$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bafa729-eaf7-3c04-a792-e3e3d19f72de.roa File: 6bafa729-eaf7-3c04-a792-e3e3d19f72de.roa (raw, json) Hash identifier: +KXos76uxlyw+Wk03r3h0bFRvp5kVgeRxdqGUZ8+QJc= Subject key identifier: C5:82:80:B9:DB:10:F1:C9:71:86:B5:07:8D:E2:0D:E8:F3:CE:5C:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6F380A01415EAD31BC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bafa729-eaf7-3c04-a792-e3e3d19f72de.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.199.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6f:38:0a:01:41:5e:ad:31:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=4446a35d-392c-4d1d-abc0-f1bc5e7a403c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:4b:91:17:82:9c:a7:57:92:c9:29:47:b7: 54:c7:35:07:75:8a:3a:8e:4e:8a:2a:a0:f1:51:ea: 58:8e:0a:17:86:ee:32:cb:64:65:cb:5e:30:40:74: 13:c3:dd:98:b5:83:7c:f5:33:e2:46:05:5b:63:35: 71:c9:e7:c8:a6:d0:9b:b7:73:29:85:07:5a:2c:89: 06:83:c3:7b:2b:c9:8c:16:86:60:92:f8:48:1e:f6: f0:80:00:77:d9:78:1e:8f:ce:01:5d:b5:8e:fd:76: 2e:30:d7:11:f0:b1:29:e9:1f:e1:45:21:63:b9:d2: 74:6e:d2:11:3e:b6:26:b7:2e:13:f1:65:36:c3:27: 04:15:d7:7a:51:46:89:7a:e5:0c:49:c3:d4:ee:fc: 8c:06:c1:65:e3:d2:08:39:a6:38:81:55:02:0b:f4: 4c:99:d4:dc:b9:6f:33:37:20:25:51:a3:cb:d5:b3: 41:5d:22:f7:96:bb:6b:4b:e0:49:61:a8:7b:fc:8a: 69:50:03:b7:12:fc:55:e4:97:c0:5d:24:ac:38:46: 62:eb:20:72:31:ea:02:06:d6:54:e5:0d:ec:91:3c: f3:f0:57:c6:2e:c3:d9:82:97:6e:5d:7c:67:18:02: d7:98:a0:08:a1:b1:58:3d:53:78:73:9d:bb:cc:ef: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:80:B9:DB:10:F1:C9:71:86:B5:07:8D:E2:0D:E8:F3:CE:5C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bafa729-eaf7-3c04-a792-e3e3d19f72de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:51:f3:59:1f:cb:6c:64:69:4d:f1:50:91:30:7c:61:34:6e: 39:21:9c:ae:77:04:2b:d6:7a:9e:86:52:36:2b:3f:00:93:cd: 5b:6d:70:1b:c0:fb:16:12:92:c6:2a:e4:45:f2:2a:0f:a0:6b: c4:31:e1:18:20:c0:46:b6:77:6e:2b:cf:9b:5e:55:5b:03:38: 45:f0:ea:f4:47:62:90:c2:53:a4:2a:22:86:46:2a:d5:df:5b: 71:37:5b:99:25:95:c9:8e:71:ec:18:79:06:aa:ca:84:6f:1b: 09:1b:11:85:a2:58:fb:87:5f:83:02:2e:88:14:69:af:72:db: 80:8a:c1:fa:fa:ba:34:f9:35:67:42:7c:7e:79:70:8b:d9:7c: 52:6a:47:1a:5d:60:53:a0:64:9c:91:b9:bf:6c:c5:53:a8:0c: 65:57:07:a6:06:7e:91:54:fa:d5:02:c0:56:5b:7c:7a:2c:5b: d8:e4:88:4d:8d:e8:5f:84:ff:73:58:cd:db:c6:38:fb:c3:14: 19:19:54:8d:21:74:94:2f:2b:34:dc:0a:77:d8:a0:2c:6e:fa: e0:c3:f8:b2:86:97:e6:c1:46:ee:ce:9b:c5:88:3e:52:4f:b2: a4:ee:b8:c6:96:f1:73:8b:d0:b6:18:f5:ed:8d:85:37:20:02: 80:17:23:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy284CgFBXq0xvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk NDQ0NmEzNWQtMzkyYy00ZDFkLWFiYzAtZjFiYzVlN2E0MDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19LkReCnKdXkskpR7dUxzUHdYo6jk6KKqDx UepYjgoXhu4yy2Rly14wQHQTw92YtYN89TPiRgVbYzVxyefIptCbt3MphQdaLIkG g8N7K8mMFoZgkvhIHvbwgAB32Xgej84BXbWO/XYuMNcR8LEp6R/hRSFjudJ0btIR PrYmty4T8WU2wycEFdd6UUaJeuUMScPU7vyMBsFl49IIOaY4gVUCC/RMmdTcuW8z NyAlUaPL1bNBXSL3lrtrS+BJYah7/IppUAO3EvxV5JfAXSSsOEZi6yByMeoCBtZU 5Q3skTzz8FfGLsPZgpduXXxnGALXmKAIobFYPVN4c527zO8yFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWCgLnbEPHJcYa1B43iDejzzlybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJhZmE3MjktZWFmNy0z YzA0LWE3OTItZTNlM2QxOWY3MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8fpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRR81kfy2xkaU3xUJEwfGE0bjkhnK53BCvWep6GUjYrPwCTzVttcBvA +xYSksYq5EXyKg+ga8Qx4RggwEa2d24rz5teVVsDOEXw6vRHYpDCU6QqIoZGKtXf W3E3W5kllcmOcewYeQaqyoRvGwkbEYWiWPuHX4MCLogUaa9y24CKwfr6ujT5NWdC fH55cIvZfFJqRxpdYFOgZJyRub9sxVOoDGVXB6YGfpFU+tUCwFZbfHosW9jkiE2N 6F+E/3NYzdvGOPvDFBkZVI0hdJQvKzTcCnfYoCxu+uDD+LKGl+bBRu7Om8WIPlJP sqTuuMaW8XOL0LYY9e2NhTcgAoAXI3E= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:43 2025 by rpki-client