$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56f4536e-6f5a-3db6-8015-523ec6edceb5.roa File: 56f4536e-6f5a-3db6-8015-523ec6edceb5.roa (raw, json) Hash identifier: ceBr0tWvs9DWz3+D4FzOobxYhnMAz8E/Ri7M5Fh212Q= Subject key identifier: 20:CF:9F:E2:87:E5:AF:9F:1A:99:30:41:93:54:8F:A6:AE:64:11:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DB4E5F941C7677A8BDA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56f4536e-6f5a-3db6-8015-523ec6edceb5.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.204.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:db:4e:5f:94:1c:76:77:a8:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=d745b87d-c6b3-454e-a941-1bfe20044591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:46:f5:37:af:8e:4f:d2:54:48:aa:ce:27: 70:d3:a4:fa:cf:d3:38:6d:2b:b9:45:16:0c:83:7e: 0a:c5:d8:96:2f:8d:9c:ec:c1:5f:b2:60:92:68:1d: 7f:fc:00:ea:78:be:26:fc:c5:0d:43:21:91:80:b9: bf:b1:6b:fd:b4:2f:38:39:84:1d:df:c1:c0:6f:8f: 9e:9b:21:df:92:53:b4:f3:2b:78:fc:9c:40:a6:ad: b6:41:d1:50:d4:d2:42:76:11:b9:c6:5b:e3:c4:36: ec:89:89:09:65:71:8f:cb:2f:75:3a:ce:43:c9:ce: 79:b6:90:70:24:41:02:98:a9:4b:cb:cd:cc:22:05: a0:20:9b:3b:21:a8:52:35:f4:eb:2e:6c:14:44:49: 67:d3:aa:83:91:79:d6:8e:d5:10:f3:73:36:34:63: da:f6:1a:55:6f:45:cc:02:57:cb:a2:c4:6e:d4:f7: 9b:61:15:44:e0:dc:5f:4b:ab:24:7a:c0:d4:7f:aa: a3:62:39:40:0e:7d:a8:34:9d:f3:28:f9:f6:eb:03: d9:c1:9e:e3:c7:e0:eb:c3:62:65:bb:2f:f3:10:6e: 09:45:d1:16:ae:10:1c:fb:0c:6c:8f:de:15:d7:e3: 1a:29:57:b0:79:cc:8e:dc:d2:e5:4a:07:4c:04:19: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:9F:E2:87:E5:AF:9F:1A:99:30:41:93:54:8F:A6:AE:64:11:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56f4536e-6f5a-3db6-8015-523ec6edceb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2c:dd:07:32:04:c6:66:4e:2b:79:99:06:de:b7:2e:14:1a: af:2d:9d:52:45:16:47:18:86:06:18:c4:40:0e:67:24:f4:f9: 2a:67:90:b8:be:74:1c:47:74:12:ff:a9:c7:37:4b:35:15:05: d3:78:0a:4a:3e:8a:36:1c:67:4e:77:69:42:c1:f0:0d:01:5d: e6:00:bc:c0:fe:ca:c6:0b:27:06:1e:f6:35:cc:e8:af:3c:f7: c1:d2:13:8c:5f:ba:bf:71:39:79:b7:cd:dc:4b:87:6c:3c:4a: d8:a1:47:6b:f1:80:7f:7b:ec:87:e8:ff:24:14:69:ea:fc:c9: 19:3b:7e:87:18:7e:e4:e1:11:7f:4b:01:42:98:5a:97:46:8a: ac:7c:35:89:1b:23:ab:f4:e3:47:0c:e5:61:5c:88:b2:52:bf: 14:18:7a:d4:41:eb:8d:07:ee:c5:9c:5a:32:6c:6d:d8:6d:8b: c1:80:16:c1:c9:56:d2:79:3f:83:6d:40:a1:b1:25:c8:62:1a: 45:9d:ce:79:dc:d6:9e:87:bf:41:09:db:a5:87:50:75:a8:52: d6:96:14:09:f1:83:a4:a6:a3:60:08:7b:67:e9:36:f4:a3:ee: 50:33:f3:df:d8:1d:e9:c6:3b:5f:f2:36:3f:05:03:0e:98:8b: 1e:b1:ba:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NtOX5QcdneovaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZDc0NWI4N2QtYzZiMy00NTRlLWE5NDEtMWJmZTIwMDQ0NTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlpG9Tevjk/SVEiqzidw06T6z9M4bSu5RRYM g34KxdiWL42c7MFfsmCSaB1//ADqeL4m/MUNQyGRgLm/sWv9tC84OYQd38HAb4+e myHfklO08yt4/JxApq22QdFQ1NJCdhG5xlvjxDbsiYkJZXGPyy91Os5Dyc55tpBw JEECmKlLy83MIgWgIJs7IahSNfTrLmwUREln06qDkXnWjtUQ83M2NGPa9hpVb0XM AlfLosRu1PebYRVE4NxfS6skesDUf6qjYjlADn2oNJ3zKPn26wPZwZ7jx+Drw2Jl uy/zEG4JRdEWrhAc+wxsj94V1+MaKVewecyO3NLlSgdMBBn9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDPn+KH5a+fGpkwQZNUj6auZBFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZmNDUzNmUtNmY1YS0z ZGI2LTgwMTUtNTIzZWM2ZWRjZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQs3QcyBMZmTit5mQbety4UGq8tnVJFFkcYhgYYxEAOZyT0+SpnkLi+ dBxHdBL/qcc3SzUVBdN4Cko+ijYcZ053aULB8A0BXeYAvMD+ysYLJwYe9jXM6K88 98HSE4xfur9xOXm3zdxLh2w8StihR2vxgH977Ifo/yQUaer8yRk7focYfuThEX9L AUKYWpdGiqx8NYkbI6v040cM5WFciLJSvxQYetRB640H7sWcWjJsbdhti8GAFsHJ VtJ5P4NtQKGxJchiGkWdznnc1p6Hv0EJ26WHUHWoUtaWFAnxg6Smo2AIe2fpNvSj 7lAz89/YHenGO1/yNj8FAw6Yix6xuoU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:21 2025 by rpki-client