$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa File: 54993026-2414-3974-a921-0ee2a6a9a213.roa (raw, json) Hash identifier: nNC2nuiCAIpf6y+UG9V9jZ8tNsF6+qXxJ2DBw6F5iMo= Subject key identifier: A2:CC:32:45:85:C8:D7:9B:FB:90:99:E8:46:68:E6:64:8A:52:F1:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8C00A4A585D1213DB300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.211.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8c:00:a4:a5:85:d1:21:3d:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=f5ec5fdb-0990-44e4-9315-e086faae2533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:4f:fd:ab:fd:2e:8f:83:7d:d2:48:79:9f: 8e:77:e5:7e:74:82:c8:fb:7e:cc:d4:11:08:8c:c5: 89:a8:05:65:75:8a:af:6a:00:1a:b7:da:37:87:28: a7:98:d1:9e:36:57:d2:32:dd:eb:aa:14:cd:15:6e: 22:74:d2:7b:b8:f1:40:cf:e2:ed:71:7d:f7:5a:fe: 24:cf:5c:c9:c6:73:87:0b:e4:51:a5:b2:27:40:f9: 22:f6:5d:36:e0:1e:25:7d:f1:72:38:c6:f3:25:70: cd:66:ec:76:57:fa:f6:f0:c5:05:7f:03:39:70:44: bf:fb:e1:a0:0b:fb:7f:e9:40:32:ba:fa:fc:86:29: e3:eb:9c:91:26:bc:c7:21:ef:c1:e5:3f:6b:8f:52: 88:1f:63:05:16:27:0a:74:f5:4b:72:1a:10:83:45: b7:ac:4b:8d:79:16:a1:59:d3:f9:9e:0c:cc:cf:06: e9:35:1c:22:b5:85:c9:53:b6:6c:51:d6:fe:73:ef: d4:33:46:bf:72:91:b7:22:29:e0:ea:25:ba:1a:7c: 08:ed:5c:ca:95:47:6e:b8:43:2c:d6:8c:27:2b:56: 1e:79:44:44:84:75:9b:30:3c:ba:9d:ad:c2:da:3f: 62:c2:7c:b4:a9:02:37:fe:9e:5d:84:60:96:72:8a: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:32:45:85:C8:D7:9B:FB:90:99:E8:46:68:E6:64:8A:52:F1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54993026-2414-3974-a921-0ee2a6a9a213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:b7:a9:c4:32:f6:0c:43:d0:2d:ec:a6:a6:d8:3c:6a:25: 85:1f:9e:3f:d0:80:a8:81:e2:b7:4d:a5:e6:6b:29:18:9d:49: 06:99:17:48:a6:7e:80:27:51:d8:42:5f:c3:09:15:66:55:cd: 0d:e2:05:b3:8d:1d:3d:00:d4:93:fa:ca:fa:6c:d6:50:95:55: e6:3b:e9:43:eb:ea:e7:02:1a:fa:c3:4b:87:95:5c:bf:ba:ba: 5b:c2:cf:dd:7d:de:9e:ac:8e:c0:4c:c9:28:52:91:8d:be:dd: f3:2a:87:4f:74:d6:c8:92:f3:ee:cb:6d:43:f8:0b:3e:82:b0: 5f:4e:2c:e0:c4:7d:86:3b:79:6c:ed:4b:41:64:83:c9:68:46: 3e:80:fc:04:1c:94:ef:74:de:be:06:27:8c:73:46:35:ce:4d: dd:5c:a0:46:5e:e3:95:aa:73:0f:fa:ff:13:c1:ec:31:f1:8f: 67:44:93:71:77:6e:a6:b1:ff:b5:e9:66:33:62:2f:68:d8:84: 77:79:59:3e:e0:56:10:01:7d:05:4b:8e:99:39:bf:80:36:ab: e1:35:df:94:14:51:61:32:95:97:44:2c:70:3a:a0:86:2d:da: d0:4f:41:e3:3d:c7:85:a5:04:d7:b5:8b:f9:20:be:d4:3f:53: da:70:63:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4wApKWF0SE9swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZjVlYzVmZGItMDk5MC00NGU0LTkzMTUtZTA4NmZhYWUyNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi61P/av9Lo+DfdJIeZ+Od+V+dILI+37M1BEI jMWJqAVldYqvagAat9o3hyinmNGeNlfSMt3rqhTNFW4idNJ7uPFAz+LtcX33Wv4k z1zJxnOHC+RRpbInQPki9l024B4lffFyOMbzJXDNZux2V/r28MUFfwM5cES/++Gg C/t/6UAyuvr8hinj65yRJrzHIe/B5T9rj1KIH2MFFicKdPVLchoQg0W3rEuNeRah WdP5ngzMzwbpNRwitYXJU7ZsUdb+c+/UM0a/cpG3Iing6iW6GnwI7VzKlUduuEMs 1ownK1YeeUREhHWbMDy6na3C2j9iwny0qQI3/p5dhGCWcoo8/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLMMkWFyNeb+5CZ6EZo5mSKUvFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ5OTMwMjYtMjQxNC0z OTc0LWE5MjEtMGVlMmE2YTlhMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9MOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqct6nEMvYMQ9At7Kam2DxqJYUfnj/QgKiB4rdNpeZrKRidSQaZF0im foAnUdhCX8MJFWZVzQ3iBbONHT0A1JP6yvps1lCVVeY76UPr6ucCGvrDS4eVXL+6 ulvCz9193p6sjsBMyShSkY2+3fMqh0901siS8+7LbUP4Cz6CsF9OLODEfYY7eWzt S0Fkg8loRj6A/AQclO903r4GJ4xzRjXOTd1coEZe45Wqcw/6/xPB7DHxj2dEk3F3 bqax/7XpZjNiL2jYhHd5WT7gVhABfQVLjpk5v4A2q+E135QUUWEylZdELHA6oIYt 2tBPQeM9x4WlBNe1i/kgvtQ/U9pwY5U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:42 2025 by rpki-client