$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c1fc646-d5b3-37e7-9753-2eba268b48b7.roa File: 9c1fc646-d5b3-37e7-9753-2eba268b48b7.roa (raw, json) Hash identifier: uIswMvhtx3Hbw8KsckAKcACtv4EgB93gZOW92tFKfig= Subject key identifier: 3B:95:5F:63:86:91:9A:7A:1D:06:A4:00:FB:D6:7B:6B:66:AB:FB:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99669D567CC251CC6B5FB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c1fc646-d5b3-37e7-9753-2eba268b48b7.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.203.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:69:d5:67:cc:25:1c:c6:b5:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=7fd4480c-32bd-40f3-a380-dbecfa06b5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:8b:67:a9:c5:43:cc:09:a7:e3:41:c5:86: ba:0e:79:3c:15:56:36:ae:ea:00:cd:68:8f:90:bb: 7d:b1:64:d8:f5:36:d2:13:ec:ec:5b:a8:fe:c9:9a: 37:45:6c:fd:f4:8a:18:ce:d4:37:28:2a:b5:8e:79: ab:d3:8e:96:45:5b:28:50:10:51:b6:e7:12:8b:a5: 50:a7:41:83:a2:00:7f:2e:59:ff:91:16:8f:b1:1e: ed:96:a4:31:3d:8f:7f:52:12:9c:45:e0:84:2c:34: ca:b6:5b:ba:0c:27:c6:2d:c8:b9:e6:0b:e2:22:ac: 7b:ef:93:24:d8:78:ef:e2:97:39:d3:b4:c6:cf:46: 5e:47:82:a9:b5:17:48:37:80:99:50:84:27:e2:85: 88:28:a8:00:26:2f:f4:94:5e:46:9b:99:c3:1d:f9: 4c:22:e4:b8:f7:1d:55:4d:04:d0:7b:58:92:65:34: 1d:59:a4:25:24:39:2a:66:b3:9e:16:52:c2:b9:e0: e3:61:d5:bf:6c:38:b2:9c:3d:fc:97:4c:c7:71:db: 3f:cd:36:25:fa:f0:42:60:f3:1d:d7:c4:e8:17:53: e2:ba:92:b2:8d:61:21:5a:73:80:22:5a:72:23:07: e3:27:a9:e2:54:96:63:5d:65:9e:38:1f:95:61:ea: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:95:5F:63:86:91:9A:7A:1D:06:A4:00:FB:D6:7B:6B:66:AB:FB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c1fc646-d5b3-37e7-9753-2eba268b48b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c9:13:9e:26:1c:91:3b:4b:83:c4:a1:14:ae:7b:03:41:e5: 4d:4c:40:47:cf:52:37:fc:47:13:d5:c0:06:99:80:07:58:4a: 64:32:66:2d:6b:15:44:09:dd:a6:38:ec:70:26:0d:41:19:8c: b9:88:19:64:bf:ce:6f:93:02:a9:a6:1f:4d:8d:19:bc:14:21: 41:42:6f:a4:ac:dc:98:fa:fd:46:1a:d5:54:40:03:2d:a8:28: cd:1d:8c:50:12:cf:01:57:55:8e:92:18:f4:18:a9:b0:e5:2a: 85:9c:e9:12:2b:57:f4:1b:f6:97:2f:70:4c:6f:7d:15:69:df: dd:f9:14:40:4a:ce:20:14:11:09:3c:e9:9e:54:4e:7f:dd:e5: 58:b0:a2:e3:ce:6a:2f:8f:b0:62:0d:eb:99:80:62:eb:97:2d: cd:36:66:2d:3d:e2:3f:8a:91:be:28:ac:ca:bc:f3:5d:b9:36: 3f:90:fe:02:f3:bb:1f:ad:86:03:11:4f:c1:ea:55:45:89:10: d3:ab:26:32:90:98:48:6b:54:96:a2:38:06:ff:e8:8b:5a:31: b3:1b:ed:5d:86:d4:a9:dd:c4:b8:b5:37:a3:88:46:65:f2:f0: 35:3c:fa:ad:ab:6f:19:20:b3:5a:25:95:1d:64:7d:3e:c6:91: 1e:e4:de:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmnVZ8wlHMa1+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2ZkNDQ4MGMtMzJiZC00MGYzLWEzODAtZGJlY2ZhMDZiNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXOLZ6nFQ8wJp+NBxYa6Dnk8FVY2ruoAzWiP kLt9sWTY9TbSE+zsW6j+yZo3RWz99IoYztQ3KCq1jnmr046WRVsoUBBRtucSi6VQ p0GDogB/Lln/kRaPsR7tlqQxPY9/UhKcReCELDTKtlu6DCfGLci55gviIqx775Mk 2Hjv4pc507TGz0ZeR4KptRdIN4CZUIQn4oWIKKgAJi/0lF5Gm5nDHflMIuS49x1V TQTQe1iSZTQdWaQlJDkqZrOeFlLCueDjYdW/bDiynD38l0zHcds/zTYl+vBCYPMd 18ToF1PiupKyjWEhWnOAIlpyIwfjJ6niVJZjXWWeOB+VYepcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuVX2OGkZp6HQakAPvWe2tmq/sxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMxZmM2NDYtZDViMy0z N2U3LTk3NTMtMmViYTI2OGI0OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzJE54mHJE7S4PEoRSuewNB5U1MQEfPUjf8RxPVwAaZgAdYSmQyZi1r FUQJ3aY47HAmDUEZjLmIGWS/zm+TAqmmH02NGbwUIUFCb6Ss3Jj6/UYa1VRAAy2o KM0djFASzwFXVY6SGPQYqbDlKoWc6RIrV/Qb9pcvcExvfRVp3935FEBKziAUEQk8 6Z5UTn/d5ViwouPOai+PsGIN65mAYuuXLc02Zi094j+Kkb4orMq88125Nj+Q/gLz ux+thgMRT8HqVUWJENOrJjKQmEhrVJaiOAb/6ItaMbMb7V2G1KndxLi1N6OIRmXy 8DU8+q2rbxkgs1ollR1kfT7GkR7k3o0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:19 2025 by rpki-client