$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/579262da-834a-3c86-8a3c-41edbfe90b1f.roa File: 579262da-834a-3c86-8a3c-41edbfe90b1f.roa (raw, json) Hash identifier: 0k8vslhOyGi+GT9E7RrYZHHfDeooAs712NasHV+/w98= Subject key identifier: 66:8E:1C:4D:0B:FD:DC:E0:8B:85:C4:EE:7D:FD:D9:6B:62:94:FF:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B63922B194F9C5852ECC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/579262da-834a-3c86-8a3c-41edbfe90b1f.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.221.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:63:92:2b:19:4f:9c:58:52:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=0c74a749-d0ee-48ea-9fec-d6ca05bacc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:1c:c7:84:bb:23:51:6f:2c:f1:d1:21:9e: 2f:dd:3e:13:88:c7:59:fb:ee:9c:5e:c4:6a:b3:52: e0:43:58:4b:23:ad:16:f2:d8:35:e2:11:a6:d9:45: 34:f8:79:04:3e:87:80:fe:15:2f:c5:ce:b9:57:38: bc:21:ba:fb:f8:9e:03:00:d1:23:c8:00:cd:de:63: 33:c9:0e:25:cc:9c:d5:ef:05:c6:d9:d6:ad:98:08: df:c3:2d:74:56:dc:f7:92:bf:56:15:43:72:0d:a2: bc:48:2b:b5:c1:b5:24:27:a4:46:d9:26:cc:3c:51: f8:c5:a7:e7:f7:ff:64:d7:ed:6a:7f:0f:9b:85:9e: bb:86:35:de:a5:de:6a:fc:f2:e0:08:f0:f6:f9:6c: 23:03:46:0f:be:31:c6:c6:ae:4b:33:67:0c:57:f9: 71:67:63:6a:b7:94:d5:1b:64:76:7a:ff:ac:0c:0a: 4b:c9:27:75:7f:c8:94:ea:de:18:c9:97:04:e3:1d: 82:1a:30:05:2e:e8:7d:5e:84:4b:ab:4c:58:fe:59: 8e:a6:7a:a2:ec:65:53:ca:5c:eb:47:57:a2:48:b6: e4:d5:40:ce:e5:e9:da:41:c7:93:42:1a:16:aa:a7: fa:7f:20:9c:dc:ad:1c:83:a0:00:59:63:ac:f6:d4: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8E:1C:4D:0B:FD:DC:E0:8B:85:C4:EE:7D:FD:D9:6B:62:94:FF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/579262da-834a-3c86-8a3c-41edbfe90b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:69:95:e1:0c:72:af:22:a9:bc:2d:66:03:29:e7:68:6d:24: d2:8b:5c:58:88:9d:dc:fa:36:8c:e0:62:a9:84:d9:82:5f:f6: f8:9d:0a:08:fe:d1:5a:0a:05:67:29:fc:d7:2b:73:06:5c:ef: 8d:42:e1:48:2a:2c:0f:2d:6d:62:54:c5:47:4b:f2:4e:71:82: c5:45:e3:20:ca:c2:aa:fb:0f:8e:89:7b:88:ad:da:c3:0e:a2: c7:94:dd:0f:27:54:fe:df:fc:c5:b6:8e:22:fa:90:e9:15:12: 39:81:89:75:e8:57:57:26:fa:e5:bb:53:3e:58:c5:57:e1:de: 79:09:01:21:0b:97:31:d6:0a:90:7f:09:c9:94:14:00:30:c5: b7:4e:ab:4b:9d:81:85:e7:ff:73:11:64:bf:14:f8:66:9e:2c: 6e:d4:3d:98:03:3d:94:c1:30:ff:94:0c:00:97:29:7b:c3:a8: e6:e3:ca:0f:9a:a8:0f:fa:5f:1f:ef:5d:6b:44:b8:40:42:2b: a0:5a:56:25:62:4a:06:16:6f:cf:96:02:60:3d:81:38:2f:0d: 82:64:d8:df:be:4b:62:23:87:ad:62:ef:17:90:84:85:46:26: 8f:8e:30:d3:6b:4e:16:cd:c7:0e:8a:7c:f1:7e:de:02:fc:6c: 37:2a:84:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC2OSKxlPnFhS7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MGM3NGE3NDktZDBlZS00OGVhLTlmZWMtZDZjYTA1YmFjYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WMcx4S7I1FvLPHRIZ4v3T4TiMdZ++6cXsRq s1LgQ1hLI60W8tg14hGm2UU0+HkEPoeA/hUvxc65Vzi8Ibr7+J4DANEjyADN3mMz yQ4lzJzV7wXG2datmAjfwy10Vtz3kr9WFUNyDaK8SCu1wbUkJ6RG2SbMPFH4xafn 9/9k1+1qfw+bhZ67hjXepd5q/PLgCPD2+WwjA0YPvjHGxq5LM2cMV/lxZ2Nqt5TV G2R2ev+sDApLySd1f8iU6t4YyZcE4x2CGjAFLuh9XoRLq0xY/lmOpnqi7GVTylzr R1eiSLbk1UDO5enaQceTQhoWqqf6fyCc3K0cg6AAWWOs9tQNRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaOHE0L/dzgi4XE7n392WtilP+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc5MjYyZGEtODM0YS0z Yzg2LThhM2MtNDFlZGJmZTkwYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF91QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5pleEMcq8iqbwtZgMp52htJNKLXFiIndz6NozgYqmE2YJf9vidCgj+ 0VoKBWcp/NcrcwZc741C4UgqLA8tbWJUxUdL8k5xgsVF4yDKwqr7D46Je4it2sMO oseU3Q8nVP7f/MW2jiL6kOkVEjmBiXXoV1cm+uW7Uz5YxVfh3nkJASELlzHWCpB/ CcmUFAAwxbdOq0udgYXn/3MRZL8U+GaeLG7UPZgDPZTBMP+UDACXKXvDqObjyg+a qA/6Xx/vXWtEuEBCK6BaViViSgYWb8+WAmA9gTgvDYJk2N++S2Ijh61i7xeQhIVG Jo+OMNNrThbNxw6KfPF+3gL8bDcqhNg= -----END CERTIFICATE-----Generated at Sun Feb 16 21:01:56 2025 by rpki-client