$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dd80da8-03e7-3478-937e-cbdc2c06d629.roa File: 5dd80da8-03e7-3478-937e-cbdc2c06d629.roa (raw, json) Hash identifier: gZ+sY9iv1j5cxlsJ9h5DuUHcwvsnCLbT4ipa6Aa2Wzw= Subject key identifier: B3:36:C5:61:A4:0F:F1:A5:46:18:26:F3:98:E0:69:C2:8A:11:7B:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584845159BF03775E7B848C44200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dd80da8-03e7-3478-937e-cbdc2c06d629.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.15.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:9b:f0:37:75:e7:b8:48:c4:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=c63e2883-e8b2-4619-883c-0ed1ca97413f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:94:cd:8e:82:47:1c:8b:08:23:b2:77:a7:d8: b8:fa:62:80:7a:fa:dd:34:06:52:31:36:ba:8a:13: 26:0a:3f:04:b4:f8:5b:14:70:fe:63:c6:ca:62:d4: e8:d1:05:6d:d7:7c:00:09:c6:9b:f0:a6:cb:38:a4: cf:f8:07:ed:f6:ae:2e:d2:1f:15:03:5f:93:e2:e9: 25:d8:25:8a:7d:25:6c:6a:4d:fe:4b:cb:89:eb:da: 33:73:01:06:40:d9:d5:c0:1b:d5:05:46:3b:03:bb: 6f:00:11:c0:7b:35:06:c5:a8:49:b5:6a:92:ab:57: 3c:5a:76:d7:aa:9f:67:d8:ac:7a:9a:68:56:e4:63: fa:58:78:16:29:07:26:47:58:01:e3:ab:2c:75:c1: b3:37:2a:92:c8:13:2b:17:9e:00:58:dc:27:8b:dd: bb:11:55:2c:d5:e4:cd:87:38:7f:ab:bc:9a:28:bc: b6:7d:cc:6a:12:c1:cd:a7:df:d3:bd:90:0c:94:eb: 05:17:c8:a2:97:63:c7:82:a8:58:e3:c1:56:c5:00: 49:d4:36:e3:eb:b0:05:52:bb:ae:0b:12:44:93:47: 92:1d:30:31:8a:85:57:d6:73:63:ce:b1:e5:89:32: 34:e1:89:09:5e:e2:8a:a7:6b:b7:b4:92:d3:9f:67: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:C5:61:A4:0F:F1:A5:46:18:26:F3:98:E0:69:C2:8A:11:7B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dd80da8-03e7-3478-937e-cbdc2c06d629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:74:5c:9d:10:bd:c5:3f:74:79:92:dd:e6:51:6c:b4:fd:cf: 0b:da:62:4c:79:68:ee:5e:f0:b6:f1:78:9b:12:6c:91:aa:88: 42:d7:ed:f0:aa:72:88:97:d2:76:e1:7d:b5:b0:9f:ec:e6:a0: f4:59:f9:03:35:56:19:9d:6a:37:5c:c6:d4:80:9d:cb:52:34: f8:05:3e:d2:76:33:30:d1:c7:dc:7f:a0:33:90:b0:13:e3:30: c4:f0:8a:b0:16:21:5a:b6:ff:99:f8:8d:31:70:5c:b0:ca:25: db:75:96:c3:cf:97:33:e3:e3:b8:b2:24:e7:27:8e:17:9b:06: 65:db:38:71:ab:ef:b9:d9:1a:18:b0:19:09:94:e4:ab:b9:7c: a4:86:b0:1b:ae:25:d4:45:a5:20:32:6c:92:ca:bb:da:20:98: ec:5c:4e:db:12:7c:20:40:c9:6f:b5:9f:2e:02:e8:8e:86:ba: 2d:09:17:bc:fc:33:97:6b:d1:cd:fe:51:ec:0b:6f:0b:33:b7: 2e:4d:cd:9e:bc:e2:02:9d:c0:8c:bb:48:54:f0:03:de:ac:ea: 83:d7:2e:52:e7:eb:1b:c3:58:29:1b:51:3e:6d:ec:ce:76:bd: d8:77:cb:19:dc:c4:56:65:6d:a4:03:2b:2f:43:1d:38:07:3b: 73:28:55:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZvwN3XnuEjEQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk YzYzZTI4ODMtZThiMi00NjE5LTg4M2MtMGVkMWNhOTc0MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pTNjoJHHIsII7J3p9i4+mKAevrdNAZSMTa6 ihMmCj8EtPhbFHD+Y8bKYtTo0QVt13wACcab8KbLOKTP+Aft9q4u0h8VA1+T4ukl 2CWKfSVsak3+S8uJ69ozcwEGQNnVwBvVBUY7A7tvABHAezUGxahJtWqSq1c8WnbX qp9n2Kx6mmhW5GP6WHgWKQcmR1gB46ssdcGzNyqSyBMrF54AWNwni927EVUs1eTN hzh/q7yaKLy2fcxqEsHNp9/TvZAMlOsFF8iil2PHgqhY48FWxQBJ1Dbj67AFUruu CxJEk0eSHTAxioVX1nNjzrHliTI04YkJXuKKp2u3tJLTn2f3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM2xWGkD/GlRhgm85jgacKKEXvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRkODBkYTgtMDNlNy0z NDc4LTkzN2UtY2JkYzJjMDZkNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFw/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt0XJ0QvcU/dHmS3eZRbLT9zwvaYkx5aO5e8LbxeJsSbJGqiELX7fCq coiX0nbhfbWwn+zmoPRZ+QM1VhmdajdcxtSAnctSNPgFPtJ2MzDRx9x/oDOQsBPj MMTwirAWIVq2/5n4jTFwXLDKJdt1lsPPlzPj47iyJOcnjhebBmXbOHGr77nZGhiw GQmU5Ku5fKSGsBuuJdRFpSAybJLKu9ogmOxcTtsSfCBAyW+1ny4C6I6Gui0JF7z8 M5dr0c3+UewLbwszty5NzZ684gKdwIy7SFTwA96s6oPXLlLn6xvDWCkbUT5t7M52 vdh3yxncxFZlbaQDKy9DHTgHO3MoVd0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:19 2025 by rpki-client