$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c5e4cef-c545-374e-95c6-2637aacb6c69.roa File: 8c5e4cef-c545-374e-95c6-2637aacb6c69.roa (raw, json) Hash identifier: ubT2rVQ/cLWfew6K5xDpQ0Rtw3rRzjlHwqafoaIf4u4= Subject key identifier: 2C:6A:B3:69:83:5E:55:C8:7F:6E:A9:89:DB:95:49:47:DD:F5:8D:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DCC8F1CF97971A047880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c5e4cef-c545-374e-95c6-2637aacb6c69.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.194.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dc:c8:f1:cf:97:97:1a:04:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=cdf06083-c7e7-468b-ab54-bd282bc82007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:2c:df:b9:e9:7a:3e:d3:e1:b8:d3:7f:84: 68:1e:e0:d2:c1:78:a3:49:44:e9:f2:dc:ac:d1:7f: 15:bd:4e:14:12:16:7b:33:6f:34:6d:53:b3:e9:9a: 4d:61:8c:f4:2c:8f:0f:48:fa:d0:0c:fb:5b:72:79: df:32:a6:6b:64:e5:16:89:de:41:d2:d0:c7:a2:1f: 24:af:8a:af:78:8d:54:5c:33:c1:24:fc:f3:61:de: a1:b9:98:75:da:8e:6f:53:eb:0a:a7:a7:6b:40:76: 99:56:22:f5:58:14:d7:38:82:8a:5e:b6:aa:3f:2b: e1:e5:cf:15:51:69:9d:a1:8d:38:68:ea:57:b5:49: 63:91:49:5b:c1:8e:96:a2:b5:8c:c6:c5:27:84:74: 03:e2:87:22:c0:94:59:ac:89:d6:a7:ad:6c:6a:d5: c2:da:8a:6a:52:d1:a6:a0:ae:ab:49:9e:8c:70:ca: d9:11:9d:d5:f5:13:1f:70:73:8f:7c:2a:49:73:ec: 82:67:02:f6:17:3e:66:5c:8d:70:cf:19:29:e3:53: ed:58:1a:08:69:46:b7:e6:69:ae:e3:b3:22:0e:f0: 7b:28:03:e1:69:f1:40:ce:58:46:18:c6:f0:2f:e8: 71:e0:21:24:44:32:3c:ee:6c:46:b4:33:af:3c:50: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6A:B3:69:83:5E:55:C8:7F:6E:A9:89:DB:95:49:47:DD:F5:8D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c5e4cef-c545-374e-95c6-2637aacb6c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a6:f2:cb:17:36:66:09:4d:19:53:38:16:d0:41:b0:53:2a: c6:57:c0:bc:9b:c7:bf:ae:d2:89:c2:0e:6f:e4:72:c1:e1:b8: b2:75:58:9b:ad:02:9d:8a:71:49:9b:88:5b:36:7d:c5:96:f6: dd:6b:3c:7b:4a:0b:07:9f:c0:b9:b1:75:e5:e2:bf:78:f7:c2: fb:f7:a4:6f:4f:21:b2:ff:33:3e:9d:0c:69:17:54:31:bf:5e: 93:cb:05:29:26:3f:e9:5e:85:87:2c:23:17:bc:61:e9:5d:a7: da:d0:ca:ff:7a:d1:fb:b3:6a:ea:c6:bd:9a:55:02:52:f7:22: c3:a2:eb:f3:b1:44:52:86:5d:96:7c:f8:46:aa:30:42:3d:f8: 6a:62:aa:7a:8b:f5:7b:6f:96:a1:09:5e:85:93:e1:56:18:ab: 3d:01:5b:1e:9c:f0:16:43:88:b1:3b:64:6b:2c:90:9b:d6:23: d3:19:de:80:c7:ef:93:92:61:4a:9e:b1:59:44:4a:93:7a:71: 13:b9:52:fc:a6:ff:db:62:38:13:95:4f:26:47:6c:23:0f:cd: 4b:bd:be:25:e4:6b:7b:30:2c:61:8f:f9:f5:2a:9f:ce:0b:65: ff:fc:d6:e3:7f:2d:72:75:19:b4:1a:8a:87:04:ba:08:b1:4e: cc:f2:8b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANzI8c+XlxoEeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk Y2RmMDYwODMtYzdlNy00NjhiLWFiNTQtYmQyODJiYzgyMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Is37npej7T4bjTf4RoHuDSwXijSUTp8tys 0X8VvU4UEhZ7M280bVOz6ZpNYYz0LI8PSPrQDPtbcnnfMqZrZOUWid5B0tDHoh8k r4qveI1UXDPBJPzzYd6huZh12o5vU+sKp6drQHaZViL1WBTXOIKKXraqPyvh5c8V UWmdoY04aOpXtUljkUlbwY6WorWMxsUnhHQD4ociwJRZrInWp61satXC2opqUtGm oK6rSZ6McMrZEZ3V9RMfcHOPfCpJc+yCZwL2Fz5mXI1wzxkp41PtWBoIaUa35mmu 47MiDvB7KAPhafFAzlhGGMbwL+hx4CEkRDI87mxGtDOvPFDs7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxqs2mDXlXIf26piduVSUfd9Y0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM1ZTRjZWYtYzU0NS0z NzRlLTk1YzYtMjYzN2FhY2I2YzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8KMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGm8ssXNmYJTRlTOBbQQbBTKsZXwLybx7+u0onCDm/kcsHhuLJ1WJut Ap2KcUmbiFs2fcWW9t1rPHtKCwefwLmxdeXiv3j3wvv3pG9PIbL/Mz6dDGkXVDG/ XpPLBSkmP+lehYcsIxe8Yeldp9rQyv960fuzaurGvZpVAlL3IsOi6/OxRFKGXZZ8 +EaqMEI9+GpiqnqL9XtvlqEJXoWT4VYYqz0BWx6c8BZDiLE7ZGsskJvWI9MZ3oDH 75OSYUqesVlESpN6cRO5Uvym/9tiOBOVTyZHbCMPzUu9viXka3swLGGP+fUqn84L Zf/81uN/LXJ1GbQaiocEugixTszyi6U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:40 2025 by rpki-client