$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa File: 9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa (raw, json) Hash identifier: BoCdSRms9ZiDB+mAmdQFFLqZJJqsRpafeaEBM7Y8nzo= Subject key identifier: 82:CA:C5:33:0F:60:9F:76:0A:5E:7A:31:B4:DE:CE:A1:1A:38:2D:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D211469DD2D13A502C4CFE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.37.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:46:9d:d2:d1:3a:50:2c:4c:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4e215657-5d4d-4e5a-8f8c-694b6faeb2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:77:fa:06:c1:90:b2:85:cc:4f:e3:f8:73: 38:cf:8e:b6:4b:3a:07:6b:49:28:69:8d:bd:33:62: 3d:cf:24:36:d9:38:39:d2:85:46:b6:b4:d4:4f:ab: 16:28:33:a9:7e:60:14:01:41:35:86:27:40:62:7a: 8f:f0:7d:fc:be:ba:50:57:80:26:fc:08:65:bb:59: 78:5f:30:4b:4b:6d:61:cb:89:54:76:cc:65:70:f1: 63:35:3b:15:82:66:8f:13:3a:69:11:31:56:7f:82: 83:0e:07:40:57:69:9b:6d:d3:2c:f0:c1:3f:3c:ef: aa:e6:eb:9b:77:2a:c9:04:44:17:b5:1c:55:42:1f: 06:81:d4:0d:6f:a6:92:9a:46:26:30:0c:0f:6d:e3: b5:c9:9f:34:bb:56:e2:24:6c:9e:ef:cb:6c:f6:f5: af:b7:ed:37:0f:b1:47:54:44:78:6a:17:41:b3:36: 6e:b2:5d:3c:58:41:5e:bd:4f:cf:34:dc:e9:87:81: 7c:7c:c7:81:d5:94:71:5d:88:09:9b:9f:d9:8c:6f: ef:3f:22:b0:80:0c:fe:e1:6f:36:a4:3c:9e:c3:d7: 0c:bc:b6:75:ea:0f:98:99:72:e3:e5:7e:99:dc:7a: e5:56:ac:7b:e3:92:b2:1f:7f:b5:e3:29:28:00:38: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CA:C5:33:0F:60:9F:76:0A:5E:7A:31:B4:DE:CE:A1:1A:38:2D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b0a9ba0-b204-3727-ac46-0ccf4a15b919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:44:9a:58:df:d3:6b:cf:61:6f:cb:95:c2:7a:da:17:cd:43: b0:c4:12:5d:75:1b:3d:b1:37:29:26:6c:f2:d8:da:99:b2:4c: cb:ad:6f:e1:14:4f:16:22:6d:ac:40:33:df:df:23:0d:56:c6: 8e:13:78:21:f8:91:f6:51:48:c9:9f:ba:4c:3d:45:37:37:c1: db:ad:b2:8b:96:9d:bb:32:eb:40:ad:2f:80:e3:bb:a1:2d:ca: 67:91:ce:0d:44:81:f9:bf:6a:f5:ea:3a:d5:f4:bb:89:ef:c8: ff:bf:ac:2b:aa:ca:68:8e:ca:fa:13:0a:e2:bb:89:6b:3f:a4: 40:90:4a:85:50:62:ed:8e:61:8a:8c:b8:58:63:59:e1:44:5f: fb:4e:ee:fe:b6:17:9d:35:e8:39:dc:3a:62:c0:16:2e:b0:e1: fe:b2:be:44:f6:b5:d9:27:8d:fe:25:76:65:3d:21:71:a5:0d: c7:a0:e9:84:09:4e:9d:11:ff:52:43:dc:b6:ed:53:b3:8a:16: cf:b2:1d:a7:81:e1:30:62:77:1d:c2:ca:34:06:fc:d2:12:2e: 01:31:16:55:a7:02:11:67:1c:59:de:55:15:5d:30:e4:ab:9f: 4e:d0:e0:46:5c:32:07:3a:29:6a:40:bd:54:d8:80:08:4d:65: 50:f8:7a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUad0tE6UCxM/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGUyMTU2NTctNWQ0ZC00ZTVhLThmOGMtNjk0YjZmYWViMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskh3+gbBkLKFzE/j+HM4z462SzoHa0koaY29 M2I9zyQ22Tg50oVGtrTUT6sWKDOpfmAUAUE1hidAYnqP8H38vrpQV4Am/Ahlu1l4 XzBLS21hy4lUdsxlcPFjNTsVgmaPEzppETFWf4KDDgdAV2mbbdMs8ME/PO+q5uub dyrJBEQXtRxVQh8GgdQNb6aSmkYmMAwPbeO1yZ80u1biJGye78ts9vWvt+03D7FH VER4ahdBszZusl08WEFevU/PNNzph4F8fMeB1ZRxXYgJm5/ZjG/vPyKwgAz+4W82 pDyew9cMvLZ16g+YmXLj5X6Z3HrlVqx745KyH3+14ykoADgaqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILKxTMPYJ92Cl56MbTezqEaOC1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWIwYTliYTAtYjIwNC0z NzI3LWFjNDYtMGNjZjRhMTViOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhEmljf02vPYW/LlcJ62hfNQ7DEEl11Gz2xNykmbPLY2pmyTMutb+EU TxYibaxAM9/fIw1Wxo4TeCH4kfZRSMmfukw9RTc3wdutsouWnbsy60CtL4Dju6Et ymeRzg1Egfm/avXqOtX0u4nvyP+/rCuqymiOyvoTCuK7iWs/pECQSoVQYu2OYYqM uFhjWeFEX/tO7v62F5016DncOmLAFi6w4f6yvkT2tdknjf4ldmU9IXGlDceg6YQJ Tp0R/1JD3LbtU7OKFs+yHaeB4TBidx3CyjQG/NISLgExFlWnAhFnHFneVRVdMOSr n07Q4EZcMgc6KWpAvVTYgAhNZVD4ep0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:48 2025 by rpki-client