$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa File: 71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa (raw, json) Hash identifier: MjWdWGEWMIsWlsutS+LINaMGMVeZDUwpuZ4GQ5h0L9I= Subject key identifier: C5:13:15:56:5B:B5:08:1C:00:1D:2C:16:2B:35:CB:6D:63:D8:1E:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B63EA02F4E7E790B62780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.223.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:63:ea:02:f4:e7:e7:90:b6:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=1b62898a-b51d-4f9f-bc05-d2d481103d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:d9:10:2b:ee:b3:cd:34:0b:8d:0d:44:3c: 20:33:a3:c5:a5:db:a4:0b:db:ac:ca:e7:ae:46:95: cf:1c:3a:bb:0e:23:e5:aa:7b:ff:ad:53:cc:9c:55: c7:6c:ad:a3:24:6c:5c:72:af:03:67:db:55:99:f8: f3:6f:2b:ac:c0:fa:12:f7:5f:cc:e0:2a:4d:d9:0d: 5f:ef:12:fc:37:16:52:72:b8:3e:7b:fa:f8:89:68: 90:dd:6e:6a:d5:9e:9d:1c:c8:72:53:69:e8:e8:35: bf:e2:21:1a:ef:52:8a:d6:88:bf:45:38:05:c4:04: 3b:77:44:5e:68:19:4c:00:f2:a1:8a:96:5b:3a:41: 33:1f:5a:e5:8f:e4:9d:d0:8a:e4:7e:f7:c3:3d:c9: 16:93:78:c9:4f:c6:cf:1e:73:80:32:bb:67:6f:30: 53:2d:c8:8d:50:e8:95:b8:74:43:98:b1:0a:37:94: 6d:b7:85:dc:9f:10:7b:f2:13:41:7d:55:16:16:32: d5:09:47:a9:01:2b:21:7d:2b:bf:81:80:fc:c3:e2: 5f:1e:15:36:f2:05:c4:c6:b0:05:5b:e8:7c:a6:5f: d3:fd:6c:01:6e:10:fd:ee:8b:56:b9:7c:bf:d9:49: e7:7f:6d:78:93:d3:0d:c1:4e:52:5a:2c:07:74:30: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:13:15:56:5B:B5:08:1C:00:1D:2C:16:2B:35:CB:6D:63:D8:1E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae3d76-bff5-341b-a97c-6814fc5b7dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3f:2a:1b:7a:80:0c:ca:0b:51:60:ad:fb:51:6a:4d:81:2d: 40:17:30:43:d1:65:85:70:d2:95:98:40:08:48:b9:60:7b:68: 0f:e1:52:33:7b:82:f1:9e:09:db:e6:01:73:a5:cb:21:d1:83: 82:3b:98:f0:ec:ed:14:64:44:23:82:fe:2c:36:62:2e:0a:4f: 24:50:51:26:aa:5c:5a:3f:09:62:d8:ee:91:12:7e:fa:cb:84: ed:c2:2e:32:18:c4:10:6e:7c:0e:b1:4e:1d:f3:d2:c3:b3:ae: 5b:e7:f9:1d:ea:d0:a5:97:34:03:33:89:ec:a1:a8:35:92:b5: ef:e6:10:d3:c5:87:7c:1c:5c:d5:1d:8a:03:96:16:4e:77:04: cb:02:61:f7:f7:c0:7d:c1:14:d1:ae:f7:1d:6e:b8:b8:20:2d: d2:f7:1c:bf:f7:e6:aa:ce:27:5e:59:c6:e9:cf:2c:17:6e:46: 28:a0:f3:53:f9:ee:3c:50:e0:0e:92:db:dd:67:7e:c5:3c:73: 74:2d:15:44:fc:11:df:e1:0d:c7:73:d0:b0:d7:68:06:1a:e0: ee:b2:3d:fa:29:a6:7e:4c:78:a2:b6:70:94:92:83:13:99:9f: c2:36:d8:9b:a1:f5:c0:9b:80:a8:35:a9:ab:7c:de:b8:6b:1d: 31:cc:81:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC2PqAvTn55C2J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MWI2Mjg5OGEtYjUxZC00ZjlmLWJjMDUtZDJkNDgxMTAzZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY7ZECvus800C40NRDwgM6PFpdukC9usyueu RpXPHDq7DiPlqnv/rVPMnFXHbK2jJGxccq8DZ9tVmfjzbyuswPoS91/M4CpN2Q1f 7xL8NxZScrg+e/r4iWiQ3W5q1Z6dHMhyU2no6DW/4iEa71KK1oi/RTgFxAQ7d0Re aBlMAPKhipZbOkEzH1rlj+Sd0IrkfvfDPckWk3jJT8bPHnOAMrtnbzBTLciNUOiV uHRDmLEKN5Rtt4XcnxB78hNBfVUWFjLVCUepASshfSu/gYD8w+JfHhU28gXExrAF W+h8pl/T/WwBbhD97otWuXy/2Unnf214k9MNwU5SWiwHdDDuVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUTFVZbtQgcAB0sFis1y21j2B76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhZTNkNzYtYmZmNS0z NDFiLWE5N2MtNjgxNGZjNWI3ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA/Kht6gAzKC1FgrftRak2BLUAXMEPRZYVw0pWYQAhIuWB7aA/hUjN7 gvGeCdvmAXOlyyHRg4I7mPDs7RRkRCOC/iw2Yi4KTyRQUSaqXFo/CWLY7pESfvrL hO3CLjIYxBBufA6xTh3z0sOzrlvn+R3q0KWXNAMzieyhqDWSte/mENPFh3wcXNUd igOWFk53BMsCYff3wH3BFNGu9x1uuLggLdL3HL/35qrOJ15ZxunPLBduRiig81P5 7jxQ4A6S291nfsU8c3QtFUT8Ed/hDcdz0LDXaAYa4O6yPfoppn5MeKK2cJSSgxOZ n8I22Juh9cCbgKg1qat83rhrHTHMgbU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:31 2025 by rpki-client