$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f86f162-9cc7-3855-86ba-6ea535cba61e.roa File: 6f86f162-9cc7-3855-86ba-6ea535cba61e.roa (raw, json) Hash identifier: 4pLWh2FUHYS+3bSo5oxKpji7c5n3DYrJbIZP8WgBGSE= Subject key identifier: 4A:4F:36:A6:2E:F7:B5:E8:27:C3:9A:6B:2F:49:05:5F:F4:BF:2F:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C600765E7BF096C4E800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f86f162-9cc7-3855-86ba-6ea535cba61e.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.194.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c6:00:76:5e:7b:f0:96:c4:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=70fba937-eda5-48a8-b748-e9718ba034bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:af:23:53:6f:63:7c:e0:aa:ae:f0:b9:29: b2:ab:f6:c0:77:b5:3b:f7:8d:7d:1f:37:e1:1b:c9: bf:99:0c:b5:f5:c1:38:bb:d2:e0:f4:2e:ce:23:7c: a0:35:7a:d8:b5:66:65:d8:69:60:a2:dc:c7:22:08: 24:82:f2:eb:68:01:9f:e1:6b:a0:6b:df:5b:56:3a: 44:c1:0d:d6:63:aa:ab:cd:7f:f4:f9:bd:c0:29:07: ff:2f:a3:ab:a2:0b:4c:e0:df:a0:5e:cf:6a:f6:cf: a8:5c:e5:4e:a4:38:f8:b9:66:f1:13:24:5c:a1:02: 22:40:46:ed:52:4e:ed:e8:77:25:46:3e:7e:9e:32: 40:35:77:81:fc:75:08:02:76:65:a1:00:22:32:df: e1:bb:fd:96:f1:48:c3:d1:8f:f2:16:8e:f6:70:5a: 5a:a2:83:07:9e:f7:dd:51:9e:61:bc:df:ac:7a:a2: ec:b4:d0:16:2b:92:18:e2:ac:6c:de:dd:52:eb:ba: 60:39:11:3d:10:00:95:c3:d1:2f:b2:94:fc:5d:ac: 72:35:7c:25:4e:80:d2:3e:31:d4:6a:1c:91:a5:65: 9a:3c:5c:65:24:c4:c9:33:12:d0:19:cc:8d:3a:27: 70:1d:69:a2:eb:3f:29:7f:e3:09:cb:63:08:a9:14: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:36:A6:2E:F7:B5:E8:27:C3:9A:6B:2F:49:05:5F:F4:BF:2F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f86f162-9cc7-3855-86ba-6ea535cba61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:63:70:8f:ec:9e:33:6a:16:71:a6:ba:27:f5:85:6e:9a:86: 23:07:84:af:ea:b9:a8:5c:54:e2:d4:70:e0:99:6f:68:6b:ce: 8d:e3:3e:0c:5b:07:a9:43:4b:8f:5a:b9:a2:7a:5f:ee:38:70: b9:da:8e:8b:23:60:be:3d:27:d0:18:35:38:39:51:56:0b:f9: 3b:10:a1:04:9b:62:6c:fa:71:b5:63:e1:f8:0c:55:e2:d5:83: b1:cd:1d:3b:03:f5:bb:48:a2:ba:d8:bf:ad:ae:d5:f9:03:eb: 74:a1:22:7a:b8:c7:0b:2b:4c:e5:fd:69:d2:9b:f0:46:f3:a1: b9:32:b0:f6:d1:a0:8d:cd:9b:10:b2:e7:b6:ff:14:19:c2:d5: 62:73:89:c2:bc:ba:10:7c:cc:f8:86:e9:a1:03:31:67:d6:5d: c7:9d:dd:f1:b2:a8:ac:76:b0:09:8e:2b:d4:28:93:d5:34:68: 5a:98:54:62:50:d7:ab:5d:35:6c:aa:c8:92:7d:34:ed:05:e0: 8e:4b:7b:6e:d3:0a:81:01:02:b1:19:8d:94:c9:77:1e:ba:c8: df:83:81:24:f3:82:26:1c:dd:dc:f2:63:51:73:36:95:a3:84: 02:44:b8:59:44:b1:72:57:53:4d:76:19:0c:23:cb:c3:96:cc: 73:6b:1e:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMYAdl578JbE6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NzBmYmE5MzctZWRhNS00OGE4LWI3NDgtZTk3MThiYTAzNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRavI1NvY3zgqq7wuSmyq/bAd7U79419Hzfh G8m/mQy19cE4u9Lg9C7OI3ygNXrYtWZl2GlgotzHIggkgvLraAGf4Wuga99bVjpE wQ3WY6qrzX/0+b3AKQf/L6OrogtM4N+gXs9q9s+oXOVOpDj4uWbxEyRcoQIiQEbt Uk7t6HclRj5+njJANXeB/HUIAnZloQAiMt/hu/2W8UjD0Y/yFo72cFpaooMHnvfd UZ5hvN+seqLstNAWK5IY4qxs3t1S67pgORE9EACVw9EvspT8XaxyNXwlToDSPjHU ahyRpWWaPFxlJMTJMxLQGcyNOidwHWmi6z8pf+MJy2MIqRRuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpPNqYu97XoJ8Oaay9JBV/0vy+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmY4NmYxNjItOWNjNy0z ODU1LTg2YmEtNmVhNTM1Y2JhNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8J/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFjcI/snjNqFnGmuif1hW6ahiMHhK/quahcVOLUcOCZb2hrzo3jPgxb B6lDS49auaJ6X+44cLnajosjYL49J9AYNTg5UVYL+TsQoQSbYmz6cbVj4fgMVeLV g7HNHTsD9btIorrYv62u1fkD63ShInq4xwsrTOX9adKb8EbzobkysPbRoI3NmxCy 57b/FBnC1WJzicK8uhB8zPiG6aEDMWfWXced3fGyqKx2sAmOK9Qok9U0aFqYVGJQ 16tdNWyqyJJ9NO0F4I5Le27TCoEBArEZjZTJdx66yN+DgSTzgiYc3dzyY1FzNpWj hAJEuFlEsXJXU012GQwjy8OWzHNrHm8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:18 2025 by rpki-client