$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6591d6b5-b0f8-3a27-83f2-90846559c883.roa File: 6591d6b5-b0f8-3a27-83f2-90846559c883.roa (raw, json) Hash identifier: sXMemH8sJdC/a4JPzOafWrM2KjG5lSIxIc/U17RQ3nk= Subject key identifier: AA:70:B7:28:25:65:EB:F8:74:EA:E2:F2:71:3B:78:B4:76:CA:24:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C65ECDCB4A7456A15380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6591d6b5-b0f8-3a27-83f2-90846559c883.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 15802 IP address blocks: 23.194.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c6:5e:cd:cb:4a:74:56:a1:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=ac648baf-063d-4782-b24b-ef5d923eb39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:81:e2:a4:b3:77:06:55:90:06:db:10:c9: 8f:f1:88:2d:10:7e:22:bd:46:10:c2:30:17:28:fd: f9:9f:c5:04:a1:42:ff:4f:ee:9b:b6:fd:3e:f5:17: 4a:b3:1d:a4:e4:a5:eb:d6:87:26:a9:58:23:47:56: 41:2c:0f:f8:40:34:4a:44:a5:e8:b5:20:b6:57:dc: 8e:a9:ad:65:1e:f4:dc:5b:d0:8e:24:08:46:8f:60: 7a:b9:c6:9f:ae:7c:e1:cf:80:65:6f:75:cd:03:73: 95:54:c9:d8:0f:22:ea:e6:c7:9d:ee:3c:ed:c0:c2: 7e:8e:3b:10:9f:4b:b4:f4:dc:3f:da:32:e1:ce:e9: 72:99:6f:8a:19:34:6a:71:38:2b:68:8c:12:2e:b9: f3:eb:d5:ef:71:02:58:fe:d6:6f:8d:d9:2b:cf:29: 80:d0:ee:f3:79:b4:54:ec:d6:eb:f8:3a:40:ee:83: ae:2b:17:82:a8:04:70:05:1b:c2:ec:ee:bb:98:09: 43:87:18:89:ab:4f:16:33:54:73:dc:57:eb:2c:8c: 13:84:9f:ad:94:9d:78:d4:d7:11:e2:84:67:e6:76: 5f:28:23:e5:5b:11:1f:d4:4b:b4:e8:82:38:15:e9: 74:d3:20:e7:d1:96:44:48:2e:5b:e9:cf:9c:0b:8c: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:70:B7:28:25:65:EB:F8:74:EA:E2:F2:71:3B:78:B4:76:CA:24:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6591d6b5-b0f8-3a27-83f2-90846559c883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:09:87:9d:2d:a9:59:76:f9:76:67:a3:14:1a:57:84:12:1c: d8:39:36:c3:78:e7:4d:d6:34:af:58:f9:a6:87:f2:ee:dc:82: 54:59:d7:90:55:36:9d:e7:ea:bf:7c:a0:a3:75:d6:a9:b0:5c: 2d:f5:20:79:45:6c:f2:3c:3f:b8:1a:a1:bf:20:0b:be:f7:b2: fc:e9:a5:68:71:49:c9:b0:b0:07:3e:a4:af:3c:d4:72:f0:59: f3:b0:49:cd:01:52:b8:9f:97:a0:44:ce:cc:18:7c:9e:2f:c3: 52:08:8c:48:a9:a6:20:fd:20:a6:2b:21:d6:f7:01:39:88:1f: 3e:49:c3:cf:87:98:87:f3:c9:c5:96:7a:e7:c2:47:0f:a7:d8: 80:af:49:2e:58:dc:a7:cd:5c:65:be:5c:d2:5c:7e:20:03:27: 12:62:ef:af:ca:42:1f:2a:7d:c7:c9:03:94:d3:16:17:0b:e3: fc:f9:ff:82:1f:d7:37:37:dd:ae:eb:6b:c8:3f:2b:d5:be:a0: 85:8d:51:ca:37:1b:cf:8f:61:ed:de:99:03:31:fd:a3:10:12: a0:43:55:a8:9b:d0:6a:d6:6a:b8:e6:c3:d5:48:be:15:ee:87: 0b:f4:64:6b:f4:26:d3:1e:4a:82:9f:9b:25:db:de:05:49:f0: 6b:72:af:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMZezctKdFahU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YWM2NDhiYWYtMDYzZC00NzgyLWIyNGItZWY1ZDkyM2ViMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHWB4qSzdwZVkAbbEMmP8YgtEH4ivUYQwjAX KP35n8UEoUL/T+6btv0+9RdKsx2k5KXr1ocmqVgjR1ZBLA/4QDRKRKXotSC2V9yO qa1lHvTcW9COJAhGj2B6ucafrnzhz4Blb3XNA3OVVMnYDyLq5sed7jztwMJ+jjsQ n0u09Nw/2jLhzulymW+KGTRqcTgraIwSLrnz69XvcQJY/tZvjdkrzymA0O7zebRU 7Nbr+DpA7oOuKxeCqARwBRvC7O67mAlDhxiJq08WM1Rz3FfrLIwThJ+tlJ141NcR 4oRn5nZfKCPlWxEf1Eu06II4Fel00yDn0ZZESC5b6c+cC4zk8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpwtyglZev4dOri8nE7eLR2yiTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjU5MWQ2YjUtYjBmOC0z YTI3LTgzZjItOTA4NDY1NTljODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQJh50tqVl2+XZnoxQaV4QSHNg5NsN4503WNK9Y+aaH8u7cglRZ15BV Np3n6r98oKN11qmwXC31IHlFbPI8P7gaob8gC773svzppWhxScmwsAc+pK881HLw WfOwSc0BUrifl6BEzswYfJ4vw1IIjEippiD9IKYrIdb3ATmIHz5Jw8+HmIfzycWW eufCRw+n2ICvSS5Y3KfNXGW+XNJcfiADJxJi76/KQh8qfcfJA5TTFhcL4/z5/4If 1zc33a7ra8g/K9W+oIWNUco3G8+PYe3emQMx/aMQEqBDVaib0GrWarjmw9VIvhXu hwv0ZGv0JtMeSoKfmyXb3gVJ8Gtyr1A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:55 2025 by rpki-client