$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa File: 80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa (raw, json) Hash identifier: deIBXUyNMDDL1c9/8qjtI0YP7ESYQZ4uRkz0cPhW6tU= Subject key identifier: 3A:B7:AA:E4:1F:57:8D:E8:97:77:AE:D0:4F:62:78:B3:C3:87:F0:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584845159E0B1037440D6F148300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa Signing time: Fri 20 Dec 2024 14:00:51 +0000 ROA not before: Fri 20 Dec 2024 14:00:51 +0000 ROA not after: Thu 20 Mar 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.2.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:15:9e:0b:10:37:44:0d:6f:14:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 14:00:51 2024 GMT Not After : Mar 20 13:00:51 2025 GMT Subject: CN=88c733a3-6b90-49ca-b3db-df134f5f87c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:4f:99:9c:ad:1e:07:33:48:61:c5:1c:6e: 12:ee:9e:99:b6:6a:3c:0e:06:38:b3:3d:f6:ab:92: 9a:48:32:0a:c0:49:e6:10:41:71:f0:d1:df:25:59: d5:46:3a:45:92:d1:e6:6c:42:86:6b:6b:2c:ec:d4: 64:d0:8c:b5:8f:e0:ef:6f:43:df:c2:12:cc:1f:e6: bf:83:dd:81:dd:57:79:b8:e6:f9:8e:0b:17:19:a3: 43:77:c4:0d:eb:05:0b:1d:16:16:77:b3:d4:c0:ab: f0:2b:60:a0:ed:b1:09:de:e7:75:63:69:6d:fc:5d: b3:7e:6d:26:3e:5f:85:55:b4:4b:0b:9b:91:70:74: e7:04:ef:9f:23:d7:da:7e:0f:f0:81:0d:17:f8:f6: 9f:99:40:aa:fe:67:81:fb:f5:02:a2:d9:c3:97:be: 96:3b:1d:8f:11:c2:72:fc:cc:bc:c2:f0:9a:2b:bb: 1a:20:61:d7:1b:74:97:73:67:39:31:c9:88:2f:3e: 91:f3:b9:e9:ff:63:0b:1c:6b:1a:e3:68:f5:cd:33: 3c:24:1e:4b:84:e4:ec:5c:ad:fe:94:cd:cf:83:5e: 95:94:5d:39:33:10:c0:15:e1:9a:78:4c:35:dc:8f: ce:1f:a0:ff:25:57:c9:08:fd:5a:90:71:a6:7e:e5: 3b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:AA:E4:1F:57:8D:E8:97:77:AE:D0:4F:62:78:B3:C3:87:F0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e5:5d:71:46:dc:b3:47:bb:d8:2a:57:ba:ee:f4:b9:91:86: 17:e2:f1:ee:d7:df:6d:4f:73:4e:e5:25:a7:9c:64:69:4b:b5: 6e:98:68:60:8c:14:52:3e:bd:2c:00:a1:46:d1:13:99:fb:4b: cf:52:c7:58:ab:fa:42:bf:c8:04:04:b1:93:e5:10:77:55:b2: 15:fe:10:a1:a1:a8:63:77:8f:de:81:66:2d:df:67:b5:ff:4c: 59:17:3c:94:51:82:27:fb:93:42:11:48:a8:e9:43:fa:e2:6e: a0:8c:d3:f5:33:ee:39:07:9c:c0:b4:47:1a:83:aa:ef:cd:94: 82:45:0f:bd:fc:6d:12:4b:a8:16:1c:20:89:1d:00:24:af:df: 88:af:eb:b7:cd:f1:47:4b:54:a0:af:5c:5b:f0:7b:b9:f1:14: e6:fc:17:8f:86:b8:92:c1:80:4c:c0:bc:67:3b:40:1c:e5:12: 93:09:46:63:a2:54:41:bd:cb:c5:5d:67:0a:0a:9e:56:57:ec: 0a:98:e1:a3:d9:11:a3:44:0d:f0:dc:e8:a9:4f:6d:f9:1f:5a: ad:2e:97:32:82:05:02:b2:dc:0c:0c:15:d4:16:e2:3e:02:01: 88:0b:e9:2b:f6:bd:9c:ed:03:21:8e:a0:6e:27:30:50:9a:56: 03:d6:0f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZ4LEDdEDW8UgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk ODhjNzMzYTMtNmI5MC00OWNhLWIzZGItZGYxMzRmNWY4N2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk31PmZytHgczSGHFHG4S7p6Ztmo8DgY4sz32 q5KaSDIKwEnmEEFx8NHfJVnVRjpFktHmbEKGa2ss7NRk0Iy1j+Dvb0PfwhLMH+a/ g92B3Vd5uOb5jgsXGaNDd8QN6wULHRYWd7PUwKvwK2Cg7bEJ3ud1Y2lt/F2zfm0m Pl+FVbRLC5uRcHTnBO+fI9fafg/wgQ0X+PafmUCq/meB+/UCotnDl76WOx2PEcJy /My8wvCaK7saIGHXG3SXc2c5McmILz6R87np/2MLHGsa42j1zTM8JB5LhOTsXK3+ lM3Pg16VlF05MxDAFeGaeEw13I/OH6D/JVfJCP1akHGmfuU7yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq3quQfV43ol3eu0E9ieLPDh/CrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBmMWNlMTMtMmQ0My0z NjY4LWI4NzAtMGRlZDBlNWYxNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/lXXFG3LNHu9gqV7ru9LmRhhfi8e7X321Pc07lJaecZGlLtW6YaGCM FFI+vSwAoUbRE5n7S89Sx1ir+kK/yAQEsZPlEHdVshX+EKGhqGN3j96BZi3fZ7X/ TFkXPJRRgif7k0IRSKjpQ/ribqCM0/Uz7jkHnMC0RxqDqu/NlIJFD738bRJLqBYc IIkdACSv34iv67fN8UdLVKCvXFvwe7nxFOb8F4+GuJLBgEzAvGc7QBzlEpMJRmOi VEG9y8VdZwoKnlZX7AqY4aPZEaNEDfDc6KlPbfkfWq0ulzKCBQKy3AwMFdQW4j4C AYgL6Sv2vZztAyGOoG4nMFCaVgPWDys= -----END CERTIFICATE-----Generated at Sun Feb 16 21:03:18 2025 by rpki-client