$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c12e51d-8583-388e-8cfa-08f422be2ea7.roa File: 8c12e51d-8583-388e-8cfa-08f422be2ea7.roa (raw, json) Hash identifier: zOV1zGElFX6/4w8ZU4G7N/ZKXcn9Amrtl/Phc34WH/I= Subject key identifier: 84:BF:67:42:D8:FE:25:3A:48:43:38:71:F6:A5:24:9C:71:51:C3:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400CBCB1DD835A6A62B3CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c12e51d-8583-388e-8cfa-08f422be2ea7.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.197.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:cb:cb:1d:d8:35:a6:a6:2b:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=a90651f8-f5a2-4376-b5c1-8a05c740bae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:b2:63:74:5f:16:ee:59:37:d7:a0:47:7e: 83:48:a8:4a:a6:6e:3a:84:dd:cc:e6:2e:ca:7a:21: 1b:27:50:96:bd:34:c5:aa:d3:4a:c3:8c:7f:f2:08: 74:5f:d5:be:5f:9c:34:ee:38:4c:0f:66:6f:b7:46: d9:2e:63:dc:56:a1:d9:3b:f4:c2:cb:60:f3:0a:55: d2:14:a8:09:ba:2a:0f:11:4f:08:be:e6:d5:b3:1c: 25:f5:b8:34:40:34:48:10:c4:03:06:e5:30:ac:8b: 13:16:d3:35:1c:18:8c:d3:44:ef:e3:9d:91:d9:6d: 50:3f:ad:c8:c9:74:9d:c1:98:3a:5f:6e:31:89:96: 90:9d:d2:f8:c6:2a:ec:10:5a:30:10:02:7e:19:05: 59:44:2c:e0:72:da:07:c1:3e:d6:a8:de:7d:e3:9e: 49:66:dc:a2:04:f6:92:20:6d:9d:61:be:d4:55:85: cc:8c:50:76:80:dc:64:28:e7:30:79:71:e1:97:2e: 13:34:35:e1:fe:c2:1e:45:10:0c:72:c3:01:c7:fe: 7f:7e:cd:2d:c6:ef:46:33:12:ff:88:a9:91:55:6a: 02:61:00:38:54:44:46:a7:f2:6f:4a:49:1a:82:2e: aa:db:1b:31:31:70:08:dd:6d:d4:3a:f9:fd:dc:6c: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:67:42:D8:FE:25:3A:48:43:38:71:F6:A5:24:9C:71:51:C3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c12e51d-8583-388e-8cfa-08f422be2ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a5:0e:46:4a:d7:71:98:cc:ef:68:4b:77:95:46:18:35:82: 11:63:fb:80:72:a3:e7:4d:f4:9d:66:f4:f1:a0:22:b1:d8:61: 83:95:9d:20:3a:09:39:bc:f6:a0:fa:a1:d9:92:86:b1:c0:db: 1d:e5:71:cc:8a:a6:ae:c5:f2:9a:34:a9:d5:1f:2a:95:a7:a9: bc:68:cf:4a:50:15:18:87:0f:be:ed:dc:a3:60:cd:a3:19:8a: a2:f3:21:97:17:18:6c:94:86:43:b4:5c:44:80:76:32:f2:1a: 14:8a:a7:27:d7:4b:90:7d:cd:71:c2:29:8d:7d:5f:f0:f9:5f: 0a:be:78:f5:ba:7f:be:fb:5b:69:bf:3d:5a:95:af:cf:56:0e: c2:91:9e:39:d8:24:c6:2a:1f:f3:a8:bb:db:15:3c:d3:8b:75: 92:f8:f1:40:8d:23:9c:a4:81:aa:b1:1e:0e:43:2f:dc:3a:1f: 82:25:0c:98:91:7b:06:2e:1f:23:e3:8a:85:2a:e5:c4:57:c3: 29:b5:b9:51:1a:c6:48:33:df:d9:02:55:24:ea:63:a4:23:d0: 33:78:0f:b5:a7:a7:47:42:56:75:bd:f9:26:f3:9e:b3:0d:61: 33:1b:ee:30:04:a7:1d:57:75:38:79:52:62:ff:39:60:95:6b: 19:f0:59:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMvLHdg1pqYrPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YTkwNjUxZjgtZjVhMi00Mzc2LWI1YzEtOGEwNWM3NDBiYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxyyY3RfFu5ZN9egR36DSKhKpm46hN3M5i7K eiEbJ1CWvTTFqtNKw4x/8gh0X9W+X5w07jhMD2Zvt0bZLmPcVqHZO/TCy2DzClXS FKgJuioPEU8IvubVsxwl9bg0QDRIEMQDBuUwrIsTFtM1HBiM00Tv452R2W1QP63I yXSdwZg6X24xiZaQndL4xirsEFowEAJ+GQVZRCzgctoHwT7WqN59455JZtyiBPaS IG2dYb7UVYXMjFB2gNxkKOcweXHhly4TNDXh/sIeRRAMcsMBx/5/fs0txu9GMxL/ iKmRVWoCYQA4VERGp/JvSkkagi6q2xsxMXAI3W3UOvn93GwajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS/Z0LY/iU6SEM4cfalJJxxUcM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMxMmU1MWQtODU4My0z ODhlLThjZmEtMDhmNDIyYmUyZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWlDkZK13GYzO9oS3eVRhg1ghFj+4Byo+dN9J1m9PGgIrHYYYOVnSA6 CTm89qD6odmShrHA2x3lccyKpq7F8po0qdUfKpWnqbxoz0pQFRiHD77t3KNgzaMZ iqLzIZcXGGyUhkO0XESAdjLyGhSKpyfXS5B9zXHCKY19X/D5Xwq+ePW6f777W2m/ PVqVr89WDsKRnjnYJMYqH/Oou9sVPNOLdZL48UCNI5ykgaqxHg5DL9w6H4IlDJiR ewYuHyPjioUq5cRXwym1uVEaxkgz39kCVSTqY6Qj0DN4D7Wnp0dCVnW9+SbznrMN YTMb7jAEpx1XdTh5UmL/OWCVaxnwWR4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:46 2025 by rpki-client