$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa File: 5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa (raw, json) Hash identifier: fNb+1gSEEl29WTm4dpwByO4VRPnkArEIVgwFb/WyfA0= Subject key identifier: 4B:F3:15:AC:8E:B7:E7:27:B9:26:79:15:F1:29:B6:B0:64:A9:2C:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C9E2AD81F3E2ADF22AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.196.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c9:e2:ad:81:f3:e2:ad:f2:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=7f0d0dba-7872-4b3b-bef9-e590134cd91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9a:f3:1c:1f:bc:9e:53:19:95:bf:44:f1:59: b2:04:fa:0e:a6:a6:2f:0d:03:f2:4f:2a:2e:11:ed: 1a:bf:0d:e3:38:c4:cd:6c:4b:d7:f8:58:12:22:c6: 8a:11:52:35:60:32:99:e5:6d:6a:b3:64:fe:13:36: c3:cd:e0:5d:de:b6:4a:46:ee:e5:7e:14:01:5f:6b: bd:29:dc:cf:ad:a3:48:cd:77:32:86:a8:59:ae:01: 97:fb:d1:0e:f5:bf:4b:9c:42:fc:14:74:95:e5:68: e4:02:38:54:57:a8:1a:53:d1:72:66:28:90:38:8d: 44:1d:0f:30:19:26:6b:9d:84:d0:d1:62:3c:ec:30: bb:0b:1a:35:86:6d:90:45:76:50:37:da:1c:d8:f9: 33:aa:f5:5b:00:45:b1:ca:8e:88:3b:37:47:82:4e: e9:90:bb:a1:09:b0:33:4f:db:03:e4:a6:c2:24:88: db:b9:84:4c:76:6b:36:1b:13:3d:bf:88:06:f2:5c: 93:e2:4d:1c:de:1c:06:52:83:89:a5:67:25:1f:25: 06:fd:8f:27:61:e1:00:6c:ef:f5:d1:3f:e6:b9:64: cb:27:a9:c7:01:e6:c2:90:1c:11:df:46:f9:03:35: 6f:86:77:78:64:a0:b9:2e:ae:76:b3:da:6e:16:b1: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:15:AC:8E:B7:E7:27:B9:26:79:15:F1:29:B6:B0:64:A9:2C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c4:06:c1:eb:96:b9:31:fb:2a:09:2c:90:04:48:c8:f8:41: c5:64:58:bd:aa:0d:9d:36:14:ec:aa:27:b5:38:47:cd:67:61: b2:41:42:83:f9:e7:31:85:7c:72:03:f9:f0:3a:7e:ad:0d:4a: 53:c0:8b:9d:4a:dc:cb:a1:8c:d3:f2:63:92:87:f5:de:79:7a: 09:ea:11:3d:ef:3f:10:d9:15:4a:21:08:8a:ea:9d:47:f2:b6: ca:d1:40:12:52:0f:e8:3f:c7:fc:9a:07:b6:91:44:ad:67:8e: be:b6:56:b1:12:a3:c4:99:59:ae:07:75:b2:f6:f2:05:c6:74: 9d:22:30:64:4b:d1:5e:05:30:24:aa:e1:ea:01:39:9e:e5:3c: e9:53:a3:80:ac:34:3e:83:09:8e:d6:ae:b0:05:63:7b:3f:25: 41:53:27:ce:6b:55:10:06:c2:6c:34:4e:2c:5d:a0:05:c3:eb: 59:6c:bf:f6:7b:c8:0f:4c:4a:ce:c4:55:4b:2d:d7:52:9f:69: 47:f1:8f:16:8b:ff:9c:65:04:51:08:bd:76:24:86:e5:ef:c6: 2b:9e:79:e0:b0:9e:14:98:55:00:ba:dd:d4:e8:04:7e:8d:26: 31:4d:b6:81:e3:03:cd:67:e7:53:7a:7d:00:99:10:7b:c6:9d: ec:05:31:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMnirYHz4q3yKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk N2YwZDBkYmEtNzg3Mi00YjNiLWJlZjktZTU5MDEzNGNkOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5rzHB+8nlMZlb9E8VmyBPoOpqYvDQPyTyou Ee0avw3jOMTNbEvX+FgSIsaKEVI1YDKZ5W1qs2T+EzbDzeBd3rZKRu7lfhQBX2u9 KdzPraNIzXcyhqhZrgGX+9EO9b9LnEL8FHSV5WjkAjhUV6gaU9FyZiiQOI1EHQ8w GSZrnYTQ0WI87DC7Cxo1hm2QRXZQN9oc2PkzqvVbAEWxyo6IOzdHgk7pkLuhCbAz T9sD5KbCJIjbuYRMdms2GxM9v4gG8lyT4k0c3hwGUoOJpWclHyUG/Y8nYeEAbO/1 0T/muWTLJ6nHAebCkBwR30b5AzVvhnd4ZKC5Lq52s9puFrERRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvzFayOt+cnuSZ5FfEptrBkqSzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1NzdjYjEtOTc3OC0z NGJiLTlhMjktZWJkZjBlOWMwN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8TYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDEBsHrlrkx+yoJLJAESMj4QcVkWL2qDZ02FOyqJ7U4R81nYbJBQoP5 5zGFfHID+fA6fq0NSlPAi51K3MuhjNPyY5KH9d55egnqET3vPxDZFUohCIrqnUfy tsrRQBJSD+g/x/yaB7aRRK1njr62VrESo8SZWa4HdbL28gXGdJ0iMGRL0V4FMCSq 4eoBOZ7lPOlTo4CsND6DCY7WrrAFY3s/JUFTJ85rVRAGwmw0TixdoAXD61lsv/Z7 yA9MSs7EVUst11KfaUfxjxaL/5xlBFEIvXYkhuXvxiueeeCwnhSYVQC63dToBH6N JjFNtoHjA81n51N6fQCZEHvGnewFMS8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:43 2025 by rpki-client