$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa File: 5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa (raw, json) Hash identifier: Fe/0R7+uU7ysmT+sa4UOCHi+47noZyosAyol5KEUT2U= Subject key identifier: A1:50:B9:59:5E:BF:C5:A6:33:81:8E:8B:8A:78:DE:A2:64:1E:98:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340BB77C6C49956B5AA7280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.207.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:bb:77:c6:c4:99:56:b5:aa:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=6ab92c98-92fa-4a4a-b620-9dba24928603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:81:1f:04:da:de:57:79:49:3b:09:19:e1: 99:23:c6:b3:3c:87:bf:0e:44:a1:2d:af:71:30:f8: dd:6f:aa:76:f0:18:25:10:50:28:4a:71:5a:13:1f: be:f5:5a:65:22:e8:96:b0:e2:0c:ce:dc:ae:c6:37: 61:ed:31:4f:d5:bb:81:83:cc:49:55:52:34:de:41: 3f:07:a2:58:61:94:1d:2c:d7:79:b5:75:67:ff:ad: a7:4b:6e:94:99:f6:e0:bf:8e:28:7f:bf:2f:e0:e5: 79:9b:52:af:03:e9:04:d4:b7:48:89:ed:f0:b9:7e: e3:73:01:60:f6:1e:a6:ef:fb:4f:dd:03:ae:2b:66: a0:17:a8:fe:6f:eb:45:b4:75:e5:a0:e6:ff:d6:67: cc:c3:70:20:1c:df:68:72:a0:fb:72:52:26:93:76: 2d:87:be:57:86:21:6b:53:81:84:7f:d2:35:2c:83: ca:f1:be:85:91:f3:c8:ba:a6:22:da:ea:bc:4d:c0: e6:89:e4:45:01:b3:c7:b3:4c:41:3c:d4:82:a6:2e: 99:0d:95:00:14:d3:19:f3:63:7f:64:09:2f:61:e1: c9:20:9d:5c:61:3b:50:11:86:4c:b9:5b:f2:55:bb: 35:64:3c:cb:85:9d:bb:11:95:c2:06:7b:90:05:15: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:50:B9:59:5E:BF:C5:A6:33:81:8E:8B:8A:78:DE:A2:64:1E:98:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ca722c5-aff2-3ecd-b6d4-20b288d8cb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:81:a0:83:ca:eb:3c:0b:0d:49:fd:1f:4e:06:dc:99:96:4c: b7:dc:58:fa:c5:98:f5:54:7a:31:3e:9c:6c:4d:ee:0b:c7:e7: 4f:ac:cc:50:f1:63:27:48:34:7e:26:23:a2:23:f1:0c:e8:ba: 7c:af:fe:47:a4:7f:53:49:7a:a0:53:d1:1c:ee:5f:68:c6:90: dd:5f:0d:21:0f:1d:67:30:29:14:f2:cc:2d:20:7b:61:cd:78: a9:37:be:74:cf:4e:49:b6:87:55:4c:ba:bf:a5:0e:24:69:3d: ee:e1:0a:91:0f:f0:8f:aa:82:f8:1b:af:2b:bd:da:b1:73:ed: f6:c5:af:62:39:4c:15:6f:71:31:4d:96:cb:11:65:3e:0c:84: dc:24:ef:3d:ba:31:6e:c2:4e:8a:04:c6:a4:23:8e:60:38:69: da:5a:97:0b:f4:b7:a4:03:c3:55:6d:0b:c2:6a:94:f3:d9:c3: 27:63:6e:5b:6d:e5:bb:ed:81:a9:d0:ee:3e:99:1a:e3:d9:c4: 42:5c:c3:1c:02:ce:94:e6:10:4c:0d:db:c3:e0:83:a9:26:e2: ba:45:10:19:28:cd:03:94:d5:05:e7:93:6f:f7:bb:0c:95:3e: c0:5d:9f:d5:16:1f:b1:00:9b:5c:cb:1f:2e:07:66:d4:67:a1: 46:49:88:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLt3xsSZVrWqcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk NmFiOTJjOTgtOTJmYS00YTRhLWI2MjAtOWRiYTI0OTI4NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XOBHwTa3ld5STsJGeGZI8azPIe/DkShLa9x MPjdb6p28BglEFAoSnFaEx++9VplIuiWsOIMztyuxjdh7TFP1buBg8xJVVI03kE/ B6JYYZQdLNd5tXVn/62nS26Umfbgv44of78v4OV5m1KvA+kE1LdIie3wuX7jcwFg 9h6m7/tP3QOuK2agF6j+b+tFtHXloOb/1mfMw3AgHN9ocqD7clImk3Yth75XhiFr U4GEf9I1LIPK8b6FkfPIuqYi2uq8TcDmieRFAbPHs0xBPNSCpi6ZDZUAFNMZ82N/ ZAkvYeHJIJ1cYTtQEYZMuVvyVbs1ZDzLhZ27EZXCBnuQBRUMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFQuVlev8WmM4GOi4p43qJkHpgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNhNzIyYzUtYWZmMi0z ZWNkLWI2ZDQtMjBiMjg4ZDhjYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKBoIPK6zwLDUn9H04G3JmWTLfcWPrFmPVUejE+nGxN7gvH50+szFDx YydINH4mI6Ij8Qzounyv/kekf1NJeqBT0RzuX2jGkN1fDSEPHWcwKRTyzC0ge2HN eKk3vnTPTkm2h1VMur+lDiRpPe7hCpEP8I+qgvgbryu92rFz7fbFr2I5TBVvcTFN lssRZT4MhNwk7z26MW7CTooExqQjjmA4adpalwv0t6QDw1VtC8JqlPPZwydjbltt 5bvtganQ7j6ZGuPZxEJcwxwCzpTmEEwN28Pgg6km4rpFEBkozQOU1QXnk2/3uwyV PsBdn9UWH7EAm1zLHy4HZtRnoUZJiI0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:00 2025 by rpki-client