$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa File: 7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa (raw, json) Hash identifier: 2aqyQAtb5QT63nlhSFUIQKX2RqPS6LPeq//6LDv5qUk= Subject key identifier: E6:57:E1:0B:E3:EF:CB:9E:FD:FE:44:B4:C0:D4:75:02:63:DB:1D:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340B898AF7C905498E35600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.209.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b8:98:af:7c:90:54:98:e3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=5843ebd6-a4a5-4699-ae3c-58c55febca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6b:23:3d:06:09:c8:a4:ab:31:c0:bf:af:4f: 46:d1:36:65:40:50:77:44:9e:2c:68:ba:ed:1f:81: 27:b1:e2:c4:3b:b4:4b:3f:34:41:0b:c8:49:dc:fc: f2:4d:88:25:a9:25:a2:31:bd:5d:5b:9d:38:2e:7c: 32:bc:fb:c1:6b:19:37:d1:ea:d0:93:68:36:af:cc: 38:11:d9:5a:79:3b:86:c1:61:fa:72:38:6f:5a:ad: e3:f6:39:a5:ce:92:bb:9b:04:fd:32:6f:60:c0:99: 86:7d:db:f5:5e:e0:2a:a0:18:5d:8c:fe:d8:da:0f: 5b:d0:43:e9:43:f2:9e:b3:88:c9:d8:75:cb:b0:03: 98:ea:98:07:43:86:f2:87:ce:53:31:25:29:b5:15: 74:b6:a4:c4:41:ac:ac:3f:8d:b6:95:ab:ab:af:ae: 6d:c3:47:72:d3:18:4c:79:6d:b7:dc:ce:82:6f:0d: 55:84:a2:63:01:9f:d3:14:83:c3:db:42:2d:02:b3: f7:b9:01:37:e6:1b:47:94:07:11:08:cc:02:cd:a7: 7d:ef:75:ba:57:03:a7:b1:92:52:9d:b5:5d:63:d4: 12:b7:d8:97:b5:e6:51:b8:82:23:e6:8a:4f:08:99: 8c:9f:99:94:e6:10:c1:e7:64:29:cf:98:8e:8f:e1: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:E1:0B:E3:EF:CB:9E:FD:FE:44:B4:C0:D4:75:02:63:DB:1D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f0:6e:55:41:81:b8:6d:16:9a:ab:55:80:2e:d0:f0:e6:e1: a0:63:5e:ba:52:fb:ba:1c:1c:f2:3e:b9:5e:6c:3f:6e:1b:68: 4d:a2:4c:89:06:b0:e5:77:67:ab:f7:63:e4:d4:47:cd:81:6d: bb:11:34:52:a8:b8:05:72:7f:4a:18:7b:77:f0:e6:67:90:b8: d8:ea:06:e6:7e:c5:0c:e4:e1:4b:1c:f3:9f:ae:08:c4:f3:5e: 31:50:a5:69:0e:de:4c:42:1b:ad:b7:a1:97:e5:a9:61:2c:8e: bc:c2:05:e5:f7:72:31:04:cf:84:0e:73:70:28:9b:a7:44:28: a5:ba:70:af:ff:58:fa:28:aa:14:fb:57:f1:c9:7a:47:a4:12: e2:55:23:bf:28:a4:ac:b2:cf:3c:cc:40:33:9f:f2:d8:33:5f: 38:4d:ec:86:0a:23:da:c8:dc:49:76:1a:81:e0:cb:95:93:4e: 5d:88:15:a7:90:9f:f1:cd:54:6a:f8:9f:f7:1b:ac:35:44:90: ea:0a:92:14:8b:f3:7a:3e:e3:f5:a6:e3:eb:a7:48:5f:8d:93: 2b:3c:c3:52:b7:c2:eb:f4:49:e0:18:29:8e:cf:af:36:e4:1d: 16:e3:68:ce:57:2e:6b:3e:77:9e:f3:6d:29:5a:d2:13:b4:6a: e3:48:0c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLiYr3yQVJjjVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk NTg0M2ViZDYtYTRhNS00Njk5LWFlM2MtNThjNTVmZWJjYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2sjPQYJyKSrMcC/r09G0TZlQFB3RJ4saLrt H4EnseLEO7RLPzRBC8hJ3PzyTYglqSWiMb1dW504LnwyvPvBaxk30erQk2g2r8w4 EdlaeTuGwWH6cjhvWq3j9jmlzpK7mwT9Mm9gwJmGfdv1XuAqoBhdjP7Y2g9b0EPp Q/Kes4jJ2HXLsAOY6pgHQ4byh85TMSUptRV0tqTEQaysP422laurr65tw0dy0xhM eW233M6Cbw1VhKJjAZ/TFIPD20ItArP3uQE35htHlAcRCMwCzad973W6VwOnsZJS nbVdY9QSt9iXteZRuIIj5opPCJmMn5mU5hDB52Qpz5iOj+GbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZX4Qvj78ue/f5EtMDUdQJj2x3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2JkMTZiYjYtN2I4MC0z MzI2LTllYmYtZDNlMDdlZmM0MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXwblVBgbhtFpqrVYAu0PDm4aBjXrpS+7ocHPI+uV5sP24baE2iTIkG sOV3Z6v3Y+TUR82BbbsRNFKouAVyf0oYe3fw5meQuNjqBuZ+xQzk4Usc85+uCMTz XjFQpWkO3kxCG623oZflqWEsjrzCBeX3cjEEz4QOc3Aom6dEKKW6cK//WPooqhT7 V/HJekekEuJVI78opKyyzzzMQDOf8tgzXzhN7IYKI9rI3El2GoHgy5WTTl2IFaeQ n/HNVGr4n/cbrDVEkOoKkhSL83o+4/Wm4+unSF+Nkys8w1K3wuv0SeAYKY7Przbk HRbjaM5XLms+d57zbSla0hO0auNIDN0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:37 2025 by rpki-client