$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7689ca50-626e-3637-bd1c-f56d525a7660.roa File: 7689ca50-626e-3637-bd1c-f56d525a7660.roa (raw, json) Hash identifier: VUNd6zm6VUFpvjgeGH7viY9kWNXeaXiLI00JC0L6mWg= Subject key identifier: FA:5F:4B:0E:CC:39:67:0F:70:F4:72:E2:2E:D1:BF:C8:15:FF:6D:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340B8BBEC3404CC09BFDA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7689ca50-626e-3637-bd1c-f56d525a7660.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.209.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b8:bb:ec:34:04:cc:09:bf:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=d34b4a79-751a-4a66-84a8-de2595894343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:df:00:92:b9:18:27:65:7b:4d:d3:38:a4: af:a2:be:69:bc:c0:f1:fc:e0:c3:c9:7a:28:9e:da: 5c:bb:3d:1d:44:ff:ee:2b:48:51:d1:77:a8:9f:3e: 11:4f:29:a4:58:73:a1:ed:c0:a0:eb:c5:87:a8:72: b7:a0:4d:b7:d9:18:80:4d:91:b9:3b:7f:15:65:57: a7:19:ff:52:99:fb:42:c7:bd:15:aa:df:59:08:80: df:7c:cf:82:39:77:af:46:a9:15:d2:d5:b8:92:64: 61:1d:a4:ca:e5:86:da:d9:16:33:fe:bc:0c:ea:4d: 03:94:53:ff:35:b6:ba:ec:75:54:84:ce:94:0e:5e: 4c:97:7f:54:10:de:09:2e:6e:c0:42:c7:dc:b4:71: 34:0b:ee:c2:12:90:9c:ec:e1:b8:4d:f1:a8:bd:88: 74:2a:3d:1a:fb:f1:2f:19:f2:6e:53:1b:e6:33:ed: 77:52:b8:a6:f4:22:75:10:32:85:c5:40:f3:dc:58: ec:90:70:61:36:8f:64:a9:54:e4:f5:5e:6c:44:18: c5:7b:49:d4:c0:ad:7a:ff:af:60:0a:eb:da:ef:62: 4b:79:91:a4:de:b9:ec:6e:bf:06:09:cc:09:e3:f0: d5:b3:72:9c:a8:39:2e:9c:07:8e:fa:aa:8c:4a:8b: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5F:4B:0E:CC:39:67:0F:70:F4:72:E2:2E:D1:BF:C8:15:FF:6D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7689ca50-626e-3637-bd1c-f56d525a7660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:de:09:d5:35:21:27:51:83:28:cc:e9:0b:54:6c:65:e6:f5: 79:2f:be:d0:ec:00:85:eb:80:5f:75:23:62:d0:ad:7b:09:ff: ea:ad:78:9a:7e:34:b3:50:d5:1f:e2:c0:d8:d2:aa:00:2e:60: dd:52:61:e6:68:f5:72:2e:2d:6f:85:84:5b:8b:12:47:64:ed: 00:1e:9d:0c:b9:75:fc:50:9e:56:d2:ed:fb:01:d1:83:a3:f2: 87:d2:2d:89:d2:e7:17:b4:bd:4a:cf:36:0b:69:99:00:09:f6: 4d:59:28:80:db:48:97:55:40:7d:23:41:36:7d:ec:2d:aa:e4: 12:ad:19:b7:07:96:7e:81:27:6d:5b:23:d9:6e:cf:7e:bc:87: d0:ef:56:ad:39:dd:c9:e4:8d:46:a2:88:d3:d4:ab:2b:77:5b: 75:b3:13:18:f0:d1:8a:32:37:6e:d2:cf:63:42:d8:fe:a4:a2: 98:70:36:2c:5f:16:e9:26:39:24:e8:37:80:0a:e5:a4:d5:4f: 21:8f:69:67:13:3c:50:ec:30:5c:86:2b:ef:f1:db:0a:f3:b4: 0c:59:82:7d:6e:38:be:1f:e1:ab:24:90:ab:a3:d2:a6:4c:b5: 95:3c:2d:9c:f2:ae:03:b6:b3:6c:7d:bd:ff:78:38:90:eb:e0: 95:eb:52:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLi77DQEzAm/2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZDM0YjRhNzktNzUxYS00YTY2LTg0YTgtZGUyNTk1ODk0MzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfvfAJK5GCdle03TOKSvor5pvMDx/ODDyXoo ntpcuz0dRP/uK0hR0Xeonz4RTymkWHOh7cCg68WHqHK3oE232RiATZG5O38VZVen Gf9SmftCx70Vqt9ZCIDffM+COXevRqkV0tW4kmRhHaTK5Yba2RYz/rwM6k0DlFP/ Nba67HVUhM6UDl5Ml39UEN4JLm7AQsfctHE0C+7CEpCc7OG4TfGovYh0Kj0a+/Ev GfJuUxvmM+13Urim9CJ1EDKFxUDz3FjskHBhNo9kqVTk9V5sRBjFe0nUwK16/69g Cuva72JLeZGk3rnsbr8GCcwJ4/DVs3KcqDkunAeO+qqMSos8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpfSw7MOWcPcPRy4i7Rv8gV/23NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY4OWNhNTAtNjI2ZS0z NjM3LWJkMWMtZjU2ZDUyNWE3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzeCdU1ISdRgyjM6QtUbGXm9XkvvtDsAIXrgF91I2LQrXsJ/+qteJp+ NLNQ1R/iwNjSqgAuYN1SYeZo9XIuLW+FhFuLEkdk7QAenQy5dfxQnlbS7fsB0YOj 8ofSLYnS5xe0vUrPNgtpmQAJ9k1ZKIDbSJdVQH0jQTZ97C2q5BKtGbcHln6BJ21b I9luz368h9DvVq053cnkjUaiiNPUqyt3W3WzExjw0YoyN27Sz2NC2P6kophwNixf FukmOSToN4AK5aTVTyGPaWcTPFDsMFyGK+/x2wrztAxZgn1uOL4f4askkKuj0qZM tZU8LZzyrgO2s2x9vf94OJDr4JXrUpU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:26 2025 by rpki-client