFVp3bywj phI8UxVj6Kmlg7lz7DcDpEBGHrqv+mecSlHmgg4THb+xzzDATJTkCAjVrgkgdhEt MGxJrXn904mcVL0gwae7IdE2/ZoKVrNIS03fqRWvUhYkoPDxoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpaqgERen9npvvR2n4svV2zFe2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDRjOWU2YzAtYmYwMy0z NWQ5LWJiZGEtYWRlNDk4NDRmZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8UYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/21HeCCd5BUWc7ccyMrCYJ82tjHFrQJ/O2AD2xOUdtt2dZWWGCyO6A O2sDjdGyV9zJSFG8fbtvn7ebGeWdbR3xApeNEqh+EjHmjkwGOOdMlCFPCB2wNVkU /RB1dNczvdfTS/u1rskm2ksLE2Z0g633O+41CHy9oKGsBf45h7gdaEDJJKn1xcJN DEt9J3p/ONYnulhSqKZCH8PKA0C1TCjr4uG1dIo4hrS2gT0k43VJfyCDfdfL3Xlz 3ZCpBgzWqgh6m/hLBATC+TzxJtdY+Gy1GRYiF2ZMexeDgE/dcwExwj1+e+WXoUzF ip92yO5+gmo+5taf8Ucv9VD3wCgecD8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:07 2025 by rpki-client