$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa File: 588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa (raw, json) Hash identifier: NSW08x0VvHU0ASKwU36Q8EFB+9mSFl1ZjW/g7KqsxH8= Subject key identifier: D6:26:45:C9:84:C2:A5:77:9F:5B:15:6A:39:59:33:AD:B2:E3:B4:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340B5ED129ED38E038DDC20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.203.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b5:ed:12:9e:d3:8e:03:8d:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=d54d5a43-b9a0-427e-9d77-5a6e559868f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:54:b3:58:93:04:6c:a2:ec:29:4d:d5:db: 3f:9c:9a:0d:5e:27:a6:6b:20:62:b8:13:d1:b1:b8: 20:9c:b1:34:53:9c:fa:ae:a0:c3:3d:1c:61:52:7c: 8f:54:6c:8c:21:d6:24:20:3f:39:42:1a:1e:0a:bc: db:fb:9e:34:60:fc:ac:3b:5c:5e:82:e4:80:e9:06: ef:ce:cb:31:bd:e5:d9:32:fd:2c:3e:6d:20:0d:e9: 03:d4:05:a0:9b:f4:49:b0:6d:ce:02:30:1a:04:78: ac:40:29:c7:5e:3f:ce:66:8d:ec:7a:d2:68:37:d2: 49:41:8e:dd:d5:26:a6:e5:a9:f1:b1:cd:1b:29:c0: 44:20:f7:3a:7c:6d:c1:6f:45:8c:6a:ed:49:f5:be: c8:73:45:02:9b:7b:74:23:00:3d:9f:79:3b:c6:ee: 42:9f:fe:ca:ef:f5:a6:5f:de:72:c6:19:a1:29:09: 4e:98:00:7e:80:a5:60:a1:98:49:09:5d:84:0c:09: ec:f6:4c:e6:2d:48:31:87:4c:e2:05:fe:fa:32:f1: ca:07:4c:91:5c:36:c4:d7:8e:7d:0a:4c:26:fc:26: 96:70:9a:13:88:91:28:92:06:94:0a:85:c1:fc:6d: 57:47:92:fb:70:06:1d:b8:9a:1b:55:c8:a6:ff:fe: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:45:C9:84:C2:A5:77:9F:5B:15:6A:39:59:33:AD:B2:E3:B4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b8:8f:66:e9:52:c9:62:66:aa:12:5e:f3:a5:bb:af:14:b5: fd:d9:0c:f0:56:8b:3b:49:7e:cc:e5:d4:aa:cc:f7:9a:c2:fa: c1:89:95:85:83:34:0d:a9:2e:9e:d8:fc:99:e3:90:08:8d:a1: 22:74:e6:84:76:f0:26:fe:60:93:75:9a:9d:9f:89:8d:e1:06: c1:32:da:a1:af:62:15:72:22:64:49:8e:b5:94:df:f7:fc:9b: 5b:3a:86:c0:bb:c6:89:ec:15:cc:f9:66:5e:89:a2:df:80:8b: 5b:f8:32:b8:ec:5d:d5:6e:d7:0f:46:18:6a:6d:48:02:3c:20: 70:de:41:9e:b4:7a:a0:07:52:fc:3a:06:d3:21:38:be:37:40: 49:b5:e1:50:cd:90:0f:f1:98:4e:a9:e7:d0:5f:77:e7:a7:16: 57:64:4f:3c:c9:59:94:b7:c3:bd:09:6f:68:3e:e3:c1:68:a0: 48:4d:97:7e:c8:55:40:55:2c:ae:c2:92:cf:78:b7:55:cd:4d: 7c:6c:32:22:db:17:1c:32:0d:b9:bc:82:9e:df:f7:c9:17:71: be:a2:a8:eb:6d:9f:73:b8:48:dd:86:3b:c6:85:01:0d:8c:5b: eb:9d:7a:71:6d:ee:fb:6e:c2:94:70:bd:0f:cf:82:c1:24:6a: 71:89:a0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLXtEp7TjgON3CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZDU0ZDVhNDMtYjlhMC00MjdlLTlkNzctNWE2ZTU1OTg2OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGhUs1iTBGyi7ClN1ds/nJoNXiemayBiuBPR sbggnLE0U5z6rqDDPRxhUnyPVGyMIdYkID85QhoeCrzb+540YPysO1xeguSA6Qbv zssxveXZMv0sPm0gDekD1AWgm/RJsG3OAjAaBHisQCnHXj/OZo3setJoN9JJQY7d 1Sam5anxsc0bKcBEIPc6fG3Bb0WMau1J9b7Ic0UCm3t0IwA9n3k7xu5Cn/7K7/Wm X95yxhmhKQlOmAB+gKVgoZhJCV2EDAns9kzmLUgxh0ziBf76MvHKB0yRXDbE1459 Ckwm/CaWcJoTiJEokgaUCoXB/G1XR5L7cAYduJobVcim//7vYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYmRcmEwqV3n1sVajlZM62y47RkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTg4ZGM3YzEtODUzNC0z YzUwLWIxNmQtNzMwZWNjMGU4YmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8syMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB64j2bpUsliZqoSXvOlu68Utf3ZDPBWiztJfszl1KrM95rC+sGJlYWD NA2pLp7Y/JnjkAiNoSJ05oR28Cb+YJN1mp2fiY3hBsEy2qGvYhVyImRJjrWU3/f8 m1s6hsC7xonsFcz5Zl6Jot+Ai1v4MrjsXdVu1w9GGGptSAI8IHDeQZ60eqAHUvw6 BtMhOL43QEm14VDNkA/xmE6p59Bfd+enFldkTzzJWZS3w70Jb2g+48FooEhNl37I VUBVLK7Cks94t1XNTXxsMiLbFxwyDbm8gp7f98kXcb6iqOttn3O4SN2GO8aFAQ2M W+udenFt7vtuwpRwvQ/PgsEkanGJoBc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:34:45 2025 by rpki-client