$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a0c9f86-6943-32ed-99a8-45607bef389a.roa File: 7a0c9f86-6943-32ed-99a8-45607bef389a.roa (raw, json) Hash identifier: fP1kvUIPXG5dIBJXjh6ebLCOXws13tM9retTtVbJe0U= Subject key identifier: 02:11:84:ED:33:42:C2:54:2C:79:89:64:CC:00:F5:C2:88:10:DA:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DD296C05D064641588C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a0c9f86-6943-32ed-99a8-45607bef389a.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 8781 IP address blocks: 23.195.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dd:29:6c:05:d0:64:64:15:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=ed0a72dc-9cc4-4ef3-8790-acffa28cdab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5b:6e:54:28:46:c4:9e:a6:7c:65:71:f8:8e: 11:be:26:b4:85:66:c1:c2:1d:e1:ed:74:8f:ae:af: e9:2d:e8:d6:17:3f:35:9d:ed:38:af:4c:53:37:58: a0:ea:da:45:48:bd:0d:69:aa:ec:d2:31:ca:e4:39: c7:94:4b:8e:49:d7:1d:28:39:ba:60:c8:5e:90:c4: 63:0b:52:09:4f:fd:42:88:03:86:44:d8:34:25:dd: b0:92:a7:26:2f:63:3a:4e:b3:d0:45:cf:ff:b1:fe: 41:e0:44:0f:90:12:28:5b:85:05:63:09:cd:ff:96: 65:ef:dd:b1:bd:4c:65:c4:69:2a:db:65:0a:99:78: 2c:3b:93:cd:a9:d3:4c:95:1e:b8:d6:d3:25:50:50: 3c:9a:d1:b7:84:63:97:05:13:3f:43:18:e6:4f:0f: 57:a4:6a:6b:6f:2a:bf:19:f2:5b:ca:da:c9:d2:f3: ae:f3:06:77:56:1e:58:44:5c:89:22:40:6b:94:0f: e4:59:80:a0:91:58:ee:2a:35:1e:2e:a8:f3:fc:ad: 3d:51:a9:17:34:98:b4:41:55:a2:2d:e6:90:27:f6: 98:b0:1a:fc:d9:87:2d:fa:1d:3e:f4:98:0b:a0:6f: 7b:6c:85:10:bd:64:03:1a:fc:f5:2d:b9:5d:08:6d: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:11:84:ED:33:42:C2:54:2C:79:89:64:CC:00:F5:C2:88:10:DA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a0c9f86-6943-32ed-99a8-45607bef389a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a4:ad:60:46:6d:20:25:bd:8b:fe:eb:8b:c6:ea:9e:1c:6e: 6b:ac:08:38:c1:e6:15:19:db:59:a5:c1:a2:02:4f:a6:b2:66: f9:05:2c:f2:b5:5a:10:dc:7c:3d:9c:39:d8:b9:4e:9f:e9:f8: c2:99:fd:5c:96:c1:89:7a:5b:f5:85:59:4e:2b:ed:90:da:d2: 70:9c:f9:d9:f2:c1:3e:a4:2a:51:fd:37:2f:8b:77:f2:c7:5c: 0a:49:7c:7a:76:5e:4a:14:f9:62:07:54:5e:64:99:8b:0f:62: b1:26:f0:b2:da:2b:6e:cf:03:09:fc:40:3b:85:9c:1c:c3:2f: 0b:3f:ed:ad:c6:aa:41:76:6f:64:f5:f8:81:cd:25:02:f4:82: 89:91:3d:11:20:35:dd:a1:a5:1f:4d:04:ce:7b:e6:1e:f6:0c: 74:36:c7:af:70:ff:45:49:2f:87:19:4a:a2:f6:f3:b5:ff:66: 7e:d3:e8:4d:6f:2e:35:81:34:8c:d1:f9:f7:40:63:fb:2d:f5: c4:aa:52:cf:9f:5a:51:5d:ab:2e:3f:32:a3:8c:ae:06:72:0b: 12:7a:d7:51:e1:8e:bc:fc:ba:cf:2f:8f:35:16:e0:c4:ed:12: 97:a3:0a:68:4f:52:3f:29:cb:c8:75:0b:6a:59:37:1d:22:28: 8f:1d:12:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN0pbAXQZGQViMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZWQwYTcyZGMtOWNjNC00ZWYzLTg3OTAtYWNmZmEyOGNkYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VtuVChGxJ6mfGVx+I4Rvia0hWbBwh3h7XSP rq/pLejWFz81ne04r0xTN1ig6tpFSL0Naars0jHK5DnHlEuOSdcdKDm6YMhekMRj C1IJT/1CiAOGRNg0Jd2wkqcmL2M6TrPQRc//sf5B4EQPkBIoW4UFYwnN/5Zl792x vUxlxGkq22UKmXgsO5PNqdNMlR641tMlUFA8mtG3hGOXBRM/QxjmTw9XpGprbyq/ GfJbytrJ0vOu8wZ3Vh5YRFyJIkBrlA/kWYCgkVjuKjUeLqjz/K09UakXNJi0QVWi LeaQJ/aYsBr82Yct+h0+9JgLoG97bIUQvWQDGvz1LbldCG3coQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIRhO0zQsJULHmJZMwA9cKIENp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2EwYzlmODYtNjk0My0z MmVkLTk5YTgtNDU2MDdiZWYzODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8MEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIekrWBGbSAlvYv+64vG6p4cbmusCDjB5hUZ21mlwaICT6ayZvkFLPK1 WhDcfD2cOdi5Tp/p+MKZ/VyWwYl6W/WFWU4r7ZDa0nCc+dnywT6kKlH9Ny+Ld/LH XApJfHp2XkoU+WIHVF5kmYsPYrEm8LLaK27PAwn8QDuFnBzDLws/7a3GqkF2b2T1 +IHNJQL0gomRPREgNd2hpR9NBM575h72DHQ2x69w/0VJL4cZSqL287X/Zn7T6E1v LjWBNIzR+fdAY/st9cSqUs+fWlFdqy4/MqOMrgZyCxJ611Hhjrz8us8vjzUW4MTt EpejCmhPUj8py8h1C2pZNx0iKI8dEp0= -----END CERTIFICATE-----Generated at Sat Apr 5 13:13:45 2025 by rpki-client