$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa File: 8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa (raw, json) Hash identifier: T4BLOeaa1pe8XZmhpODaY6K24WZMRAERsIv+5DErcVY= Subject key identifier: 1E:0D:27:DB:B6:9A:97:12:4A:30:E4:FF:18:F1:1A:8F:92:D6:1B:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99668E5D1ED4E93FE6A4F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.203.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:68:e5:d1:ed:4e:93:fe:6a:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=1c3eecb2-2b09-46ad-b2f1-586095a36330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:a5:8e:a3:30:bb:0f:18:73:3e:47:cb:41: 76:c6:0a:ce:51:5e:2b:a7:52:13:3b:28:b9:dd:62: c7:45:20:46:64:97:fb:77:5b:83:7c:f7:5b:28:3e: 6b:4b:fa:e9:48:50:b2:aa:5e:78:38:2c:1b:f5:d3: 92:db:38:6d:69:ac:a8:21:1f:a3:26:e0:32:d7:c5: be:87:38:8d:b4:72:0f:db:cf:d5:de:25:a9:c6:0a: d2:85:fd:02:7b:bd:02:c1:58:be:e8:a5:3a:11:1f: 18:49:6b:3c:c4:87:fd:14:79:bb:19:1d:16:bd:f0: f3:c7:b1:3c:9a:42:d2:85:f3:53:a6:94:74:08:90: 63:a3:3f:85:fd:bd:a1:f8:0c:01:5d:f2:14:a4:c3: 09:b3:76:71:ab:de:b7:a0:04:7d:70:36:84:08:9d: bc:f6:1c:82:c2:63:4e:71:b2:29:f5:ac:3e:24:d9: fc:ab:8b:cf:10:16:fa:cd:52:c9:f4:7c:6c:48:e2: 22:98:91:a4:0f:63:3c:23:6d:58:ac:c2:27:61:36: e6:9f:d7:b7:9d:fe:cf:e6:b6:7b:69:75:a9:c1:8b: ee:9f:49:dc:5f:11:51:32:ec:8e:ca:e2:47:cb:15: 27:30:5c:55:b2:58:8b:5b:9c:05:b2:c0:d3:7d:14: 30:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:27:DB:B6:9A:97:12:4A:30:E4:FF:18:F1:1A:8F:92:D6:1B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ed:3e:57:58:19:cb:5f:4b:75:96:1d:81:eb:c7:29:2f:a5: d2:13:01:55:51:7d:7b:9f:6c:63:1b:d8:e4:cc:e2:86:f2:d9: bd:c7:32:10:81:85:46:a5:9f:11:54:79:da:95:45:ee:e2:16: f0:7a:10:fd:e7:ac:a5:77:2d:10:cc:4c:11:d1:fb:5f:50:a0: 3b:78:f3:48:39:9a:9a:76:f1:3d:66:42:12:6d:a3:a0:41:b5: a8:ff:02:5b:0c:52:1c:93:d0:57:e8:fc:8a:aa:7d:a3:17:96: 65:f6:5c:2e:1e:8f:2e:f0:98:23:c9:db:0f:04:d8:39:55:fe: 6d:1c:33:ca:37:35:cc:c5:dc:3a:73:ec:97:a0:36:11:b5:e8: 70:85:5a:ce:8a:70:6a:7b:da:cb:23:4a:d7:28:27:f6:d3:66: 6a:ae:c3:a1:74:06:59:5a:84:29:8f:12:da:10:4c:44:ef:9b: 8d:e2:ea:be:53:17:81:ba:78:5d:95:8d:07:c9:e8:70:30:3a: 06:45:a5:1b:58:77:bd:22:eb:7a:50:40:54:e6:0e:fc:14:c4: eb:6f:b3:e9:1c:f4:55:a1:af:0d:73:ee:0f:4f:00:cb:b4:2d: 5a:a3:50:f6:c9:3e:bc:2b:79:2b:7b:8a:a7:45:82:9d:5e:d3: 49:c3:e6:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmjl0e1Ok/5qTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWMzZWVjYjItMmIwOS00NmFkLWIyZjEtNTg2MDk1YTM2MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MGljqMwuw8Ycz5Hy0F2xgrOUV4rp1ITOyi5 3WLHRSBGZJf7d1uDfPdbKD5rS/rpSFCyql54OCwb9dOS2zhtaayoIR+jJuAy18W+ hziNtHIP28/V3iWpxgrShf0Ce70CwVi+6KU6ER8YSWs8xIf9FHm7GR0WvfDzx7E8 mkLShfNTppR0CJBjoz+F/b2h+AwBXfIUpMMJs3Zxq963oAR9cDaECJ289hyCwmNO cbIp9aw+JNn8q4vPEBb6zVLJ9HxsSOIimJGkD2M8I21YrMInYTbmn9e3nf7P5rZ7 aXWpwYvun0ncXxFRMuyOyuJHyxUnMFxVsliLW5wFssDTfRQwxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4NJ9u2mpcSSjDk/xjxGo+S1hu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmYzg4ZDAtZjNhNC0z M2QxLWE1NDQtZjY5ODlmNzFhYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8sUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbtPldYGctfS3WWHYHrxykvpdITAVVRfXufbGMb2OTM4oby2b3HMhCB hUalnxFUedqVRe7iFvB6EP3nrKV3LRDMTBHR+19QoDt480g5mpp28T1mQhJto6BB taj/AlsMUhyT0Ffo/IqqfaMXlmX2XC4ejy7wmCPJ2w8E2DlV/m0cM8o3NczF3Dpz 7JegNhG16HCFWs6KcGp72ssjStcoJ/bTZmquw6F0BllahCmPEtoQTETvm43i6r5T F4G6eF2VjQfJ6HAwOgZFpRtYd70i63pQQFTmDvwUxOtvs+kc9FWhrw1z7g9PAMu0 LVqjUPbJPrwreSt7iqdFgp1e00nD5qU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:34 2025 by rpki-client