$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46385c7d-5d61-3a0f-89ee-2bba2ba50a9b.roa File: 46385c7d-5d61-3a0f-89ee-2bba2ba50a9b.roa (raw, json) Hash identifier: muv33G2goDFsVvg/Gf4bgDwoYX6exE6Bd5M+xAeTNXI= Subject key identifier: 85:8D:A4:EB:0B:66:47:29:01:43:D4:B4:70:33:53:1A:05:20:A9:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DFA6F958FB5450010D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46385c7d-5d61-3a0f-89ee-2bba2ba50a9b.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.196.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:df:a6:f9:58:fb:54:50:01:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=98465033-6990-4f51-ac15-93ffac17730a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:52:16:6f:8a:58:ed:6c:bd:84:8a:a4:12: 94:51:57:b0:a4:5a:90:d6:73:5a:c8:f4:a3:f4:17: 5b:ae:8f:d4:30:c9:1e:e6:f2:dd:35:dc:6b:60:cf: 79:72:ba:0f:a0:ec:51:68:f6:a9:45:bb:7f:ca:91: b2:dd:8a:49:03:05:a3:fd:7e:39:51:7f:ef:0c:18: d1:45:f0:7d:51:0d:6a:31:13:7c:2a:9c:e9:a1:50: de:af:65:ee:7b:83:54:df:29:06:2e:7f:1a:a7:68: cf:6a:97:e9:8f:81:46:ed:d4:21:5d:40:25:82:f1: fb:35:ea:de:67:c4:1a:36:9c:17:b7:e6:6f:06:79: a3:92:9d:34:80:82:05:b4:7b:2d:bd:f7:22:02:19: 4d:4c:52:c1:07:35:78:16:e3:31:d5:51:7f:26:f7: 89:84:5f:1b:95:a3:62:8a:97:ca:43:3d:b4:49:d0: bb:b6:72:c7:51:a6:cc:56:c1:e3:a4:bc:b0:79:9d: 79:11:55:94:47:ad:52:fa:39:50:37:64:09:5d:d5: 00:98:85:dc:bf:1d:d1:9c:5f:73:9b:8f:2a:71:42: 05:9e:67:c7:41:db:c0:dd:d3:f2:71:4e:08:3b:72: 83:16:b8:47:21:1c:7b:07:a6:75:8b:33:98:7b:88: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:A4:EB:0B:66:47:29:01:43:D4:B4:70:33:53:1A:05:20:A9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46385c7d-5d61-3a0f-89ee-2bba2ba50a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fe:87:4c:0a:d0:6f:12:e9:78:c4:cb:f1:e9:9e:49:b7:4e: bf:84:89:1b:f5:ed:4f:17:50:66:04:b7:99:10:bd:9d:2e:1f: 6a:6b:d1:22:5a:2a:76:da:08:34:04:3d:58:2b:69:2a:34:de: 9f:73:6d:21:54:62:6a:91:8b:cd:44:db:e4:e4:63:3e:b1:65: 5f:fb:25:ac:40:95:16:97:4f:40:2a:36:5c:21:ea:e6:46:89: 04:65:f6:ec:4b:6c:0c:6f:fc:63:36:b8:86:a2:99:7a:93:45: 5e:79:0a:65:4c:87:87:22:27:dc:d3:7e:d2:f0:8f:69:a2:07: 56:ce:42:ff:86:e3:52:d6:34:e2:d5:f4:97:be:95:4c:0e:c0: 9c:e8:15:84:03:19:2c:76:94:a1:cf:3f:0e:47:8e:3d:bc:aa: e7:b9:11:11:2f:ca:03:5e:56:1f:9e:a0:93:b9:ff:c5:bf:96: 60:cd:95:df:83:de:7a:96:c6:94:4a:31:ba:ce:35:db:fa:ea: a2:62:e0:36:53:72:31:64:f9:14:8b:4c:a8:41:eb:f2:79:e9: a7:c6:dc:db:df:29:d7:9f:87:e5:0b:97:69:d1:72:a6:43:84: 27:33:f7:29:69:ad:f9:f9:7d:a7:9a:3b:ca:2f:df:ce:d9:6a: 9b:bf:71:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN+m+Vj7VFABDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OTg0NjUwMzMtNjk5MC00ZjUxLWFjMTUtOTNmZmFjMTc3MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVdSFm+KWO1svYSKpBKUUVewpFqQ1nNayPSj 9Bdbro/UMMke5vLdNdxrYM95croPoOxRaPapRbt/ypGy3YpJAwWj/X45UX/vDBjR RfB9UQ1qMRN8KpzpoVDer2Xue4NU3ykGLn8ap2jPapfpj4FG7dQhXUAlgvH7Nere Z8QaNpwXt+ZvBnmjkp00gIIFtHstvfciAhlNTFLBBzV4FuMx1VF/JveJhF8blaNi ipfKQz20SdC7tnLHUabMVsHjpLyweZ15EVWUR61S+jlQN2QJXdUAmIXcvx3RnF9z m48qcUIFnmfHQdvA3dPycU4IO3KDFrhHIRx7B6Z1izOYe4imnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWNpOsLZkcpAUPUtHAzUxoFIKnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDYzODVjN2QtNWQ2MS0z YTBmLTg5ZWUtMmJiYTJiYTUwYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8SkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/+h0wK0G8S6XjEy/Hpnkm3Tr+EiRv17U8XUGYEt5kQvZ0uH2pr0SJa KnbaCDQEPVgraSo03p9zbSFUYmqRi81E2+TkYz6xZV/7JaxAlRaXT0AqNlwh6uZG iQRl9uxLbAxv/GM2uIaimXqTRV55CmVMh4ciJ9zTftLwj2miB1bOQv+G41LWNOLV 9Je+lUwOwJzoFYQDGSx2lKHPPw5Hjj28que5EREvygNeVh+eoJO5/8W/lmDNld+D 3nqWxpRKMbrONdv66qJi4DZTcjFk+RSLTKhB6/J56afG3NvfKdefh+ULl2nRcqZD hCcz9ylprfn5faeaO8ov387Zapu/cXc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:09 2025 by rpki-client