$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7663d8f2-3503-3f87-b215-9c337ed2f12e.roa File: 7663d8f2-3503-3f87-b215-9c337ed2f12e.roa (raw, json) Hash identifier: AQa2VSkH89+8b2PlLnL2ZxVfbMXxQ4UU0+pNW0TQLJY= Subject key identifier: 44:AD:A8:7B:73:8D:E3:4C:37:A6:D6:29:06:E8:32:1C:6E:B9:08:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340B98026F745208CDBD840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7663d8f2-3503-3f87-b215-9c337ed2f12e.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.210.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b9:80:26:f7:45:20:8c:db:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=d43da94f-73fa-44cc-9106-3bcab6072427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:06:28:fa:65:9b:fc:af:a5:ac:30:7d:45: 0b:40:7c:95:24:42:e2:45:74:da:d4:ba:05:9c:3a: 82:9e:02:07:15:f8:d6:6d:17:b8:a3:ec:2f:bd:0b: 33:ab:5c:66:67:ba:4b:bc:77:45:fc:5d:df:26:26: ad:54:b2:1f:99:57:83:81:32:ef:4a:61:0d:81:1c: 09:c7:ba:e2:ad:de:30:90:ce:80:af:84:20:04:0f: 83:36:34:b5:f5:10:33:4b:ea:e1:e5:fb:3b:cd:7b: 1d:ae:3b:9c:74:8e:e2:fa:58:1b:e1:f1:d5:bf:2e: 18:32:ac:0f:5a:dc:8f:7b:35:c2:5c:ee:89:39:af: 2e:a6:42:24:eb:62:a6:83:c2:ed:47:93:e6:2a:d9: 54:fd:41:25:07:e2:61:6a:88:15:9b:55:0f:31:f5: 8e:e6:91:a8:58:75:a6:60:74:bf:fd:c9:37:81:16: 0b:50:3a:eb:be:9c:13:84:d1:c2:4b:88:ca:b2:8a: 30:08:dd:8e:75:86:16:a4:84:6c:43:10:72:ca:96: 01:8e:4d:b9:4a:8c:18:58:d9:bb:a5:9c:48:69:94: e0:a6:6c:e6:79:10:a3:a0:35:3f:35:f0:e1:9b:ad: b9:8e:a9:63:3f:1d:79:10:bb:9c:ed:30:31:bd:05: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AD:A8:7B:73:8D:E3:4C:37:A6:D6:29:06:E8:32:1C:6E:B9:08:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7663d8f2-3503-3f87-b215-9c337ed2f12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:25:ca:aa:31:8a:f0:70:a5:bd:bb:41:e3:c8:8f:4a:2a:cb: f2:fb:68:3b:c7:04:3a:9c:67:9b:ad:ed:21:f8:7b:0b:d0:72: 46:09:cb:8f:42:6c:c5:e5:55:f4:bd:fd:56:20:9c:5f:c0:bb: c9:5f:34:5e:d7:bd:9a:96:30:cb:a1:f0:75:31:6e:f0:16:c2: c6:fc:fd:fe:c2:92:43:06:92:ce:bf:20:9d:2a:d5:7c:be:87: 1f:c9:70:2e:fb:87:82:ba:41:46:94:31:28:5a:c5:29:ca:60: 2f:03:e7:b1:7e:c9:1c:25:63:40:a4:9c:39:96:03:a6:46:00: ea:d6:d4:20:4e:a3:ff:4c:84:c4:81:29:f8:8d:9a:38:61:d8: ff:1b:86:45:20:b9:1d:13:e6:fa:0a:57:12:7a:36:3c:49:b1: 06:63:13:25:b0:1b:95:42:15:f6:dc:c1:81:de:be:46:00:0e: 25:21:b3:d2:7c:ca:1d:5f:62:a1:fb:c6:30:3c:92:a5:80:a1: 75:8c:d7:73:95:1b:e7:7b:b9:e5:cf:43:69:1a:88:cb:f2:2a: 0f:f1:56:fb:55:82:17:4e:f2:08:98:f0:ae:f9:39:05:79:22: 1e:7b:54:67:7d:a4:24:c6:37:cc:e9:92:a1:9a:c3:83:0c:d2: 95:1c:a2:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLmAJvdFIIzb2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZDQzZGE5NGYtNzNmYS00NGNjLTkxMDYtM2JjYWI2MDcyNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJcGKPplm/yvpawwfUULQHyVJELiRXTa1LoF nDqCngIHFfjWbRe4o+wvvQszq1xmZ7pLvHdF/F3fJiatVLIfmVeDgTLvSmENgRwJ x7rird4wkM6Ar4QgBA+DNjS19RAzS+rh5fs7zXsdrjucdI7i+lgb4fHVvy4YMqwP WtyPezXCXO6JOa8upkIk62Kmg8LtR5PmKtlU/UElB+JhaogVm1UPMfWO5pGoWHWm YHS//ck3gRYLUDrrvpwThNHCS4jKsoowCN2OdYYWpIRsQxByypYBjk25SowYWNm7 pZxIaZTgpmzmeRCjoDU/NfDhm625jqljPx15ELuc7TAxvQVkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEStqHtzjeNMN6bWKQboMhxuuQg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY2M2Q4ZjItMzUwMy0z Zjg3LWIyMTUtOWMzMzdlZDJmMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9IwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGklyqoxivBwpb27QePIj0oqy/L7aDvHBDqcZ5ut7SH4ewvQckYJy49C bMXlVfS9/VYgnF/Au8lfNF7XvZqWMMuh8HUxbvAWwsb8/f7CkkMGks6/IJ0q1Xy+ hx/JcC77h4K6QUaUMShaxSnKYC8D57F+yRwlY0CknDmWA6ZGAOrW1CBOo/9MhMSB KfiNmjhh2P8bhkUguR0T5voKVxJ6NjxJsQZjEyWwG5VCFfbcwYHevkYADiUhs9J8 yh1fYqH7xjA8kqWAoXWM13OVG+d7ueXPQ2kaiMvyKg/xVvtVghdO8giY8K75OQV5 Ih57VGd9pCTGN8zpkqGaw4MM0pUcohc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:22 2025 by rpki-client