$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/839141f4-5efc-302a-a301-26aea15fbaa1.roa File: 839141f4-5efc-302a-a301-26aea15fbaa1.roa (raw, json) Hash identifier: /CBH1UbQkoE7oHGYlZ0aO5YCo++DQeikR5sDoY3Kcmc= Subject key identifier: 35:0A:EA:3D:74:7A:37:21:A7:04:DA:F8:5C:F3:A3:A1:DF:86:AB:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0D5DE3FD39F5E3D7D8D20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/839141f4-5efc-302a-a301-26aea15fbaa1.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.205.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d5:de:3f:d3:9f:5e:3d:7d:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=1dfce84a-b563-4ed3-8b22-6a0e5057c858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:23:c0:b4:77:2d:87:55:2b:7e:8a:77:8d: 2a:be:97:bd:20:c7:5c:03:db:77:49:22:dd:38:b7: f1:d7:a9:44:94:91:30:ae:15:2f:71:0d:9f:47:32: 2e:a2:ca:39:92:d2:54:c6:69:14:e2:98:f2:22:1c: a3:18:29:14:5b:a9:97:21:ac:f8:49:14:67:09:26: ae:19:b0:97:3b:8c:bf:a4:32:00:e2:0c:2c:06:00: 29:62:62:0f:50:2f:19:47:3c:92:2a:3c:41:fa:06: 72:a6:ef:f6:1c:23:3f:16:b0:ee:9f:a7:a2:5c:9d: 36:2e:0e:de:06:4c:96:11:bb:b7:85:41:43:fd:dc: 35:52:de:41:7a:cf:07:ac:e6:c1:18:ab:0d:52:75: 13:54:01:b7:12:60:aa:04:99:36:da:02:f5:f7:50: ae:04:8f:3c:29:33:5f:4a:58:36:c3:1b:8a:45:a7: 2c:e4:4e:27:45:99:06:4c:e6:5a:07:59:8c:82:31: 62:db:21:74:df:54:e7:e7:59:f7:f7:f2:f2:4b:0e: 18:97:d6:b0:b8:8b:4a:46:8d:01:87:98:84:3c:b2: 76:f1:6f:18:a6:82:c4:79:85:58:a5:2e:16:5b:71: 87:ce:3b:7d:4a:f3:39:6d:17:2d:e7:84:e7:2c:86: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0A:EA:3D:74:7A:37:21:A7:04:DA:F8:5C:F3:A3:A1:DF:86:AB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/839141f4-5efc-302a-a301-26aea15fbaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:04:7e:62:93:50:91:02:25:12:57:08:43:22:bd:d5:5b:63: 59:a7:41:d4:2c:0c:4d:a9:6d:5c:b8:37:6a:f0:24:0e:a5:fd: ed:3d:fc:f1:46:be:ff:9d:e5:4d:68:e8:e7:49:25:c6:ad:7b: c2:1d:3a:6b:89:62:a7:86:ef:5b:6d:e4:34:87:4c:ca:9f:1e: 34:ce:d0:6a:aa:5c:8e:af:80:00:9a:be:71:36:c0:6a:fd:b1: 94:5c:8a:3d:c1:13:39:57:94:15:95:43:79:af:d4:ca:b8:c6: 3c:bb:17:c3:b1:35:b1:4d:16:86:01:c3:e6:25:06:b2:e9:ad: 84:2b:c2:38:17:da:32:0b:06:69:f7:8a:ce:cc:ed:cf:3a:c5: 97:39:0f:5b:29:aa:7a:c6:fe:6b:b7:1c:df:3f:ed:f3:c9:c6: 4a:35:66:75:52:b5:bb:44:1f:a8:be:86:d4:a2:62:f6:2f:67: c6:3e:f9:90:f0:d8:8b:39:88:c1:20:48:a7:df:99:12:e5:2e: 14:20:c1:46:11:ee:1a:72:2a:1f:8a:03:bc:cc:00:91:1c:03: df:53:ef:3b:f8:6a:3d:3a:db:52:d2:ea:ac:68:30:b9:87:96: 4f:63:f3:4a:81:a6:18:53:e7:f6:0e:6d:ff:ef:6f:5c:f9:de: 97:6e:c2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NXeP9OfXj19jSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MWRmY2U4NGEtYjU2My00ZWQzLThiMjItNmEwZTUwNTdjODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOQjwLR3LYdVK36Kd40qvpe9IMdcA9t3SSLd OLfx16lElJEwrhUvcQ2fRzIuoso5ktJUxmkU4pjyIhyjGCkUW6mXIaz4SRRnCSau GbCXO4y/pDIA4gwsBgApYmIPUC8ZRzySKjxB+gZypu/2HCM/FrDun6eiXJ02Lg7e BkyWEbu3hUFD/dw1Ut5Bes8HrObBGKsNUnUTVAG3EmCqBJk22gL191CuBI88KTNf Slg2wxuKRacs5E4nRZkGTOZaB1mMgjFi2yF031Tn51n39/LySw4Yl9awuItKRo0B h5iEPLJ28W8YpoLEeYVYpS4WW3GHzjt9SvM5bRct54TnLIYH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUK6j10ejchpwTa+Fzzo6HfhqvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM5MTQxZjQtNWVmYy0z MDJhLWEzMDEtMjZhZWExNWZiYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF83VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8EfmKTUJECJRJXCEMivdVbY1mnQdQsDE2pbVy4N2rwJA6l/e09/PFG vv+d5U1o6OdJJcate8IdOmuJYqeG71tt5DSHTMqfHjTO0GqqXI6vgACavnE2wGr9 sZRcij3BEzlXlBWVQ3mv1Mq4xjy7F8OxNbFNFoYBw+YlBrLprYQrwjgX2jILBmn3 is7M7c86xZc5D1spqnrG/mu3HN8/7fPJxko1ZnVStbtEH6i+htSiYvYvZ8Y++ZDw 2Is5iMEgSKffmRLlLhQgwUYR7hpyKh+KA7zMAJEcA99T7zv4aj0621LS6qxoMLmH lk9j80qBphhT5/YObf/vb1z53pduwjg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:41 2025 by rpki-client