$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa File: 8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa (raw, json) Hash identifier: SV2+gA/+Pw1DIkgwS+DSiD99CPb2qFtr8BcMfM21EL8= Subject key identifier: B7:08:47:8E:9B:51:16:F9:DC:41:DF:E9:1F:9D:66:9D:F1:48:CA:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99663926A1DFAE0B0C75840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.203.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:63:92:6a:1d:fa:e0:b0:c7:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4a27e3ef-bb91-42d3-8b0e-6d459df21911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:93:24:ca:e7:66:b7:af:e6:51:21:a1:a7: ab:2e:47:c4:aa:91:48:e1:2b:c6:da:2c:ba:6d:aa: 8c:81:9c:92:ec:01:1f:61:04:25:94:79:97:9f:c6: 1a:a6:52:ec:33:04:6d:a2:f9:9b:be:df:26:62:ca: 87:ea:3e:6e:b2:f3:04:05:c7:bc:97:95:08:73:70: 11:0a:b9:53:02:5a:7e:25:eb:f1:50:ac:22:7b:82: 74:02:96:6d:04:81:b5:cd:36:bb:b1:c0:cc:26:c0: bd:54:3d:59:df:08:64:cf:1f:dc:61:ae:ed:ce:00: 61:67:b8:7c:42:b4:7b:a0:1f:9f:08:a1:8d:0f:a2: ee:cb:4e:2b:cf:4d:86:aa:48:82:94:cb:f9:6c:bd: 87:c3:b4:46:05:e3:62:70:16:dc:d8:f4:4e:e5:ba: a2:5c:66:15:9f:f0:4d:08:88:b7:98:4a:4c:d1:ef: 24:53:b4:1c:12:49:60:6f:fe:9b:12:2f:38:eb:79: 64:a8:1b:12:65:2a:db:97:09:1d:53:94:c9:e1:60: 4e:f2:52:5c:e6:c7:a8:01:ea:fa:b9:0b:6d:bf:2a: 4d:88:fb:1c:65:87:f3:25:02:af:a1:06:06:22:2c: 8b:82:68:25:07:ba:a6:8d:ba:3e:57:49:e8:ed:bf: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:08:47:8E:9B:51:16:F9:DC:41:DF:E9:1F:9D:66:9D:F1:48:CA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:63:fa:fb:33:44:a4:5a:ab:b9:80:6c:57:e8:c5:ae:df:2d: fe:1b:a5:39:2b:cd:82:80:1c:64:80:6f:30:de:e4:61:2b:9c: 80:9f:d2:0b:f7:80:a7:1b:f4:33:83:9f:dc:fa:62:05:68:9d: 88:dd:19:ab:69:71:b6:b2:68:66:9d:aa:9c:bf:82:da:2b:1d: 96:5d:f0:da:49:17:c6:6d:6f:fe:cb:0f:de:68:c1:22:e8:8b: 8d:48:73:c8:da:e9:68:97:fc:65:cf:67:34:71:45:03:60:c3: ee:55:56:c3:e9:2e:5d:16:2b:d6:ae:46:01:09:04:c8:d0:ea: 85:a9:b5:6d:7e:4c:9d:5d:3b:37:44:3a:2f:32:bc:cb:9f:57: 30:9d:21:6b:4f:a1:d4:96:52:29:8d:c7:9d:d9:5f:64:c9:c4: 16:6d:44:a6:3f:79:aa:2c:be:6c:26:1c:e8:74:69:4f:31:08: 64:c1:bd:76:71:6f:3b:5b:a1:18:71:40:8b:43:2c:31:e1:ce: f4:99:80:17:88:9e:2a:9f:29:68:97:c3:d2:ed:77:a5:d6:b7: 16:bf:f6:a1:e1:9f:10:aa:11:8b:ac:5a:b4:2a:63:d7:3a:80: 89:2d:33:7f:07:69:95:3e:62:0f:c3:90:e7:7a:17:16:78:84: 26:70:40:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmOSah364LDHWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGEyN2UzZWYtYmI5MS00MmQzLThiMGUtNmQ0NTlkZjIxOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAOTJMrnZrev5lEhoaerLkfEqpFI4SvG2iy6 baqMgZyS7AEfYQQllHmXn8YaplLsMwRtovmbvt8mYsqH6j5usvMEBce8l5UIc3AR CrlTAlp+JevxUKwie4J0ApZtBIG1zTa7scDMJsC9VD1Z3whkzx/cYa7tzgBhZ7h8 QrR7oB+fCKGND6Luy04rz02GqkiClMv5bL2Hw7RGBeNicBbc2PRO5bqiXGYVn/BN CIi3mEpM0e8kU7QcEklgb/6bEi8463lkqBsSZSrblwkdU5TJ4WBO8lJc5seoAer6 uQttvypNiPscZYfzJQKvoQYGIiyLgmglB7qmjbo+V0no7b8ExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcIR46bURb53EHf6R+dZp3xSMq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFjZTY5YjMtMTY5MC0z YWEzLTljYTItNjM4OWUxNjBkODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxj+vszRKRaq7mAbFfoxa7fLf4bpTkrzYKAHGSAbzDe5GErnICf0gv3 gKcb9DODn9z6YgVonYjdGatpcbayaGadqpy/gtorHZZd8NpJF8Ztb/7LD95owSLo i41Ic8ja6WiX/GXPZzRxRQNgw+5VVsPpLl0WK9auRgEJBMjQ6oWptW1+TJ1dOzdE Oi8yvMufVzCdIWtPodSWUimNx53ZX2TJxBZtRKY/eaosvmwmHOh0aU8xCGTBvXZx bztboRhxQItDLDHhzvSZgBeIniqfKWiXw9Ltd6XWtxa/9qHhnxCqEYusWrQqY9c6 gIktM38HaZU+Yg/DkOd6FxZ4hCZwQNI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:46 2025 by rpki-client