$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/652c3166-1817-3351-bd18-7f5784643db9.roa File: 652c3166-1817-3351-bd18-7f5784643db9.roa (raw, json) Hash identifier: 4irlwLjybliVxCsqfjsSY+FU5hy4eCguByVeqlqP4Ik= Subject key identifier: 68:F2:B3:84:0D:9A:5F:4C:48:62:89:E0:14:5E:FA:95:C5:AA:45:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830CA8E123D66921BBBDAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/652c3166-1817-3351-bd18-7f5784643db9.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.201.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ca:8e:12:3d:66:92:1b:bb:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=b27c3134-905f-4fe6-b62f-fd21adb748a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:d0:2d:f8:b5:82:06:1a:0b:dd:bc:9b:44: ec:1a:26:cd:1a:6d:0e:6f:cb:58:38:5d:10:67:13: 0e:7c:33:4d:9a:27:01:cd:85:ff:fc:c1:ad:09:47: a3:f7:08:4e:cc:26:1d:ce:1f:68:df:dd:d5:eb:33: e9:39:4e:e6:54:6c:88:56:03:ec:a7:21:99:89:3f: 8e:ba:f0:d9:bd:27:c5:b2:49:b4:4e:d7:79:0f:d1: 24:64:4e:cc:c4:32:df:8e:93:2c:d5:e9:94:9d:c3: 5a:88:77:5f:ac:03:77:30:cb:e3:5c:76:b1:8d:4e: e0:ef:3c:d1:d1:e6:d0:a3:f5:43:e3:76:d8:29:9b: 96:9a:22:5d:9a:fa:6e:1b:91:7a:8b:9d:cc:b6:6a: 47:1e:e7:76:af:f2:3a:c6:66:98:90:5c:02:06:5a: 3f:41:ee:8e:39:f3:41:cb:a4:bf:67:a6:0b:d7:54: 72:ba:ff:ad:2d:ae:89:82:40:9d:71:a2:1c:d1:ac: 64:fd:87:33:6b:5b:99:1f:85:a7:e5:92:c6:08:cd: 31:f8:99:93:05:54:01:17:b3:33:8a:d9:7e:32:67: 93:59:32:22:01:78:55:ec:78:98:43:fd:d1:1b:58: 03:3a:d4:6a:cf:bc:a2:4d:65:5f:c3:ef:1d:70:7e: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:B3:84:0D:9A:5F:4C:48:62:89:E0:14:5E:FA:95:C5:AA:45:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/652c3166-1817-3351-bd18-7f5784643db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b1:0b:a4:44:db:aa:00:50:8a:92:67:34:11:23:ef:55:88: 57:92:73:73:a8:60:de:c4:8d:82:6d:17:b9:cc:1c:55:26:9f: 36:dc:e4:5c:b1:9b:69:40:44:bc:79:2c:7e:61:bf:91:38:31: 3e:42:5c:91:b5:b4:c6:78:20:bd:6a:88:f5:dd:cf:5e:38:f0: 0a:a8:db:e0:67:4a:b1:c0:17:3f:a9:f4:19:cf:af:b0:07:e4: 15:e6:4d:5e:a3:57:26:b1:7d:69:9b:5b:80:03:db:0a:25:70: bf:c3:13:54:28:3d:ce:14:f7:c4:3e:cf:0f:e4:e5:e8:e6:87: 72:7a:0a:18:37:26:ba:84:05:5a:96:93:dd:98:cd:d4:c9:2f: 27:22:df:77:33:f1:d7:18:0c:7a:18:29:65:54:06:a3:fd:02: 9e:ba:e2:7a:5d:37:b9:fc:d2:55:dc:b8:86:94:03:7b:bc:1a: fd:03:ca:73:4f:02:4d:8b:35:73:a4:2b:21:e0:57:eb:12:c1: df:91:5a:64:a6:3b:78:d5:39:ec:4b:09:56:28:d9:8e:5d:25: a3:d8:b0:1d:03:ab:da:8d:35:8f:e6:bc:7b:d2:12:b8:39:ec: 97:f1:82:80:df:35:8a:20:8e:8d:57:03:1a:84:2d:c2:b5:db: f2:90:fb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMqOEj1mkhu72sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YjI3YzMxMzQtOTA1Zi00ZmU2LWI2MmYtZmQyMWFkYjc0OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHPQLfi1ggYaC928m0TsGibNGm0Ob8tYOF0Q ZxMOfDNNmicBzYX//MGtCUej9whOzCYdzh9o393V6zPpOU7mVGyIVgPspyGZiT+O uvDZvSfFskm0Ttd5D9EkZE7MxDLfjpMs1emUncNaiHdfrAN3MMvjXHaxjU7g7zzR 0ebQo/VD43bYKZuWmiJdmvpuG5F6i53MtmpHHud2r/I6xmaYkFwCBlo/Qe6OOfNB y6S/Z6YL11Ryuv+tLa6JgkCdcaIc0axk/Ycza1uZH4Wn5ZLGCM0x+JmTBVQBF7Mz itl+MmeTWTIiAXhV7HiYQ/3RG1gDOtRqz7yiTWVfw+8dcH4FnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjys4QNml9MSGKJ4BRe+pXFqkX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUyYzMxNjYtMTgxNy0z MzUxLWJkMTgtN2Y1Nzg0NjQzZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8nYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSxC6RE26oAUIqSZzQRI+9ViFeSc3OoYN7EjYJtF7nMHFUmnzbc5Fyx m2lARLx5LH5hv5E4MT5CXJG1tMZ4IL1qiPXdz1448Aqo2+BnSrHAFz+p9BnPr7AH 5BXmTV6jVyaxfWmbW4AD2wolcL/DE1QoPc4U98Q+zw/k5ejmh3J6Chg3JrqEBVqW k92YzdTJLyci33cz8dcYDHoYKWVUBqP9Ap664npdN7n80lXcuIaUA3u8Gv0DynNP Ak2LNXOkKyHgV+sSwd+RWmSmO3jVOexLCVYo2Y5dJaPYsB0Dq9qNNY/mvHvSErg5 7JfxgoDfNYogjo1XAxqELcK12/KQ+6w= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:08 2025 by rpki-client