$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/680b978c-6ac9-3387-a654-ff6c93642931.roa File: 680b978c-6ac9-3387-a654-ff6c93642931.roa (raw, json) Hash identifier: Ayjc/7pna1YiFhCjJ4kMufnDiS7dInnayZpnzxrXBuo= Subject key identifier: F9:C5:C9:83:72:55:C7:FE:66:5C:9B:C6:9F:E8:44:41:F1:F3:EA:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584890760F78753E228D99415900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/680b978c-6ac9-3387-a654-ff6c93642931.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.193.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0f:78:75:3e:22:8d:99:41:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=f1bb0d4a-f8f0-4359-9cab-e9435d082ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:e1:de:67:a6:0f:1c:fd:33:fb:55:1d:00: 14:b8:40:73:cd:1f:0b:8c:5d:fe:f8:b9:db:dc:9c: 6d:78:d4:d0:d3:20:88:60:9a:94:ed:15:d2:5d:cd: 4a:19:e0:12:36:39:45:2f:41:bd:59:25:10:7a:0f: ee:01:b6:e9:19:bf:27:fb:09:c0:7b:ef:60:00:2c: 2c:31:cb:c2:b2:21:23:6a:9a:bd:65:6f:c1:e8:34: 6c:1e:c6:84:22:5b:28:9a:d3:0b:0a:89:4b:f0:0c: 70:9f:87:39:64:11:23:00:da:e4:8c:65:17:24:f9: 59:c6:96:ee:03:7b:31:9b:c8:b0:19:14:39:34:64: a2:4a:ab:06:bb:40:9f:14:e8:d3:46:d3:3d:25:33: 4e:89:f2:f3:ac:be:cc:11:4b:20:06:08:2f:d8:11: 97:aa:ae:a8:aa:c0:5c:88:14:96:03:6b:6e:10:5f: db:db:d2:e1:1f:19:2a:1e:49:eb:41:67:89:c3:d6: b7:48:92:23:2c:6a:59:fb:ce:a1:ea:a8:58:63:07: 76:0d:9f:94:25:bd:89:ff:e0:d7:a7:5f:9e:9a:11: 65:23:d1:2e:53:95:60:7e:1c:f7:f0:f8:6d:f3:4b: 26:e8:04:a2:c5:b2:dc:87:ec:7a:95:d1:e3:6e:bc: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C5:C9:83:72:55:C7:FE:66:5C:9B:C6:9F:E8:44:41:F1:F3:EA:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/680b978c-6ac9-3387-a654-ff6c93642931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:99:36:c4:9a:9a:af:6d:1a:a4:42:5f:5d:2b:b3:f7:ea:84: 1b:e8:c6:54:7e:0c:ab:fa:df:27:b0:85:cf:92:17:9e:dd:f3: 53:3e:22:13:e6:48:ab:c7:77:c9:9b:2d:07:47:47:59:6d:eb: da:a2:0d:db:d4:3d:21:d1:30:f7:16:dd:d6:5d:0e:6d:70:82: fa:ea:b5:50:f7:1b:74:a7:ad:45:15:2f:2e:d0:b0:8d:5d:d1: 08:cd:cc:1c:d3:b5:db:82:95:fb:ee:c4:5e:e0:84:b8:2e:c7: b4:00:3a:6d:7e:46:d8:aa:1a:8f:02:ac:2d:50:d7:d0:d4:a7: e3:98:38:5f:cf:d2:1e:e1:a5:1a:42:88:9e:49:2e:8e:f8:8a: 45:e0:d0:fd:e0:56:a6:00:99:e5:de:1b:13:bc:16:ac:98:06: 04:73:07:d2:a6:6c:d4:f3:c1:5f:24:c4:15:70:07:e7:cc:be: 76:a1:71:73:9c:c2:52:8b:28:48:c8:fe:d5:14:c0:52:96:2c: 36:2e:d9:18:39:33:71:db:4c:38:82:16:72:85:99:22:33:dc: 7a:e0:53:58:ee:ad:28:a3:71:6c:ff:23:db:65:22:28:4d:a4: ec:59:d3:20:15:9b:a5:a1:87:26:c7:23:05:ac:7f:e5:64:3f: 94:7c:8d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg94dT4ijZlBWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZjFiYjBkNGEtZjhmMC00MzU5LTljYWItZTk0MzVkMDgyYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg17h3memDxz9M/tVHQAUuEBzzR8LjF3++Lnb 3JxteNTQ0yCIYJqU7RXSXc1KGeASNjlFL0G9WSUQeg/uAbbpGb8n+wnAe+9gACws McvCsiEjapq9ZW/B6DRsHsaEIlsomtMLColL8Axwn4c5ZBEjANrkjGUXJPlZxpbu A3sxm8iwGRQ5NGSiSqsGu0CfFOjTRtM9JTNOifLzrL7MEUsgBggv2BGXqq6oqsBc iBSWA2tuEF/b29LhHxkqHknrQWeJw9a3SJIjLGpZ+86h6qhYYwd2DZ+UJb2J/+DX p1+emhFlI9EuU5Vgfhz38Pht80sm6ASixbLch+x6ldHjbryyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnFyYNyVcf+Zlybxp/oREHx8+ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjgwYjk3OGMtNmFjOS0z Mzg3LWE2NTQtZmY2YzkzNjQyOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWZNsSamq9tGqRCX10rs/fqhBvoxlR+DKv63yewhc+SF57d81M+IhPm SKvHd8mbLQdHR1lt69qiDdvUPSHRMPcW3dZdDm1wgvrqtVD3G3SnrUUVLy7QsI1d 0QjNzBzTtduClfvuxF7ghLgux7QAOm1+RtiqGo8CrC1Q19DUp+OYOF/P0h7hpRpC iJ5JLo74ikXg0P3gVqYAmeXeGxO8FqyYBgRzB9KmbNTzwV8kxBVwB+fMvnahcXOc wlKLKEjI/tUUwFKWLDYu2Rg5M3HbTDiCFnKFmSIz3HrgU1jurSijcWz/I9tlIihN pOxZ0yAVm6WhhybHIwWsf+VkP5R8jaQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:26:26 2025 by rpki-client