$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c411054-92e3-37a9-8bcc-efb8a72ea26d.roa File: 7c411054-92e3-37a9-8bcc-efb8a72ea26d.roa (raw, json) Hash identifier: zRMHIPc3DvepMNF9+zQs11/zSdMbk3eAfUbxKF2p9dg= Subject key identifier: 77:C5:FC:E3:39:E2:08:1B:CF:A8:A4:B1:D7:B5:95:92:A0:D1:D4:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489BA0AA44726676FA2B71F900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c411054-92e3-37a9-8bcc-efb8a72ea26d.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 213120 IP address blocks: 23.57.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Mar 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:aa:44:72:66:76:fa:2b:71:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=ed132197-f2fb-4333-a5c8-a24ac48ef51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:eb:f4:51:b6:a7:cd:aa:1d:88:ad:9d:6f: 1b:0d:6a:e0:af:40:00:7a:a4:15:72:9c:d1:1a:55: 2b:07:e3:60:16:c2:59:4c:11:8a:ea:c4:ed:11:3f: d3:54:3e:10:d1:9e:6f:b1:d5:49:68:e1:b9:61:1c: 54:b3:7e:1f:b2:2a:06:f9:54:cf:18:3b:53:5d:4c: 18:59:c9:f6:80:de:2a:3b:b1:5e:38:4c:90:91:65: 39:dc:5a:64:a7:77:25:d8:e9:82:6e:2f:d0:bb:c6: a9:97:00:9a:22:67:ed:91:d7:82:4f:83:1a:d0:b6: 7b:d0:60:9b:b1:8a:9d:0b:98:b7:4f:1c:9c:f0:81: e7:83:73:bd:f3:14:57:f2:1f:cf:ba:35:fb:79:0e: 25:ed:d3:06:f7:07:bc:ed:ae:c2:be:9e:7c:6b:7d: ae:45:39:59:9d:8b:95:93:82:ab:57:bc:92:59:9d: 54:42:1d:da:67:7a:51:94:66:cb:fb:10:09:7c:bd: f4:ac:9f:51:eb:4e:7a:22:77:4a:1a:1a:1a:e1:3c: 30:bb:4c:6f:a0:b4:ef:2f:cb:f8:75:43:e4:96:23: b8:19:23:f8:ee:58:39:f2:fd:a1:59:5d:72:0f:39: b6:e1:ee:0f:8b:58:22:bc:2f:d9:9e:89:e1:12:75: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C5:FC:E3:39:E2:08:1B:CF:A8:A4:B1:D7:B5:95:92:A0:D1:D4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c411054-92e3-37a9-8bcc-efb8a72ea26d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:43:7c:ea:31:0e:e0:ec:65:6c:d0:6e:52:ae:a8:8d:21:ed: 22:2e:1c:58:66:4d:20:f1:4a:20:53:60:50:1d:72:8c:9c:ea: 36:92:59:1f:46:02:5c:3e:44:43:c4:43:da:0c:ba:82:46:1a: 84:19:3b:32:bf:ed:78:86:50:bb:c8:b6:93:0a:7c:7d:77:a0: 3a:c9:29:be:1b:a3:82:46:5b:73:5c:ec:0c:47:be:a6:45:4f: 74:bb:5d:ac:57:f8:66:66:93:67:cf:87:55:e0:d1:d5:a9:b5: cb:c1:c3:f5:e0:f0:b2:90:83:9a:71:dc:d4:86:e4:8f:14:48: e8:06:e2:69:ea:43:80:35:d9:c7:fc:f1:52:c5:06:1c:66:10: 08:fe:7a:65:4c:06:19:1b:4f:9a:e7:ac:b6:6d:f6:3f:27:32: 0e:f4:0f:70:14:80:1a:7f:80:38:14:1a:5b:42:26:59:42:b5: 54:bf:d3:c0:4b:0b:10:10:3e:9d:45:cd:61:a2:c9:dc:74:9f: 5c:1e:18:51:9a:32:39:c3:47:91:a0:63:ce:65:65:a1:92:ba: 51:cd:b9:60:a7:37:27:31:7f:98:e5:b9:6f:c3:3c:f6:a6:9f: b5:78:ad:8b:9e:10:2a:33:02:4a:72:57:35:1f:4a:96:de:85: e2:c6:60:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKpEcmZ2+itx+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZWQxMzIxOTctZjJmYi00MzMzLWE1YzgtYTI0YWM0OGVmNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljbr9FG2p82qHYitnW8bDWrgr0AAeqQVcpzR GlUrB+NgFsJZTBGK6sTtET/TVD4Q0Z5vsdVJaOG5YRxUs34fsioG+VTPGDtTXUwY Wcn2gN4qO7FeOEyQkWU53Fpkp3cl2OmCbi/Qu8aplwCaImftkdeCT4Ma0LZ70GCb sYqdC5i3Txyc8IHng3O98xRX8h/PujX7eQ4l7dMG9we87a7Cvp58a32uRTlZnYuV k4KrV7ySWZ1UQh3aZ3pRlGbL+xAJfL30rJ9R6056IndKGhoa4Twwu0xvoLTvL8v4 dUPkliO4GSP47lg58v2hWV1yDzm24e4Pi1givC/ZnonhEnUlTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfF/OM54ggbz6iksde1lZKg0dQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M0MTEwNTQtOTJlMy0z N2E5LThiY2MtZWZiOGE3MmVhMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzluMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVDfOoxDuDsZWzQblKuqI0h7SIuHFhmTSDxSiBTYFAdcoyc6jaSWR9G Alw+REPEQ9oMuoJGGoQZOzK/7XiGULvItpMKfH13oDrJKb4bo4JGW3Nc7AxHvqZF T3S7XaxX+GZmk2fPh1Xg0dWptcvBw/Xg8LKQg5px3NSG5I8USOgG4mnqQ4A12cf8 8VLFBhxmEAj+emVMBhkbT5rnrLZt9j8nMg70D3AUgBp/gDgUGltCJllCtVS/08BL CxAQPp1FzWGiydx0n1weGFGaMjnDR5GgY85lZaGSulHNuWCnNycxf5jluW/DPPam n7V4rYueECozAkpyVzUfSpbeheLGYJA= -----END CERTIFICATE-----Generated at Tue Mar 11 05:02:51 2025 by rpki-client