$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa File: 8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa (raw, json) Hash identifier: O1eQI7MlwofG3d7fTol/V1I7A8wkScA7POKyfZpcEPw= Subject key identifier: 3B:07:74:E8:BE:15:45:2E:58:91:B1:39:E0:81:5E:4E:8F:62:FF:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A996693B74CD584E2DE45480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.203.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:69:3b:74:cd:58:4e:2d:e4:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=67ee349f-726f-4f70-aad7-acca223c205d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:18:17:3c:b5:86:7c:e8:3f:b8:24:f9:7d: e1:5c:a9:75:90:28:d8:7e:2b:e7:b3:c2:ad:6a:be: 0b:71:d0:78:52:36:a5:2d:7e:f3:25:81:ae:10:13: e9:e2:3e:13:36:50:31:53:5f:22:00:98:77:89:3f: 16:eb:a6:f4:c5:8c:4b:28:58:e1:60:54:9e:31:0c: 9c:a8:19:fb:76:6b:a9:26:0e:5d:f9:19:54:00:00: 8e:74:72:29:82:35:d3:4b:89:a8:d7:a6:2a:ac:59: cb:7b:69:97:fa:1b:0a:eb:e9:48:d1:70:43:e5:b5: 66:8c:88:8f:79:e1:de:30:bf:9a:8b:41:a3:9e:1d: 4b:3c:07:94:8b:5f:b9:fd:8e:c1:95:36:6a:b7:6d: 85:58:eb:e2:47:f7:63:30:f3:e1:06:cb:f4:bc:33: 6b:dd:8b:c8:02:35:18:60:21:39:d9:95:2f:ae:08: 12:37:b3:b9:b0:ff:30:93:9d:5c:57:21:a8:c4:20: f2:16:53:04:c6:e6:ca:6f:39:cd:20:4b:9f:01:f8: 8c:22:08:ae:7e:fb:e5:c9:20:ec:51:5f:14:9c:e4: fb:52:28:35:a0:98:75:2f:0e:15:7d:42:6d:c2:cd: d8:49:fb:3c:a5:7e:51:e3:76:fb:29:8c:c5:01:3e: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:07:74:E8:BE:15:45:2E:58:91:B1:39:E0:81:5E:4E:8F:62:FF:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9d:5b:1a:81:a3:f2:82:f7:c2:16:fe:12:a4:48:6d:77:9a: 6a:6d:76:29:b5:c7:53:bd:df:98:96:5f:cd:e3:c8:44:8a:37: 3e:6f:79:7f:a7:1a:4d:6a:89:a3:3a:40:45:f7:55:e2:e3:4b: e2:88:f6:1e:1c:c8:8c:b7:c2:a7:55:9d:6d:7e:ca:80:90:0c: a0:80:4f:52:04:95:df:07:62:6d:20:b5:a4:79:58:d7:42:f5: a6:47:06:11:cd:66:ca:24:60:19:c0:e6:3f:ae:2f:56:d3:35: 0d:16:5b:1d:48:60:36:b4:c9:5c:d7:75:13:ef:ab:91:62:96: d1:ec:3f:c6:1a:d5:9e:be:ae:7d:8a:aa:26:b5:20:29:d5:a9: 76:b3:87:dc:1f:4c:9f:ce:02:a1:c9:bc:8b:b2:48:f3:0b:61: 95:f2:7c:da:3a:dd:d7:90:95:aa:98:28:94:31:be:a6:d4:df: 4f:d0:42:1e:95:8b:40:15:f5:1e:10:cd:ec:c7:e1:ff:c8:02: 90:c7:f6:0c:0a:e4:9e:70:79:9b:72:2b:e5:15:be:c0:6b:45: 36:67:68:2f:d4:db:a8:f3:95:bb:f0:bd:3c:d0:25:bc:42:ae: 57:84:38:77:f3:78:7a:41:d4:06:3c:65:11:44:bc:e1:51:62: 3c:52:9f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmk7dM1YTi3kVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjdlZTM0OWYtNzI2Zi00ZjcwLWFhZDctYWNjYTIyM2MyMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuoYFzy1hnzoP7gk+X3hXKl1kCjYfivns8Kt ar4LcdB4UjalLX7zJYGuEBPp4j4TNlAxU18iAJh3iT8W66b0xYxLKFjhYFSeMQyc qBn7dmupJg5d+RlUAACOdHIpgjXTS4mo16YqrFnLe2mX+hsK6+lI0XBD5bVmjIiP eeHeML+ai0Gjnh1LPAeUi1+5/Y7BlTZqt22FWOviR/djMPPhBsv0vDNr3YvIAjUY YCE52ZUvrggSN7O5sP8wk51cVyGoxCDyFlMExubKbznNIEufAfiMIgiufvvlySDs UV8UnOT7Uig1oJh1Lw4VfUJtws3YSfs8pX5R43b7KYzFAT4/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsHdOi+FUUuWJGxOeCBXk6PYv+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVhOWY0ZGItNWU3Ni0z NzMyLWFkMTktMGU1ZmRjNzJjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACadWxqBo/KC98IW/hKkSG13mmptdim1x1O935iWX83jyESKNz5veX+n Gk1qiaM6QEX3VeLjS+KI9h4cyIy3wqdVnW1+yoCQDKCAT1IEld8HYm0gtaR5WNdC 9aZHBhHNZsokYBnA5j+uL1bTNQ0WWx1IYDa0yVzXdRPvq5FiltHsP8Ya1Z6+rn2K qia1ICnVqXazh9wfTJ/OAqHJvIuySPMLYZXyfNo63deQlaqYKJQxvqbU30/QQh6V i0AV9R4QzezH4f/IApDH9gwK5J5weZtyK+UVvsBrRTZnaC/U26jzlbvwvTzQJbxC rleEOHfzeHpB1AY8ZRFEvOFRYjxSnwQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:54 2025 by rpki-client