$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc91d12-5b46-3f15-9c3f-a87e8007d4a2.roa File: 6fc91d12-5b46-3f15-9c3f-a87e8007d4a2.roa (raw, json) Hash identifier: 04VUJri3kxXxLKgTEzaefbM/KAqONSRWOGs2g9x+plA= Subject key identifier: E8:1E:A5:28:B7:8B:6D:88:4A:06:09:AC:1A:CA:8B:A4:22:41:D2:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830C81AE0039746A7EFC280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc91d12-5b46-3f15-9c3f-a87e8007d4a2.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.201.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:c8:1a:e0:03:97:46:a7:ef:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=153388a9-a0cd-4653-a2dc-e50cd892f1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:0a:a4:2b:24:fc:6b:a5:3c:b6:a5:d7:94: 0f:e8:46:25:45:7b:84:f9:bf:1c:84:0a:19:16:d0: 2f:43:39:6e:a8:9c:9a:0b:a1:f8:66:e5:3c:f1:82: 46:8e:67:cd:0b:07:e3:fe:02:6f:3d:d8:81:af:91: d9:e1:a5:74:78:5b:60:dc:11:96:d9:c4:ce:43:c9: 19:7e:1e:0a:c9:9c:99:5e:bf:d4:2a:5b:6d:af:6a: bc:74:b7:13:37:fd:f1:d6:ce:92:08:2e:90:18:3f: ab:a5:a7:d9:8b:05:3f:f6:b5:93:8e:8e:40:73:b2: f5:fe:1e:1d:b3:67:05:40:a5:b0:4d:d9:e4:86:f3: 98:b3:40:68:91:b5:1d:84:c9:ad:e6:50:2f:d5:b1: de:3b:47:e2:23:06:80:1d:e1:07:fa:10:c9:7c:f8: 83:47:35:5e:2f:08:30:eb:11:23:a8:9b:40:b6:97: 50:e2:fd:a3:6c:cd:34:cc:fc:08:d0:c7:a8:5e:fb: 5f:67:64:05:4e:58:b4:a9:d1:4b:a5:51:2e:60:e0: 69:68:72:e2:a5:e1:35:0c:e4:cb:b4:c2:6f:46:9d: 03:62:2a:af:ab:ee:a5:60:3b:27:be:89:07:53:05: 63:4f:68:7b:07:14:d1:b5:78:d0:f5:b6:d5:c7:7d: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1E:A5:28:B7:8B:6D:88:4A:06:09:AC:1A:CA:8B:A4:22:41:D2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc91d12-5b46-3f15-9c3f-a87e8007d4a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b4:36:9a:d9:f5:9b:ce:65:38:97:65:8e:29:0d:f3:be:4a: db:9e:a8:a3:75:4e:c4:ba:e3:75:1b:80:64:0b:36:10:e3:a5: bb:b0:ac:8d:ab:94:eb:35:68:9e:4e:00:03:7a:a0:ee:bc:20: 69:81:09:77:a3:91:25:dd:ef:de:73:ac:30:9c:dc:8e:b4:ee: a5:9d:d2:88:ae:76:cd:a0:3e:d8:1d:16:73:6b:d4:92:3f:4f: c1:bb:9e:10:57:e3:57:a2:81:8f:85:7e:b4:13:68:95:2d:c8: 98:d1:3a:1a:49:6d:8f:58:31:33:71:e1:a0:01:d8:78:ad:96: 69:f5:cc:87:24:27:63:d9:8f:b5:cb:91:9d:ea:25:cb:0e:7f: cc:3e:97:29:88:52:c4:b9:75:c1:aa:46:4a:98:b5:25:5e:30: d1:7c:40:cf:0d:a7:e5:73:d3:87:ca:5d:c2:a5:4b:13:d9:92: 6c:8d:0e:30:da:98:41:68:7d:c0:d3:c0:3d:b2:1a:a6:03:76: fd:00:95:7a:49:33:ef:b3:2f:20:34:51:66:d4:f3:21:ee:81: d1:9c:ee:d3:eb:e9:65:50:c4:e0:59:75:22:63:30:36:8a:23: b7:62:5a:32:41:9a:9d:01:0a:14:c7:f5:4a:a1:7e:ff:4e:dc: 48:d8:96:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMga4AOXRqfvwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk MTUzMzg4YTktYTBjZC00NjUzLWEyZGMtZTUwY2Q4OTJmMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcKpCsk/GulPLal15QP6EYlRXuE+b8chAoZ FtAvQzluqJyaC6H4ZuU88YJGjmfNCwfj/gJvPdiBr5HZ4aV0eFtg3BGW2cTOQ8kZ fh4KyZyZXr/UKlttr2q8dLcTN/3x1s6SCC6QGD+rpafZiwU/9rWTjo5Ac7L1/h4d s2cFQKWwTdnkhvOYs0BokbUdhMmt5lAv1bHeO0fiIwaAHeEH+hDJfPiDRzVeLwgw 6xEjqJtAtpdQ4v2jbM00zPwI0MeoXvtfZ2QFTli0qdFLpVEuYOBpaHLipeE1DOTL tMJvRp0DYiqvq+6lYDsnvokHUwVjT2h7BxTRtXjQ9bbVx32bdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgepSi3i22ISgYJrBrKi6QiQdLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmZjOTFkMTItNWI0Ni0z ZjE1LTljM2YtYTg3ZTgwMDdkNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+0NprZ9ZvOZTiXZY4pDfO+StueqKN1TsS643UbgGQLNhDjpbuwrI2r lOs1aJ5OAAN6oO68IGmBCXejkSXd795zrDCc3I607qWd0oiuds2gPtgdFnNr1JI/ T8G7nhBX41eigY+FfrQTaJUtyJjROhpJbY9YMTNx4aAB2Hitlmn1zIckJ2PZj7XL kZ3qJcsOf8w+lymIUsS5dcGqRkqYtSVeMNF8QM8Np+Vz04fKXcKlSxPZkmyNDjDa mEFofcDTwD2yGqYDdv0AlXpJM++zLyA0UWbU8yHugdGc7tPr6WVQxOBZdSJjMDaK I7diWjJBmp0BChTH9Uqhfv9O3EjYlqI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:51 2025 by rpki-client