$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1df322-f179-3816-bf6c-ad0552d1d866.roa File: 9e1df322-f179-3816-bf6c-ad0552d1d866.roa (raw, json) Hash identifier: auWgWWCB9e9KsdQOWDnIU6nIm5rrDp35WFpHinGqjWs= Subject key identifier: 1C:01:14:09:21:D9:2C:07:34:E5:52:76:AB:BB:E7:5D:6B:7D:F6:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340BD532FBF8F9B269B59C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1df322-f179-3816-bf6c-ad0552d1d866.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 7713 IP address blocks: 23.212.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:bd:53:2f:bf:8f:9b:26:9b:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=34e36b9a-abb2-4f08-b0c4-f3498b458910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:c9:89:0e:69:a3:d2:d6:91:6e:fc:a8:39: f2:fa:29:6a:e5:c9:ec:cf:a7:03:a9:65:24:9d:d4: 55:72:5e:1b:85:d2:5e:b5:5a:e8:53:80:81:06:84: 2b:74:b5:76:a9:b8:44:2b:64:53:36:30:7e:e8:aa: 9a:ec:fa:97:dd:d4:65:1a:73:cb:c0:bc:ba:ec:4a: c0:ff:8f:32:d6:87:ee:5e:db:ee:be:7f:c2:1b:33: 1d:1a:4d:e9:f9:d9:71:67:9d:87:3a:9b:d9:f9:b5: 35:63:4e:51:a2:2e:91:fe:eb:31:8a:e7:26:a9:af: ae:1b:ed:bc:83:be:34:10:83:7c:e8:63:56:00:57: 16:10:48:47:d2:0c:db:35:b0:1a:ef:e2:7f:9f:00: 93:a3:e7:43:16:b0:75:35:29:be:c2:1c:27:ee:8c: 19:7e:91:fc:34:92:82:f6:47:a3:05:b2:39:0c:9c: e5:ab:9c:4e:85:3d:81:d7:14:48:8a:0e:0e:91:12: 8d:b6:6b:11:67:9a:fc:ee:75:42:ca:cd:9d:2e:50: b4:d5:52:68:ac:34:af:e7:0e:07:54:c5:65:d1:62: 40:e9:c0:89:15:77:21:18:e3:a2:45:ab:2b:d1:01: fa:ce:3e:2b:11:9a:9b:cc:18:b7:d5:8d:86:39:36: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:01:14:09:21:D9:2C:07:34:E5:52:76:AB:BB:E7:5D:6B:7D:F6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1df322-f179-3816-bf6c-ad0552d1d866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:24:a3:73:a0:b3:4c:d4:2e:24:bc:ce:41:fe:20:87:57:6a: 0d:de:ed:ca:9c:b5:27:b4:d3:75:9d:1f:ad:68:36:d1:9d:36: ce:ee:06:fa:e8:32:62:ad:22:11:f9:86:6a:79:77:57:01:8d: e3:fc:0e:d9:2e:9b:f7:37:db:2e:24:1c:08:a8:62:84:ac:87: 17:91:73:6b:11:02:e5:72:e5:70:89:ae:d5:5b:07:b6:3e:f3: f5:e6:1d:2f:2d:71:11:6e:53:b9:b9:05:70:9d:14:dd:b7:db: e8:5a:43:68:b5:6c:47:7d:f6:a2:4f:58:3b:bc:66:eb:50:8a: 9a:32:ae:7c:5b:75:16:cc:41:ed:3a:3f:aa:06:57:c4:28:1e: 5a:d9:4e:63:e5:b0:b2:7e:40:24:e4:29:fd:ca:5e:8b:93:9e: 9c:99:0e:bb:92:21:97:70:9e:1a:eb:aa:0b:35:c1:f2:ab:df: 65:20:26:7f:88:02:ae:88:91:3c:99:b6:27:61:6e:91:10:90: b2:b2:6f:86:db:40:b1:9f:f7:12:e5:12:9d:2a:27:6c:ae:0e: ce:9e:9e:21:d5:2f:d0:f1:0e:29:3f:a8:55:23:d2:22:13:c8: a0:52:48:e0:55:18:f8:f0:4c:2e:5c:e0:e1:91:e9:32:70:40: c4:bd:da:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQL1TL7+PmyabWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk MzRlMzZiOWEtYWJiMi00ZjA4LWIwYzQtZjM0OThiNDU4OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwzJiQ5po9LWkW78qDny+ilq5cnsz6cDqWUk ndRVcl4bhdJetVroU4CBBoQrdLV2qbhEK2RTNjB+6Kqa7PqX3dRlGnPLwLy67ErA /48y1ofuXtvuvn/CGzMdGk3p+dlxZ52HOpvZ+bU1Y05Roi6R/usxiucmqa+uG+28 g740EIN86GNWAFcWEEhH0gzbNbAa7+J/nwCTo+dDFrB1NSm+whwn7owZfpH8NJKC 9kejBbI5DJzlq5xOhT2B1xRIig4OkRKNtmsRZ5r87nVCys2dLlC01VJorDSv5w4H VMVl0WJA6cCJFXchGOOiRasr0QH6zj4rEZqbzBi31Y2GOTZnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwBFAkh2SwHNOVSdqu7511rffZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWUxZGYzMjItZjE3OS0z ODE2LWJmNmMtYWQwNTUyZDFkODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9RmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUko3Ogs0zULiS8zkH+IIdXag3e7cqctSe003WdH61oNtGdNs7uBvro MmKtIhH5hmp5d1cBjeP8Dtkum/c32y4kHAioYoSshxeRc2sRAuVy5XCJrtVbB7Y+ 8/XmHS8tcRFuU7m5BXCdFN232+haQ2i1bEd99qJPWDu8ZutQipoyrnxbdRbMQe06 P6oGV8QoHlrZTmPlsLJ+QCTkKf3KXouTnpyZDruSIZdwnhrrqgs1wfKr32UgJn+I Aq6IkTyZtidhbpEQkLKyb4bbQLGf9xLlEp0qJ2yuDs6eniHVL9DxDik/qFUj0iIT yKBSSOBVGPjwTC5c4OGR6TJwQMS92ss= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:11 2025 by rpki-client