$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b672e97-df6f-3a1e-bbbb-2298c7793177.roa File: 4b672e97-df6f-3a1e-bbbb-2298c7793177.roa (raw, json) Hash identifier: OQzngI7qGwNUxGedAEOroCJ5sxQIGqhgM0uvpZdUHhg= Subject key identifier: 92:3D:B0:7C:52:3D:37:E3:9B:F8:1F:88:46:B8:E3:84:80:59:D7:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490021513E529696E60426C3B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b672e97-df6f-3a1e-bbbb-2298c7793177.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 24319 IP address blocks: 23.194.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:51:3e:52:96:96:e6:04:26:c3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=560731e0-1793-40dd-b77e-d048a566aab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:53:f8:e4:d9:bc:f1:00:e5:37:9b:c4:0a: f3:e1:eb:1d:b3:d6:29:82:ec:03:aa:14:a9:27:51: a7:33:1b:9b:c4:15:e7:55:8a:ef:a6:73:c4:b5:ad: c1:d6:d7:0b:25:4c:52:28:61:8f:47:03:38:51:e6: 77:f9:49:1a:ae:5b:a7:19:05:b4:32:cb:6b:a0:81: 34:c5:a7:89:ca:fb:1f:0b:f0:00:f9:3d:08:5c:9b: 32:81:85:47:da:eb:41:74:7d:9a:81:8a:61:e6:5a: c6:6a:04:2c:66:55:89:97:11:cd:b9:89:aa:72:8f: 25:f8:2b:d6:fb:da:33:39:93:9e:a8:9f:f2:dc:f2: ce:9b:94:32:b5:78:8a:ba:86:a6:13:01:7d:34:94: e7:ff:62:31:f9:d4:c4:c0:51:52:43:9b:0e:c0:c0: 12:bc:63:51:04:ec:84:32:06:c0:0d:10:ee:2d:3b: b0:d3:c6:62:af:d8:36:7b:25:6f:3f:b6:12:11:27: a1:ff:61:cc:79:fb:48:8c:05:bb:61:aa:55:da:1f: f2:52:e1:17:15:cc:b5:d6:0a:60:93:81:8b:6a:c1: 3f:89:8b:4d:12:ca:5d:0f:61:81:07:3a:7d:b2:0b: 95:97:d5:2d:c0:9f:21:60:ad:9b:6f:d5:c9:46:e8: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:B0:7C:52:3D:37:E3:9B:F8:1F:88:46:B8:E3:84:80:59:D7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b672e97-df6f-3a1e-bbbb-2298c7793177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:07:cc:a1:f2:c2:e4:01:8c:a4:c4:f8:07:90:4d:ff:90:3d: 9e:ae:44:42:57:c1:2c:24:26:d3:ba:93:8a:fb:32:de:e1:3c: 68:5c:56:33:13:cd:21:a8:6a:0c:d8:5b:e0:a3:c6:7b:c5:bb: 7c:7e:99:de:46:40:16:36:e1:12:14:68:36:37:f9:75:20:b1: 12:bf:22:a7:c2:55:d6:78:16:d1:bf:e0:85:99:c9:b2:c4:fc: 53:1a:74:18:71:24:bc:c8:23:d5:47:c7:e3:57:71:74:d3:d2: 81:bd:41:23:3e:63:a4:b8:5b:07:a0:97:f3:c5:1b:01:b6:ed: 4b:0b:a5:d5:b0:c1:92:be:dc:23:9c:24:3e:9c:a8:72:fa:d1: 44:23:18:78:c7:8c:50:cb:3b:dd:c4:0f:38:a0:e7:a3:29:3b: e3:b4:cd:dc:8e:20:5a:9c:cb:77:55:6d:07:c5:f1:3b:b7:73: 9f:31:37:d4:40:72:66:d6:f8:3b:77:c8:b4:99:e3:0d:ea:28: ab:54:a2:2c:f5:84:7a:e2:53:b4:19:b2:8b:31:d7:da:eb:3e: 96:2b:87:78:c2:12:91:73:65:f4:dc:b7:db:ff:cc:cc:94:61: 8b:06:83:86:a7:69:96:42:c6:18:d0:46:56:45:f0:bc:94:11: 2a:2b:27:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVE+UpaW5gQmw7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NTYwNzMxZTAtMTc5My00MGRkLWI3N2UtZDA0OGE1NjZhYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjVT+OTZvPEA5TebxArz4esds9YpguwDqhSp J1GnMxubxBXnVYrvpnPEta3B1tcLJUxSKGGPRwM4UeZ3+UkarlunGQW0MstroIE0 xaeJyvsfC/AA+T0IXJsygYVH2utBdH2agYph5lrGagQsZlWJlxHNuYmqco8l+CvW +9ozOZOeqJ/y3PLOm5QytXiKuoamEwF9NJTn/2Ix+dTEwFFSQ5sOwMASvGNRBOyE MgbADRDuLTuw08Zir9g2eyVvP7YSESeh/2HMeftIjAW7YapV2h/yUuEXFcy11gpg k4GLasE/iYtNEspdD2GBBzp9sguVl9UtwJ8hYK2bb9XJRuhE3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI9sHxSPTfjm/gfiEa444SAWddLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI2NzJlOTctZGY2Zi0z YTFlLWJiYmItMjI5OGM3NzkzMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAHzKHywuQBjKTE+AeQTf+QPZ6uREJXwSwkJtO6k4r7Mt7hPGhcVjMT zSGoagzYW+CjxnvFu3x+md5GQBY24RIUaDY3+XUgsRK/IqfCVdZ4FtG/4IWZybLE /FMadBhxJLzII9VHx+NXcXTT0oG9QSM+Y6S4Wwegl/PFGwG27UsLpdWwwZK+3COc JD6cqHL60UQjGHjHjFDLO93EDzig56MpO+O0zdyOIFqcy3dVbQfF8Tu3c58xN9RA cmbW+Dt3yLSZ4w3qKKtUoiz1hHriU7QZsosx19rrPpYrh3jCEpFzZfTct9v/zMyU YYsGg4anaZZCxhjQRlZF8LyUESorJ3s= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:59 2025 by rpki-client