$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826cf486-3ac7-3dd3-be5a-4eb5d3724044.roa File: 826cf486-3ac7-3dd3-be5a-4eb5d3724044.roa (raw, json) Hash identifier: FRKc5/nU4n25Fx12/3R8L5Z1090X325pp4XM3lUvlRk= Subject key identifier: 68:C4:66:6C:73:A2:F1:71:8D:E2:A3:5D:D5:BA:BA:63:8B:0E:8D:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C7568F2DC28CD6593D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826cf486-3ac7-3dd3-be5a-4eb5d3724044.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.195.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c7:56:8f:2d:c2:8c:d6:59:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=81a388a3-1841-4ca9-bd93-3f9764b05358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:e4:34:4c:ad:df:82:5a:0b:25:6c:db:a5: dc:51:e2:b8:ac:75:d0:07:5c:85:80:12:aa:ba:9a: 99:ef:87:dc:7d:7e:e9:54:e2:e5:ce:89:e0:1e:24: 91:98:23:81:f6:72:5c:ca:5d:76:22:a4:28:a8:64: b7:d6:df:80:86:fb:50:87:25:dc:03:26:9d:2d:e8: 2d:4c:d7:27:14:fc:af:21:03:d3:da:98:36:2d:4e: 53:3f:cb:83:43:38:a7:e5:ad:27:e7:8f:a8:5b:8b: 1c:28:97:b2:a7:03:4a:72:63:db:33:f2:8c:97:d6: 61:72:5d:5a:91:f7:05:40:e6:26:93:2e:4a:ee:25: 3c:bf:da:d7:d5:58:82:91:e4:20:79:66:0f:6e:5c: e4:6d:58:45:30:ed:c6:1a:0b:34:9f:2b:fb:3a:95: 9f:25:a7:37:80:be:25:ff:32:e7:87:79:f7:28:66: 80:62:3d:9b:ef:72:05:b1:ef:19:b4:73:9c:63:65: 38:a7:32:ec:4a:38:19:9d:d3:cc:4d:60:d6:70:60: b9:0d:f0:00:98:a7:b5:ef:f0:39:c8:c6:e6:28:25: ce:2d:5c:26:f3:62:8f:26:f1:f0:7c:2b:10:4d:07: 85:a1:8b:7c:3f:ee:e0:16:e4:5a:58:a3:ca:1a:49: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C4:66:6C:73:A2:F1:71:8D:E2:A3:5D:D5:BA:BA:63:8B:0E:8D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826cf486-3ac7-3dd3-be5a-4eb5d3724044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:91:d0:39:9d:16:30:31:b4:52:cb:20:05:4e:3b:ff:7e:b0: 63:6d:70:2c:2a:f1:91:3c:30:36:b5:60:8e:02:e3:72:1e:28: 13:ea:99:67:91:43:90:02:d3:64:91:34:8e:88:8d:1a:69:5e: 91:2f:1d:4a:ae:dc:fd:fb:4b:50:57:7a:0b:bd:14:0b:5d:87: 24:d3:49:7e:64:ab:9b:70:7f:26:54:6e:24:f1:f0:f7:38:45: b8:54:2e:f7:06:e5:67:a4:62:d6:41:a7:66:a8:18:f7:1f:99: 24:e6:de:33:61:c2:7b:16:ea:a3:63:95:7e:92:31:b2:71:6e: 9b:41:86:3a:77:ed:38:b4:7a:cd:66:b0:c5:b4:0e:d3:68:60: 72:5b:46:84:c1:d5:f3:c5:da:46:2b:e3:3e:41:e0:8b:90:ba: 4e:14:06:c9:a6:49:2b:32:57:94:c6:0a:de:c5:30:b6:58:95: 93:6c:ec:29:04:db:38:5a:1a:6c:d7:a1:48:8c:de:f2:c9:5b: 24:1a:a5:a4:af:d3:b9:3d:3d:3e:20:eb:d1:88:75:90:7b:b4: fe:f3:53:4e:10:63:f8:09:bc:4a:27:23:ea:8e:31:8c:b8:15: 22:0a:27:c7:6e:2d:6d:f7:80:5d:d1:1d:63:22:ba:aa:8c:c5: 2e:c3:4a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMdWjy3CjNZZPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ODFhMzg4YTMtMTg0MS00Y2E5LWJkOTMtM2Y5NzY0YjA1MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMvkNEyt34JaCyVs26XcUeK4rHXQB1yFgBKq upqZ74fcfX7pVOLlzongHiSRmCOB9nJcyl12IqQoqGS31t+AhvtQhyXcAyadLegt TNcnFPyvIQPT2pg2LU5TP8uDQzin5a0n54+oW4scKJeypwNKcmPbM/KMl9Zhcl1a kfcFQOYmky5K7iU8v9rX1ViCkeQgeWYPblzkbVhFMO3GGgs0nyv7OpWfJac3gL4l /zLnh3n3KGaAYj2b73IFse8ZtHOcY2U4pzLsSjgZndPMTWDWcGC5DfAAmKe17/A5 yMbmKCXOLVwm82KPJvHwfCsQTQeFoYt8P+7gFuRaWKPKGklJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjEZmxzovFxjeKjXdW6umOLDo2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI2Y2Y0ODYtM2FjNy0z ZGQzLWJlNWEtNGViNWQzNzI0MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmR0DmdFjAxtFLLIAVOO/9+sGNtcCwq8ZE8MDa1YI4C43IeKBPqmWeR Q5AC02SRNI6IjRppXpEvHUqu3P37S1BXegu9FAtdhyTTSX5kq5twfyZUbiTx8Pc4 RbhULvcG5WekYtZBp2aoGPcfmSTm3jNhwnsW6qNjlX6SMbJxbptBhjp37Ti0es1m sMW0DtNoYHJbRoTB1fPF2kYr4z5B4IuQuk4UBsmmSSsyV5TGCt7FMLZYlZNs7CkE 2zhaGmzXoUiM3vLJWyQapaSv07k9PT4g69GIdZB7tP7zU04QY/gJvEonI+qOMYy4 FSIKJ8duLW33gF3RHWMiuqqMxS7DSs8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:04 2025 by rpki-client