$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ad507bd-d1b9-3079-bd8d-f027e5ec4b04.roa File: 8ad507bd-d1b9-3079-bd8d-f027e5ec4b04.roa (raw, json) Hash identifier: AJkYVTpsLiU2IofJZG0Z7WPJzE4AFQSWLQvE8T2Rwt0= Subject key identifier: 5F:DC:1B:90:29:10:07:F6:90:E0:29:E3:34:E2:48:43:EE:97:A3:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99662BA21E23D034268B180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ad507bd-d1b9-3079-bd8d-f027e5ec4b04.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.203.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:62:ba:21:e2:3d:03:42:68:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=604edd72-7242-4def-ac64-a5bf911a107b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:d8:d3:6e:3b:e8:e9:13:7a:85:4e:73:8a: 98:b9:61:07:d4:49:b1:3c:c1:48:b4:07:26:c2:29: b1:1c:f1:46:bd:d4:18:b3:ed:c5:d9:73:88:60:cf: 19:16:d5:35:46:33:0d:45:06:ae:79:a7:bd:e2:97: b8:29:eb:84:31:81:4d:b4:2f:3f:fe:f7:a1:6b:e3: 5d:d8:88:a7:c0:66:94:8d:3c:8b:0c:45:b3:c9:47: f6:a0:5a:cd:18:04:6e:1f:bf:6a:25:0f:16:03:19: f2:73:d9:c3:03:1c:d6:1b:88:55:ff:9a:9c:ef:f9: ca:bd:0c:eb:20:a3:40:6e:84:18:af:f8:6d:4d:8c: 9b:15:89:0b:85:0e:78:8e:1d:3c:a7:95:c5:af:e3: ce:0c:a5:68:b2:db:b6:8c:c6:e7:48:f7:3c:2c:ba: 52:d4:a2:39:9e:22:67:07:39:f1:29:1b:9b:6c:c5: 00:ee:d2:37:8a:c8:f9:c6:2d:09:ca:04:77:24:5c: 5f:55:a1:8d:7d:23:b5:fe:ee:a6:ba:c7:09:78:8c: 8b:0b:94:43:1f:03:e7:47:e3:97:dd:5b:b0:05:41: 6a:a7:6f:bc:e7:9e:ec:9e:2f:43:0a:3f:48:cc:23: e0:55:17:38:66:c6:b5:4b:30:94:a2:a5:db:22:48: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:1B:90:29:10:07:F6:90:E0:29:E3:34:E2:48:43:EE:97:A3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ad507bd-d1b9-3079-bd8d-f027e5ec4b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cb:dc:87:cb:f8:68:67:7d:5b:f3:ba:50:5a:00:64:53:5c: 40:ce:c8:1a:21:d6:a8:96:92:65:27:b9:f7:5e:57:a5:56:e8: 8e:ca:37:01:86:b2:4c:74:d8:1f:d7:d3:32:00:9e:ec:f5:f0: aa:5d:ba:08:ad:f7:73:b6:4e:6a:52:0d:08:a5:ce:e2:16:ec: 54:ef:69:96:8e:d7:94:d4:04:a1:c0:9c:54:89:2b:ef:f1:0c: fb:66:47:4b:1d:a4:56:98:28:9e:39:ae:5d:78:8f:a0:b5:cb: c9:bd:87:eb:e9:8e:8e:eb:34:08:af:76:7f:25:83:3d:67:84: 0c:56:8e:f2:8b:69:bf:fb:f1:d2:21:48:59:36:07:25:ad:75: ca:b2:32:68:b6:67:5b:c6:21:23:a1:d5:65:9d:0e:cb:dd:ce: 74:ec:0d:7a:51:52:cc:42:e2:57:e8:9f:ac:11:67:c3:a4:00: 05:8a:35:19:ca:13:1c:5c:49:2a:13:2d:ad:99:69:0a:f9:c8: f0:30:73:84:0a:a6:6f:3a:91:82:b4:83:3f:eb:f5:4f:11:cb: 47:2c:3d:a7:a7:0e:31:7e:99:fb:d5:96:b9:8f:01:d0:75:5d: eb:32:ba:9b:37:de:74:4f:c6:0c:64:03:b6:d8:7c:b1:0c:52: df:fe:0e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmK6IeI9A0JosYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjA0ZWRkNzItNzI0Mi00ZGVmLWFjNjQtYTViZjkxMWExMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns7Y02476OkTeoVOc4qYuWEH1EmxPMFItAcm wimxHPFGvdQYs+3F2XOIYM8ZFtU1RjMNRQaueae94pe4KeuEMYFNtC8//veha+Nd 2IinwGaUjTyLDEWzyUf2oFrNGARuH79qJQ8WAxnyc9nDAxzWG4hV/5qc7/nKvQzr IKNAboQYr/htTYybFYkLhQ54jh08p5XFr+PODKVostu2jMbnSPc8LLpS1KI5niJn BznxKRubbMUA7tI3isj5xi0JygR3JFxfVaGNfSO1/u6muscJeIyLC5RDHwPnR+OX 3VuwBUFqp2+8557sni9DCj9IzCPgVRc4Zsa1SzCUoqXbIki9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/cG5ApEAf2kOAp4zTiSEPul6MVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFkNTA3YmQtZDFiOS0z MDc5LWJkOGQtZjAyN2U1ZWM0YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8s1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnL3IfL+GhnfVvzulBaAGRTXEDOyBoh1qiWkmUnufdeV6VW6I7KNwGG skx02B/X0zIAnuz18Kpdugit93O2TmpSDQilzuIW7FTvaZaO15TUBKHAnFSJK+/x DPtmR0sdpFaYKJ45rl14j6C1y8m9h+vpjo7rNAivdn8lgz1nhAxWjvKLab/78dIh SFk2ByWtdcqyMmi2Z1vGISOh1WWdDsvdznTsDXpRUsxC4lfon6wRZ8OkAAWKNRnK ExxcSSoTLa2ZaQr5yPAwc4QKpm86kYK0gz/r9U8Ry0csPaenDjF+mfvVlrmPAdB1 Xesyups33nRPxgxkA7bYfLEMUt/+Dv8= -----END CERTIFICATE-----Generated at Sat Apr 5 14:14:16 2025 by rpki-client