$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77f5f89a-ded4-35d8-bd2f-046f44acd312.roa File: 77f5f89a-ded4-35d8-bd2f-046f44acd312.roa (raw, json) Hash identifier: i1rR4Smc2t0nZGdfU9VcZw1plOal1owtKhHRxV1hszo= Subject key identifier: 17:53:9F:0A:5C:69:17:CD:B3:76:AD:B5:F2:F6:2D:F2:2E:F5:93:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584883E5CE352CB8982305466940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77f5f89a-ded4-35d8-bd2f-046f44acd312.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 16625 IP address blocks: 23.51.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:ce:35:2c:b8:98:23:05:46:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=08061c5a-073d-4ea1-bd83-df2d06cd5cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:77:b1:76:67:9f:05:03:6d:a8:c0:e5:88: fe:30:03:87:5d:42:53:08:d3:76:49:dc:77:96:1f: b9:f6:4b:bf:65:36:39:14:96:15:84:85:17:e7:87: 70:03:8f:36:6e:5b:d2:61:d7:d8:d4:13:72:89:6a: 5f:36:9a:7e:15:34:25:c5:95:0f:ec:a0:8f:0f:74: 35:13:42:cb:02:fd:59:70:4f:fd:1e:e1:d4:1b:e4: 9f:3e:20:e8:0f:e6:64:7e:b2:65:68:8e:94:31:fa: d4:f9:28:4d:09:07:70:a6:d8:1f:4e:bd:79:21:32: 8c:37:35:c4:e0:bc:e9:64:62:08:c7:31:17:e2:a6: 3c:01:e2:e0:9d:d8:28:bb:8e:84:c0:d0:3a:7e:aa: 00:82:5a:d3:0f:91:6d:b1:cd:bc:2e:c7:f8:5c:82: 39:52:2c:f4:02:04:99:af:94:52:cc:7a:3e:48:0e: 60:06:55:a8:d1:c1:06:0b:d7:47:87:40:0c:f4:27: d0:98:fa:d8:2a:7a:b8:22:6f:02:56:f1:a6:64:4b: f0:d4:5b:07:e7:e8:ef:7d:5c:aa:ed:e8:8c:0a:44: 12:7b:a3:ba:c8:df:14:67:d5:a0:ca:87:3f:3d:05: d0:02:ea:f5:74:2d:ff:03:b6:fb:8d:fb:f3:4e:5e: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:53:9F:0A:5C:69:17:CD:B3:76:AD:B5:F2:F6:2D:F2:2E:F5:93:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77f5f89a-ded4-35d8-bd2f-046f44acd312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.51.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3d:b3:d8:df:df:9d:09:2f:ae:87:bb:da:19:4a:ba:14:ef: b4:a3:70:9d:a3:80:ae:01:f8:8f:e6:f4:d1:ef:42:ea:31:36: ea:91:94:18:51:ab:23:ea:4c:ff:36:05:5a:0d:e7:96:21:a8: bc:59:c8:a1:ba:f6:5c:fd:96:c5:87:02:0d:7e:3d:ea:db:91: 10:fb:f7:4b:14:1e:c1:54:f0:99:fe:54:e9:1c:00:b4:35:01: cd:4f:26:08:f1:4e:7e:46:3e:24:dd:b2:c4:39:3a:ac:c7:0a: f6:62:39:21:d6:0f:80:75:9a:15:e4:48:29:b8:00:65:1a:e9: 41:e6:2c:cb:3e:26:cb:55:c5:b0:db:eb:02:8e:a3:bb:02:98: 50:12:09:16:5e:2e:6e:95:75:b8:26:81:6a:66:04:c3:c8:42: 78:b0:65:20:4d:61:85:f8:1e:82:a8:97:b5:5e:a7:63:ac:9a: 1d:a1:41:c5:01:4b:c8:65:a8:c9:e9:bb:43:15:46:8e:35:67: ec:01:78:7b:e2:7d:73:ee:b1:a4:68:8a:66:2f:bf:ab:34:18: 64:a6:a6:69:a5:c5:5d:29:f4:33:bd:54:ee:9d:5f:bc:7d:35: ff:fd:a3:6a:b8:bc:18:f5:fc:b8:75:7d:7b:26:35:a7:04:66: d0:72:00:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5c41LLiYIwVGaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MDgwNjFjNWEtMDczZC00ZWExLWJkODMtZGYyZDA2Y2Q1Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2l3sXZnnwUDbajA5Yj+MAOHXUJTCNN2Sdx3 lh+59ku/ZTY5FJYVhIUX54dwA482blvSYdfY1BNyiWpfNpp+FTQlxZUP7KCPD3Q1 E0LLAv1ZcE/9HuHUG+SfPiDoD+ZkfrJlaI6UMfrU+ShNCQdwptgfTr15ITKMNzXE 4LzpZGIIxzEX4qY8AeLgndgou46EwNA6fqoAglrTD5Ftsc28Lsf4XII5Uiz0AgSZ r5RSzHo+SA5gBlWo0cEGC9dHh0AM9CfQmPrYKnq4Im8CVvGmZEvw1FsH5+jvfVyq 7eiMCkQSe6O6yN8UZ9Wgyoc/PQXQAur1dC3/A7b7jfvzTl6FSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdTnwpcaRfNs3attfL2LfIu9ZNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzdmNWY4OWEtZGVkNC0z NWQ4LWJkMmYtMDQ2ZjQ0YWNkMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA09s9jf350JL66Hu9oZSroU77SjcJ2jgK4B+I/m9NHvQuoxNuqRlBhR qyPqTP82BVoN55YhqLxZyKG69lz9lsWHAg1+PerbkRD790sUHsFU8Jn+VOkcALQ1 Ac1PJgjxTn5GPiTdssQ5OqzHCvZiOSHWD4B1mhXkSCm4AGUa6UHmLMs+JstVxbDb 6wKOo7sCmFASCRZeLm6VdbgmgWpmBMPIQniwZSBNYYX4HoKol7Vep2Osmh2hQcUB S8hlqMnpu0MVRo41Z+wBeHvifXPusaRoimYvv6s0GGSmpmmlxV0p9DO9VO6dX7x9 Nf/9o2q4vBj1/Lh1fXsmNacEZtByAD4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:11 2025 by rpki-client