$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa File: 9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa (raw, json) Hash identifier: dGSJeXPNgQhxvvHz2qh7gacU95/NwrPyBYKn5+29Xgw= Subject key identifier: 9C:88:ED:48:0D:E0:C8:E4:63:76:1C:01:F9:79:FA:D0:91:D5:49:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA6FF1F11439D0F980C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.223.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a6:ff:1f:11:43:9d:0f:98:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=b945ccca-58f0-4e9c-bc49-1a3e93ce2888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:bb:ac:2f:da:a2:4b:11:bb:62:ae:5b:8d: bc:bc:26:47:a7:a1:36:32:3e:07:50:5b:b7:3e:37: f1:b1:36:85:75:3f:ec:f9:ca:72:fe:c0:db:05:55: ed:86:f7:a9:f3:cf:43:62:b3:12:7a:5e:de:76:ef: a2:68:ab:4c:4b:e0:67:ac:1d:6a:75:66:f3:ac:26: c7:ef:25:e3:f9:dc:99:43:f6:a4:63:fe:ef:7e:85: 41:9d:00:ad:66:fd:b7:fc:0f:13:7e:af:ef:c7:56: 22:d9:c0:ff:8c:dc:16:23:be:94:b6:bd:64:ac:37: 1c:02:4a:04:46:56:ab:ce:c8:28:4c:e8:91:85:8c: 1d:09:a5:d0:78:c7:24:bf:c0:a9:db:9c:cc:60:fc: ea:99:a7:a6:42:b7:21:d1:70:a9:ed:92:f6:c2:6d: c9:8e:7f:36:62:4e:a2:f0:66:ea:ab:bb:39:c3:b2: dd:71:9d:a0:09:98:aa:7f:6e:72:0a:0a:b0:87:56: 8c:13:59:42:63:0c:fa:cf:fc:75:3a:9b:ec:39:a4: 01:ca:5b:45:33:cf:7d:2e:a8:ae:a8:51:61:63:f3: 24:d8:d7:3c:18:a5:61:fa:18:d7:bb:de:9a:a9:c6: e4:57:76:72:d1:11:20:ac:82:e5:e2:0b:2a:60:e2: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:ED:48:0D:E0:C8:E4:63:76:1C:01:F9:79:FA:D0:91:D5:49:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6f:3f:20:8a:a1:be:ee:e8:8c:ad:e8:8d:ba:79:44:5f:6d: 80:81:ba:3d:36:2c:00:da:e0:cc:9c:d5:ad:a9:3b:a3:9e:39: 7f:21:ec:aa:b5:4e:66:e1:af:cd:07:f7:22:e1:6b:d1:20:33: 21:3a:9b:bb:ef:fe:a5:34:ef:38:2b:6e:65:b7:b1:33:e4:ed: 11:56:f3:7e:e4:37:fb:00:60:58:79:ab:b3:c6:db:9a:59:c5: ea:26:c9:6e:eb:ee:d2:0b:a6:21:de:13:80:6c:a0:6f:fb:07: 07:cd:97:bf:0d:3f:a9:ff:43:40:ab:b1:7d:03:10:3b:ab:cf: db:7d:30:0c:e3:60:8b:db:cb:e0:74:9f:12:5a:fe:40:df:65: 88:f7:35:b8:80:fc:dd:2f:6a:f7:c1:85:31:59:df:db:1e:78: 81:5e:4e:53:65:d6:76:9f:04:06:d1:7a:70:27:5d:64:c8:56: d7:aa:bf:54:34:05:89:cf:28:f7:20:c8:7a:d5:83:64:24:92: 69:63:82:17:03:58:32:a3:ae:27:42:bf:67:0f:78:9b:f1:82: bc:f6:1a:96:c3:a0:fa:62:c0:55:57:bb:b4:e1:a0:4b:b2:a5: d0:de:ed:75:36:d8:a2:e9:e1:61:f4:2f:44:f9:95:f0:41:58: 43:46:61:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6b/HxFDnQ+YDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Yjk0NWNjY2EtNThmMC00ZTljLWJjNDktMWEzZTkzY2UyODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyO7rC/aoksRu2KuW428vCZHp6E2Mj4HUFu3 PjfxsTaFdT/s+cpy/sDbBVXthvep889DYrMSel7edu+iaKtMS+BnrB1qdWbzrCbH 7yXj+dyZQ/akY/7vfoVBnQCtZv23/A8Tfq/vx1Yi2cD/jNwWI76Utr1krDccAkoE RlarzsgoTOiRhYwdCaXQeMckv8Cp25zMYPzqmaemQrch0XCp7ZL2wm3Jjn82Yk6i 8Gbqq7s5w7LdcZ2gCZiqf25yCgqwh1aME1lCYwz6z/x1OpvsOaQByltFM899Lqiu qFFhY/Mk2Nc8GKVh+hjXu96aqcbkV3Zy0REgrILl4gsqYOKvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyI7UgN4MjkY3YcAfl5+tCR1Um5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMzYWM4NWItMTZlMy0z ZThiLThlOGUtMTUyYmFjNDQxMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVvPyCKob7u6Iyt6I26eURfbYCBuj02LADa4Myc1a2pO6OeOX8h7Kq1 Tmbhr80H9yLha9EgMyE6m7vv/qU07zgrbmW3sTPk7RFW837kN/sAYFh5q7PG25pZ xeomyW7r7tILpiHeE4BsoG/7BwfNl78NP6n/Q0CrsX0DEDurz9t9MAzjYIvby+B0 nxJa/kDfZYj3NbiA/N0vavfBhTFZ39seeIFeTlNl1nafBAbRenAnXWTIVteqv1Q0 BYnPKPcgyHrVg2QkkmljghcDWDKjridCv2cPeJvxgrz2GpbDoPpiwFVXu7ThoEuy pdDe7XU22KLp4WH0L0T5lfBBWENGYcY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:40 2025 by rpki-client