$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/832f4df4-fd54-3144-80f2-3fd28476e582.roa File: 832f4df4-fd54-3144-80f2-3fd28476e582.roa (raw, json) Hash identifier: tmCZUvAe4glgcah7SF/lugeq66lfC2z9dZ8/1zs2c1g= Subject key identifier: D8:46:D2:15:F5:A1:8D:EE:60:6A:2B:EF:0F:6E:FD:73:EE:CA:3D:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B1ED011F54784ACC413C0200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/832f4df4-fd54-3144-80f2-3fd28476e582.roa Signing time: Tue 28 Jan 2025 13:42:30 +0000 ROA not before: Tue 28 Jan 2025 13:42:30 +0000 ROA not after: Mon 28 Apr 2025 12:42:30 +0000 asID: 16625 IP address blocks: 23.221.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:ed:01:1f:54:78:4a:cc:41:3c:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 28 13:42:30 2025 GMT Not After : Apr 28 12:42:30 2025 GMT Subject: CN=f58e98e7-535b-460e-9506-87e716c917ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:a4:b2:4d:3a:4d:33:68:d5:38:18:92:7e: b9:65:91:f1:73:b5:12:d5:04:72:03:f9:3c:88:9b: 45:63:b5:14:b4:d7:7c:5c:2f:4a:fa:bf:cd:66:69: ff:74:71:5f:af:18:c5:3b:63:68:a5:23:3a:42:51: e2:cb:53:72:ef:9f:55:11:be:a0:f9:32:09:dd:b5: f5:e3:41:4b:79:7b:78:93:29:e5:3c:66:5b:a5:d5: 3a:fa:fc:96:48:b1:c0:9b:94:0e:d0:c0:f4:0a:e5: 89:6a:16:d6:58:ad:c8:1c:99:c9:80:f9:c8:cf:de: 9a:0d:ef:a2:87:bd:f4:88:63:70:66:83:b3:50:36: 1d:bc:8c:6b:95:44:ba:7b:b7:14:da:17:aa:df:73: b6:93:49:9d:9d:f2:74:66:f0:fe:cf:bd:66:ef:fb: d1:07:ba:20:a0:4a:6f:3b:01:d6:0b:21:90:4d:b6: 68:67:28:1d:9c:ee:19:58:d6:d9:ba:49:23:c1:47: 2a:1f:05:78:81:9b:3b:92:18:08:a6:8e:15:f7:bb: e3:dc:ef:a7:51:55:1f:f1:b6:4a:1a:60:93:e5:b0: 8f:d9:e2:fe:83:f9:fc:b4:69:b0:1b:85:f1:ff:03: e7:d0:ab:08:c7:20:31:e5:4c:c1:c6:1b:de:0d:8b: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:46:D2:15:F5:A1:8D:EE:60:6A:2B:EF:0F:6E:FD:73:EE:CA:3D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/832f4df4-fd54-3144-80f2-3fd28476e582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:52:f5:58:a9:be:08:2c:57:88:05:d2:fb:3d:14:0c:90:3e: a6:52:17:52:ba:5e:0a:81:e3:e2:cc:03:0e:62:7f:56:10:32: 8b:f2:16:31:ec:38:02:a7:b1:0d:f3:93:16:24:e7:9e:2d:4c: 91:b0:98:f3:38:24:d0:1a:84:58:9e:2c:69:35:45:4e:73:19: 00:42:13:62:fc:8e:61:2d:68:61:74:d2:32:50:19:28:36:92: c5:90:ed:f6:41:60:d9:42:0a:99:cc:ee:09:ce:ac:7c:e6:3a: bf:5e:3c:31:7b:ef:05:47:b7:9a:97:2e:88:f5:f5:58:b3:f2: 27:90:38:a4:1a:43:65:8e:54:6c:61:15:6d:2c:03:18:12:75: fa:2a:14:9a:05:17:da:bc:d3:43:02:9a:51:7b:ac:ed:26:6c: b8:fc:a7:41:87:50:85:33:8e:f0:95:b0:d7:fd:91:9e:d5:5f: eb:bf:d3:2a:a3:76:a1:1e:d1:0c:39:a5:45:7c:15:9d:e7:c5: 01:25:63:85:62:38:e1:be:03:89:0a:4b:c6:2a:20:03:ec:65: f6:71:0b:72:3a:81:12:99:b8:69:61:89:c0:c3:9c:b9:c3:32: ca:c2:26:a6:c1:af:53:1a:07:cb:ad:9a:c1:8e:b5:f1:ef:2c: 3e:d1:48:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix7QEfVHhKzEE8AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyODEzNDIzMFoXDTI1MDQyODEyNDIzMFowLzEtMCsGA1UEAxMk ZjU4ZTk4ZTctNTM1Yi00NjBlLTk1MDYtODdlNzE2YzkxN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+2ksk06TTNo1TgYkn65ZZHxc7US1QRyA/k8 iJtFY7UUtNd8XC9K+r/NZmn/dHFfrxjFO2NopSM6QlHiy1Ny759VEb6g+TIJ3bX1 40FLeXt4kynlPGZbpdU6+vyWSLHAm5QO0MD0CuWJahbWWK3IHJnJgPnIz96aDe+i h730iGNwZoOzUDYdvIxrlUS6e7cU2heq33O2k0mdnfJ0ZvD+z71m7/vRB7ogoEpv OwHWCyGQTbZoZygdnO4ZWNbZukkjwUcqHwV4gZs7khgIpo4V97vj3O+nUVUf8bZK GmCT5bCP2eL+g/n8tGmwG4Xx/wPn0KsIxyAx5UzBxhveDYsrBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhG0hX1oY3uYGor7w9u/XPuyj0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODMyZjRkZjQtZmQ1NC0z MTQ0LTgwZjItM2ZkMjg0NzZlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF92gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZS9VipvggsV4gF0vs9FAyQPqZSF1K6XgqB4+LMAw5if1YQMovyFjHs OAKnsQ3zkxYk554tTJGwmPM4JNAahFieLGk1RU5zGQBCE2L8jmEtaGF00jJQGSg2 ksWQ7fZBYNlCCpnM7gnOrHzmOr9ePDF77wVHt5qXLoj19Viz8ieQOKQaQ2WOVGxh FW0sAxgSdfoqFJoFF9q800MCmlF7rO0mbLj8p0GHUIUzjvCVsNf9kZ7VX+u/0yqj dqEe0Qw5pUV8FZ3nxQElY4ViOOG+A4kKS8YqIAPsZfZxC3I6gRKZuGlhicDDnLnD MsrCJqbBr1MaB8utmsGOtfHvLD7RSOs= -----END CERTIFICATE-----Generated at Fri Mar 14 15:00:56 2025 by rpki-client