$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f52632-8fab-38a5-a649-b640d4b65b0a.roa File: 65f52632-8fab-38a5-a649-b640d4b65b0a.roa (raw, json) Hash identifier: vbkzxV4Mg2QIdqHXbFHjzqiHBXg3/iobzy2w6BfCaQg= Subject key identifier: 54:83:DA:63:D3:CE:E9:DB:D8:1A:18:C3:CC:62:54:21:FE:9B:07:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830CE279ED66EC9B5116E50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f52632-8fab-38a5-a649-b640d4b65b0a.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.201.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ce:27:9e:d6:6e:c9:b5:11:6e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=003148e3-553b-4665-9c6f-2ff04d487f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:a0:29:0a:7a:98:13:6d:b6:57:85:e1:b9: 69:91:de:a6:f2:09:fa:a5:11:2b:84:70:36:b5:0b: 1d:32:b7:cb:f4:ec:7d:3a:1e:f2:bf:6e:6a:fe:58: 41:5d:92:67:e0:31:33:5f:65:c6:9c:95:bf:e4:b0: 63:0b:a0:0c:06:cf:7e:fa:ec:29:cb:b5:dc:c8:03: 96:fd:df:6c:7e:86:20:af:be:7a:02:cd:fd:66:74: ec:29:3d:fa:fe:62:18:87:59:18:60:fa:be:b3:41: 42:55:8e:06:b6:98:97:17:27:ff:c4:c0:79:56:0a: e8:f4:2a:86:b7:ba:40:54:f5:17:93:ca:8c:fe:f0: dd:88:19:8a:dd:92:3f:0e:b0:bb:7e:d6:d3:c9:17: 8a:3a:85:7c:2e:b1:4e:b4:5d:f8:b7:d3:76:79:9b: 4b:7b:48:a1:d0:09:0c:d4:95:2d:9f:d1:35:09:95: c8:fc:32:21:de:96:a4:d4:46:c2:f3:9d:aa:40:4c: 65:38:78:ad:4d:f6:0c:80:4f:45:2b:de:e6:47:19: 59:cf:c4:db:9f:3e:20:03:a3:7e:58:ea:ba:0d:1a: b3:40:ca:c7:c9:e3:ee:c5:0b:19:47:3b:95:29:46: f2:86:ab:2d:72:1f:6f:b3:18:f4:5e:c5:8f:90:1b: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:83:DA:63:D3:CE:E9:DB:D8:1A:18:C3:CC:62:54:21:FE:9B:07:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f52632-8fab-38a5-a649-b640d4b65b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a3:7c:49:0f:c2:34:80:95:b0:c3:e0:94:f6:73:7e:3b:3c: a4:be:d9:ca:a2:25:5b:c7:f6:66:62:92:10:0b:99:43:f7:7a: 5b:c5:46:10:26:8b:ba:0b:f0:62:e5:49:c1:55:c1:b1:dd:e7: 71:e3:5c:69:26:f3:f7:e1:97:0c:10:75:7a:40:49:ae:87:8d: 22:76:28:57:88:6a:a0:67:1c:c0:26:06:12:9a:fe:a7:86:ab: ef:ca:5f:ca:77:5b:18:47:a1:44:c8:36:26:6c:08:7b:8a:05: ff:34:60:59:86:64:36:0d:22:a4:87:bc:ab:3b:5f:93:23:d7: 78:11:fa:98:1e:55:3d:f2:9a:c9:83:0b:38:74:e1:84:8b:76: 36:60:34:9b:d0:62:4b:aa:b2:46:c5:8a:2c:d0:7b:9c:19:53: 1b:81:09:35:2e:6b:fb:0b:98:0a:6a:2c:51:8d:ff:72:3f:3c: a4:03:7c:14:bc:9b:58:91:de:b9:d3:4b:bf:2b:04:97:6f:af: 51:15:9d:2b:6b:b9:8d:99:8e:0e:23:1e:6b:2e:78:ba:08:c9: 7f:37:81:01:d1:fd:95:fd:d6:6b:d6:31:33:44:0c:ba:b1:d5: 4e:2c:e4:69:8a:ba:87:d2:23:e1:29:64:ee:81:a5:e8:ac:0e: 92:eb:59:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMM4nntZuybURblAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MDAzMTQ4ZTMtNTUzYi00NjY1LTljNmYtMmZmMDRkNDg3ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWCgKQp6mBNttleF4blpkd6m8gn6pRErhHA2 tQsdMrfL9Ox9Oh7yv25q/lhBXZJn4DEzX2XGnJW/5LBjC6AMBs9++uwpy7XcyAOW /d9sfoYgr756As39ZnTsKT36/mIYh1kYYPq+s0FCVY4GtpiXFyf/xMB5Vgro9CqG t7pAVPUXk8qM/vDdiBmK3ZI/DrC7ftbTyReKOoV8LrFOtF34t9N2eZtLe0ih0AkM 1JUtn9E1CZXI/DIh3pak1EbC852qQExlOHitTfYMgE9FK97mRxlZz8Tbnz4gA6N+ WOq6DRqzQMrHyePuxQsZRzuVKUbyhqstch9vsxj0XsWPkBvO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSD2mPTzunb2BoYw8xiVCH+mwc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVmNTI2MzItOGZhYi0z OGE1LWE2NDktYjY0MGQ0YjY1YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8nFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIejfEkPwjSAlbDD4JT2c347PKS+2cqiJVvH9mZikhALmUP3elvFRhAm i7oL8GLlScFVwbHd53HjXGkm8/fhlwwQdXpASa6HjSJ2KFeIaqBnHMAmBhKa/qeG q+/KX8p3WxhHoUTINiZsCHuKBf80YFmGZDYNIqSHvKs7X5Mj13gR+pgeVT3ymsmD Czh04YSLdjZgNJvQYkuqskbFiizQe5wZUxuBCTUua/sLmApqLFGN/3I/PKQDfBS8 m1iR3rnTS78rBJdvr1EVnStruY2Zjg4jHmsueLoIyX83gQHR/ZX91mvWMTNEDLqx 1U4s5GmKuofSI+EpZO6BpeisDpLrWdY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:50 2025 by rpki-client