$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa File: 8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa (raw, json) Hash identifier: vt9t4zAN0EH/Guy7dQXGrAOkuaq4gUPKFOC3lZqhRCk= Subject key identifier: 0D:AE:E8:07:61:CB:44:3C:2E:91:AC:A6:73:C8:22:B1:54:3D:DF:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BE8639DE199209FF653CE880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.216.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:39:de:19:92:09:ff:65:3c:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=ca73ac93-81b1-439c-aa1f-8fac45d11c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:da:df:db:db:50:cf:e0:82:f1:a8:8a:c7: 62:c7:5e:0d:5b:35:e2:61:08:f1:a6:87:72:69:ad: fb:6a:ad:f2:9f:d5:61:13:95:ee:f8:3e:48:78:4a: a5:f7:4f:2d:95:b7:a1:28:bf:06:55:e9:78:f4:c1: 75:fb:ab:55:ec:7d:81:8b:eb:ea:eb:8f:3b:81:f3: 0a:6c:72:f9:a1:18:d7:61:a8:d1:50:9b:5a:ee:e8: fe:ef:e7:b3:7b:c7:c5:e4:f1:5b:9f:86:de:bd:04: 8d:c4:a7:ec:73:5c:3a:ee:21:e1:a2:0d:e8:67:7a: e8:4e:40:de:be:2d:c1:5d:8c:87:f9:23:05:15:ad: c5:07:48:06:02:60:f6:6a:4d:88:d6:31:fc:fd:29: 94:6d:7e:d2:8c:41:dd:73:de:78:b6:77:22:60:1d: 77:08:b0:70:3d:91:95:04:5e:bc:ac:2b:3b:da:59: 87:6d:f6:2f:14:8f:55:58:97:b4:0d:f6:75:bf:08: b0:7f:03:96:34:63:aa:b6:96:3c:92:40:c2:72:eb: a3:60:65:cc:54:cc:68:16:31:36:f0:98:9c:a3:cd: 77:d2:57:70:15:32:93:7a:d8:b4:1b:cf:e1:5d:30: 68:f1:41:1b:8f:de:7f:01:da:f8:02:42:17:91:35: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:E8:07:61:CB:44:3C:2E:91:AC:A6:73:C8:22:B1:54:3D:DF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:02:89:4d:cf:df:f3:bf:f2:dc:b8:0c:15:2a:7b:87:eb:2b: 55:e6:72:c9:50:b4:fc:5e:41:78:20:92:f2:6e:6f:66:d0:74: 3b:f8:f8:44:36:f7:c9:62:69:83:61:ee:0e:9b:e6:b3:da:5a: f4:31:61:16:6d:ff:79:f2:b8:6e:3e:11:ae:72:85:9c:d3:6c: 24:6c:7b:38:94:36:db:15:c9:e5:9e:5b:84:59:a2:7b:0a:78: 7e:09:6b:2e:ac:5d:bb:b3:d2:c0:5d:23:3a:f5:ee:d9:06:bf: 52:c4:f9:69:71:be:70:ba:66:53:e6:f1:47:a8:94:d0:7b:36: 37:9f:13:4c:30:95:d0:86:96:8b:77:3c:39:86:fb:26:7a:29: a1:d4:86:93:87:51:ca:53:a7:bf:3d:c5:4c:15:71:00:8b:4c: ac:f3:14:95:40:86:8e:ca:58:99:88:2e:03:4f:c3:d7:89:10: 95:49:3e:78:65:2d:05:02:a7:82:0c:99:06:b1:7d:de:11:ea: 15:f1:9f:df:07:90:4f:7e:3d:9d:aa:bb:42:47:cd:30:e4:b7: 49:bc:51:77:3e:f7:0e:4c:bc:26:dd:2f:f8:53:e4:25:af:00: 10:ff:d8:f0:3d:24:0e:de:fb:64:ba:29:2d:48:62:47:1a:a8: 53:d4:51:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjneGZIJ/2U86IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Y2E3M2FjOTMtODFiMS00MzljLWFhMWYtOGZhYzQ1ZDExYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFza39vbUM/ggvGoisdix14NWzXiYQjxpody aa37aq3yn9VhE5Xu+D5IeEql908tlbehKL8GVel49MF1+6tV7H2Bi+vq6487gfMK bHL5oRjXYajRUJta7uj+7+eze8fF5PFbn4bevQSNxKfsc1w67iHhog3oZ3roTkDe vi3BXYyH+SMFFa3FB0gGAmD2ak2I1jH8/SmUbX7SjEHdc954tnciYB13CLBwPZGV BF68rCs72lmHbfYvFI9VWJe0DfZ1vwiwfwOWNGOqtpY8kkDCcuujYGXMVMxoFjE2 8Jico8130ldwFTKTeti0G8/hXTBo8UEbj95/Adr4AkIXkTUyiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2u6Adhy0Q8LpGspnPIIrFUPd/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI0YzA4NDUtZGJiYi0z ZDNhLTg4OGUtNGE1MjA3NDBlZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAECiU3P3/O/8ty4DBUqe4frK1XmcslQtPxeQXggkvJub2bQdDv4+EQ2 98liaYNh7g6b5rPaWvQxYRZt/3nyuG4+Ea5yhZzTbCRseziUNtsVyeWeW4RZonsK eH4Jay6sXbuz0sBdIzr17tkGv1LE+WlxvnC6ZlPm8UeolNB7NjefE0wwldCGlot3 PDmG+yZ6KaHUhpOHUcpTp789xUwVcQCLTKzzFJVAho7KWJmILgNPw9eJEJVJPnhl LQUCp4IMmQaxfd4R6hXxn98HkE9+PZ2qu0JHzTDkt0m8UXc+9w5MvCbdL/hT5CWv ABD/2PA9JA7e+2S6KS1IYkcaqFPUUS0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:15 2025 by rpki-client