$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa File: 5ab9885b-573a-3444-ad12-789f4bec8d6f.roa (raw, json) Hash identifier: OntGsTM+LjzDKXGQYJ7JSc7jV3i/UWa9WxycKBeYVIc= Subject key identifier: 5A:77:B2:57:BB:46:A0:9C:44:35:7D:4F:A1:92:82:10:DD:45:0D:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C622A4BF97ADFA326E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.194.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c6:22:a4:bf:97:ad:fa:32:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=1b9a5a9c-1696-4671-bb59-87d7744a57b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:d8:3d:86:6b:2c:20:52:39:56:f5:02:f8: 59:64:20:9b:2f:e5:cf:d7:e6:a2:f3:b4:4f:b7:08: 98:63:04:87:54:17:e4:ee:1c:47:af:79:c4:2f:38: a2:2c:e7:ec:f4:3f:72:12:e5:51:20:b0:01:1d:38: 44:2a:bd:27:1a:74:14:85:15:ab:e7:7b:02:8b:3b: c3:56:56:5f:bf:73:5b:b8:02:5e:6d:23:a2:9e:1a: ae:be:fc:8d:91:95:d7:ce:28:ac:bc:4a:94:7c:ac: 55:77:9b:70:c1:f3:74:a5:88:e1:5a:31:79:87:82: 06:61:16:a5:95:2b:77:75:84:be:e7:4e:71:f0:9c: 38:87:ad:93:10:44:fb:e9:b1:05:80:2c:28:a3:ef: 1c:db:3a:23:76:03:64:f7:01:07:93:97:8f:a4:1b: 51:59:02:34:68:42:d6:6e:8b:fa:5e:51:07:81:b8: 7e:54:74:c6:ba:32:c2:60:bc:79:ae:74:e4:04:a5: 91:b8:80:22:c5:24:21:a3:28:b4:f0:2d:72:58:3b: 58:60:6e:b9:3c:dc:24:ca:73:b3:35:47:a7:b4:45: a2:90:ef:9a:7f:68:32:76:dc:5e:69:03:46:cc:c3: 54:3a:03:1b:5b:2e:37:1c:2d:b0:37:8a:23:f2:f2: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:77:B2:57:BB:46:A0:9C:44:35:7D:4F:A1:92:82:10:DD:45:0D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3b:f7:e0:0f:7a:43:ba:75:7e:aa:61:20:44:9d:97:ae:88: 64:00:84:b7:5e:1e:26:79:49:d1:08:34:bc:8d:c2:67:2a:5a: fa:c7:21:0a:48:a2:5a:b2:36:65:a8:2c:30:a0:96:6f:60:9c: 81:1f:5e:e6:9f:69:f1:85:53:de:28:f6:97:71:3e:16:0a:2b: b7:0e:3c:25:af:7b:fb:98:ba:51:57:87:bd:0c:5d:77:53:2c: 7c:d0:19:e3:36:5c:3d:86:c1:6f:c2:f4:11:f3:3c:7b:f3:01: d1:55:58:49:03:8f:b4:be:04:5c:27:96:e9:ed:c3:ad:54:21: 62:e1:89:3d:f9:d6:27:be:02:7d:53:b2:ea:c1:dc:e8:97:8a: ca:c5:21:40:15:da:70:75:45:1f:95:06:2d:c4:1d:af:62:15: a8:21:e9:ff:ad:00:94:02:a2:ff:36:be:95:c2:21:95:cb:b9: 30:0a:d1:13:65:98:ee:cf:bb:93:4c:40:73:ed:09:d4:b6:58: fc:66:fb:c2:99:3f:c6:fa:27:f8:8b:43:f1:de:59:3c:0d:51: cc:ee:ac:09:c1:35:ab:2a:c0:60:ea:1f:a9:d3:28:63:f7:b7: d2:df:69:69:be:e8:e1:f2:48:9c:91:b8:d9:51:c8:62:d0:06: 23:54:20:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMYipL+XrfoybgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MWI5YTVhOWMtMTY5Ni00NjcxLWJiNTktODdkNzc0NGE1N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoLYPYZrLCBSOVb1AvhZZCCbL+XP1+ai87RP twiYYwSHVBfk7hxHr3nELziiLOfs9D9yEuVRILABHThEKr0nGnQUhRWr53sCizvD VlZfv3NbuAJebSOinhquvvyNkZXXziisvEqUfKxVd5twwfN0pYjhWjF5h4IGYRal lSt3dYS+505x8Jw4h62TEET76bEFgCwoo+8c2zojdgNk9wEHk5ePpBtRWQI0aELW bov6XlEHgbh+VHTGujLCYLx5rnTkBKWRuIAixSQhoyi08C1yWDtYYG65PNwkynOz NUentEWikO+af2gydtxeaQNGzMNUOgMbWy43HC2wN4oj8vIXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp3sle7RqCcRDV9T6GSghDdRQ3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFiOTg4NWItNTczYS0z NDQ0LWFkMTItNzg5ZjRiZWM4ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8KKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU79+APekO6dX6qYSBEnZeuiGQAhLdeHiZ5SdEINLyNwmcqWvrHIQpI olqyNmWoLDCglm9gnIEfXuafafGFU94o9pdxPhYKK7cOPCWve/uYulFXh70MXXdT LHzQGeM2XD2GwW/C9BHzPHvzAdFVWEkDj7S+BFwnluntw61UIWLhiT351ie+An1T surB3OiXisrFIUAV2nB1RR+VBi3EHa9iFagh6f+tAJQCov82vpXCIZXLuTAK0RNl mO7Pu5NMQHPtCdS2WPxm+8KZP8b6J/iLQ/HeWTwNUczurAnBNasqwGDqH6nTKGP3 t9LfaWm+6OHySJyRuNlRyGLQBiNUIJo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:56 2025 by rpki-client