$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d38b5ea-85ad-3738-aa71-be03e25a2126.roa File: 7d38b5ea-85ad-3738-aa71-be03e25a2126.roa (raw, json) Hash identifier: f/PA1Dk5Ug3r0KBbVh+wkusyK5BPEgkQk0DRbsNWd5w= Subject key identifier: 4E:65:76:9D:6B:52:60:EF:F4:83:2D:48:A7:51:DC:AC:9C:FA:F2:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5EB18DE59FAF2B4BA910 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d38b5ea-85ad-3738-aa71-be03e25a2126.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.58.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5e:b1:8d:e5:9f:af:2b:4b:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=f664bf3d-4452-42d9-a87d-7e93ba063e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:37:4f:8e:9e:b1:a0:2e:6c:46:2a:28:a0: bc:5e:dd:6a:06:1b:bb:b0:4e:76:5b:68:7f:9f:d5: 81:d7:25:03:0e:67:92:98:ed:9e:62:52:8a:76:d6: e3:2f:82:e3:be:a5:6c:f9:09:a6:dc:19:4b:6e:bb: ef:81:c6:14:13:4d:01:63:6f:94:e4:98:3a:7e:36: bd:6c:b9:1a:c0:df:59:db:84:20:1b:73:69:34:1d: 5d:15:10:d0:5b:f0:e2:8a:26:c3:d0:20:59:f2:47: 9d:6d:77:91:da:21:16:57:96:c0:f8:bf:7a:98:62: 2d:cf:41:55:c6:77:ca:6b:45:98:0d:7f:63:7f:6c: af:61:21:6a:82:97:80:16:a7:10:45:c0:f3:9a:c8: 51:52:23:30:60:1d:d7:d3:bf:8d:59:12:3e:2e:a0: 02:3d:83:f5:e6:28:38:2b:93:63:6b:56:53:62:43: bb:c0:be:17:37:71:f3:bd:fd:ff:be:37:2b:28:23: 7a:c6:91:3d:9e:15:e5:46:90:ac:dd:da:8c:77:a3: 73:96:d3:19:15:76:99:1e:8d:e3:09:85:14:83:31: 96:83:47:1a:fd:a0:9f:29:f2:ce:80:37:39:66:6e: ea:08:36:48:19:bd:37:f8:a4:d0:05:aa:f3:9e:a9: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:65:76:9D:6B:52:60:EF:F4:83:2D:48:A7:51:DC:AC:9C:FA:F2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d38b5ea-85ad-3738-aa71-be03e25a2126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ad:97:bc:72:c6:f5:83:45:f2:51:8c:b7:f2:96:15:38:2f: d2:ab:a3:05:69:c4:f4:5d:4d:cc:73:d7:67:b8:c8:ef:89:cb: 5f:65:9c:ef:18:cf:f0:45:88:38:15:aa:38:c8:ec:3f:52:27: 1f:2d:c7:b8:49:fc:8e:a7:29:7f:e0:99:34:c6:a5:63:f1:f4: fb:00:bb:17:da:53:f9:74:ff:5d:b9:37:99:5f:c9:0c:d6:ad: 05:8a:a7:b5:04:14:bc:d1:f2:d2:79:22:aa:18:ff:6a:fa:e6: bc:73:7c:22:65:a0:c5:70:75:97:cb:5e:7e:38:d4:56:11:55: af:63:8e:b5:0d:40:6f:8c:0b:82:3a:5f:9a:ae:46:47:8c:60: 8b:3d:ce:c3:24:cf:93:aa:6c:01:9d:4b:cf:01:d2:45:ce:16: a4:2f:b6:25:9c:27:b4:c6:d5:33:8c:3c:69:09:74:46:f6:6a: 55:ba:f6:d8:f4:bf:7a:ec:76:40:00:95:3d:61:03:3f:3b:e8: ef:e9:5f:22:6e:5c:15:65:4f:94:95:01:63:f1:5e:c1:4d:b6: 12:f6:1a:54:54:dc:06:c3:56:d4:c1:ac:6e:da:22:89:46:f5: b4:34:19:2c:c6:67:92:a3:82:a7:cc:b6:62:8e:f9:7f:a7:04: 5f:62:00:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq16xjeWfrytLqRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk ZjY2NGJmM2QtNDQ1Mi00MmQ5LWE4N2QtN2U5M2JhMDYzZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRI3T46esaAubEYqKKC8Xt1qBhu7sE52W2h/ n9WB1yUDDmeSmO2eYlKKdtbjL4LjvqVs+Qmm3BlLbrvvgcYUE00BY2+U5Jg6fja9 bLkawN9Z24QgG3NpNB1dFRDQW/DiiibD0CBZ8kedbXeR2iEWV5bA+L96mGItz0FV xnfKa0WYDX9jf2yvYSFqgpeAFqcQRcDzmshRUiMwYB3X07+NWRI+LqACPYP15ig4 K5Nja1ZTYkO7wL4XN3Hzvf3/vjcrKCN6xpE9nhXlRpCs3dqMd6NzltMZFXaZHo3j CYUUgzGWg0ca/aCfKfLOgDc5Zm7qCDZIGb03+KTQBarznqkUGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5ldp1rUmDv9IMtSKdR3Kyc+vLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2QzOGI1ZWEtODVhZC0z NzM4LWFhNzEtYmUwM2UyNWEyMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAButl7xyxvWDRfJRjLfylhU4L9KrowVpxPRdTcxz12e4yO+Jy19lnO8Y z/BFiDgVqjjI7D9SJx8tx7hJ/I6nKX/gmTTGpWPx9PsAuxfaU/l0/125N5lfyQzW rQWKp7UEFLzR8tJ5IqoY/2r65rxzfCJloMVwdZfLXn441FYRVa9jjrUNQG+MC4I6 X5quRkeMYIs9zsMkz5OqbAGdS88B0kXOFqQvtiWcJ7TG1TOMPGkJdEb2alW69tj0 v3rsdkAAlT1hAz876O/pXyJuXBVlT5SVAWPxXsFNthL2GlRU3AbDVtTBrG7aIolG 9bQ0GSzGZ5KjgqfMtmKO+X+nBF9iAKY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:37 2025 by rpki-client