$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f467909-4627-345f-9fd1-f01ecd751e58.roa File: 9f467909-4627-345f-9fd1-f01ecd751e58.roa (raw, json) Hash identifier: j9lqHWKeYxKQxd8PY1VoXB6oOpjmsTSYkOXcOmQhxXo= Subject key identifier: AC:EF:E7:97:31:49:77:DE:62:18:AB:06:84:44:CD:79:35:93:05:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849001B6A978D566616F5D18FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f467909-4627-345f-9fd1-f01ecd751e58.roa Signing time: Tue 25 Feb 2025 13:49:04 +0000 ROA not before: Tue 25 Feb 2025 13:49:04 +0000 ROA not after: Mon 26 May 2025 12:49:04 +0000 asID: 20940 IP address blocks: 23.198.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:1b:6a:97:8d:56:66:16:f5:d1:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 13:49:04 2025 GMT Not After : May 26 12:49:04 2025 GMT Subject: CN=2534ec71-b617-4e88-a281-2851fef974e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:f2:e1:a8:e5:13:84:a3:89:cf:75:57:67: eb:37:40:74:48:8f:47:c7:d1:05:a7:10:8e:ec:9e: f0:24:e4:bf:89:92:c1:01:39:05:a5:ce:ac:24:f7: 44:bf:61:17:8f:3c:a4:9f:9f:a8:2b:2e:28:34:6a: 6d:3b:c3:0a:13:c1:20:c3:6d:7d:ab:3f:56:1b:93: 58:69:9f:70:f3:7b:2a:cd:97:d8:25:01:34:77:71: e2:b2:ff:8e:21:d8:d9:19:f2:9e:2e:c8:d4:21:2b: b7:6a:4b:a5:fb:bc:24:8d:5a:1b:b8:11:ce:42:a3: 6f:ae:49:18:d7:3a:7b:04:cd:21:4d:63:39:ba:27: 65:3d:90:3b:fa:3b:d6:73:84:6d:91:c0:f9:50:fa: be:7c:b3:6c:19:b3:fa:df:e9:93:e8:fb:64:b3:fa: f5:88:09:4f:84:ff:fc:3b:87:d4:d0:b7:ab:a1:81: 67:d5:00:38:36:b3:6a:03:7c:e0:f1:a2:42:00:f0: 3c:40:42:96:60:61:e6:e5:9b:7e:5e:45:b1:c4:3f: 9b:91:2c:e9:4f:b5:20:e1:1e:26:b9:fe:99:9b:7b: 56:9b:cc:f5:23:35:c5:ac:2b:a1:ec:52:ba:70:93: 16:d7:4b:d4:62:3f:69:f6:24:20:75:9f:7b:8e:05: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EF:E7:97:31:49:77:DE:62:18:AB:06:84:44:CD:79:35:93:05:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f467909-4627-345f-9fd1-f01ecd751e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f3:32:ce:0f:34:d2:6e:4b:ea:e6:37:c7:41:71:79:95:69: 64:d5:96:ac:fd:9e:3c:40:e1:bc:d4:ce:47:ca:f3:f4:1e:d8: 05:4b:ca:e1:71:a0:fc:74:51:df:82:c5:8a:07:c2:3c:e0:f5: d9:49:96:70:17:21:20:23:33:39:7e:49:82:8b:0b:36:a1:5c: 4d:00:ba:fc:f2:ff:66:e4:c1:b9:cf:46:f7:14:11:5d:db:10: 2e:b9:9a:c0:00:96:7f:a4:4a:4c:07:ac:11:f0:30:c6:bc:54: ca:32:0a:84:52:cc:3a:de:65:8d:e4:93:09:b7:15:6c:1e:86: 26:3a:44:35:7c:a9:6a:6a:12:bc:ca:a3:f6:b2:b7:50:09:e7: ff:80:a7:6a:47:43:0c:9e:b9:fd:14:69:83:1d:51:da:b7:73: 2e:68:61:e1:ef:a1:96:54:2e:ec:c4:9c:78:2b:9f:74:0d:d4: 66:7b:7d:67:88:1e:61:f5:6e:5c:93:6d:aa:0f:ec:48:99:01: a1:d3:e4:b9:e9:71:a6:6f:54:a9:49:72:e4:82:24:b4:21:59: a5:d3:d1:c8:14:9a:48:21:a6:85:28:b3:0d:de:eb:2a:7a:df: e0:79:ce:2c:a6:4f:c4:a0:4a:6f:da:7e:1a:2f:3b:1e:fb:5a: 3d:d7:d7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAG2qXjVZmFvXRj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTEzNDkwNFoXDTI1MDUyNjEyNDkwNFowLzEtMCsGA1UEAxMk MjUzNGVjNzEtYjYxNy00ZTg4LWEyODEtMjg1MWZlZjk3NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbny4ajlE4Sjic91V2frN0B0SI9Hx9EFpxCO 7J7wJOS/iZLBATkFpc6sJPdEv2EXjzykn5+oKy4oNGptO8MKE8Egw219qz9WG5NY aZ9w83sqzZfYJQE0d3Hisv+OIdjZGfKeLsjUISu3akul+7wkjVobuBHOQqNvrkkY 1zp7BM0hTWM5uidlPZA7+jvWc4RtkcD5UPq+fLNsGbP63+mT6Ptks/r1iAlPhP/8 O4fU0LeroYFn1QA4NrNqA3zg8aJCAPA8QEKWYGHm5Zt+XkWxxD+bkSzpT7Ug4R4m uf6Zm3tWm8z1IzXFrCuh7FK6cJMW10vUYj9p9iQgdZ97jgXg+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzv55cxSXfeYhirBoREzXk1kwUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY0Njc5MDktNDYyNy0z NDVmLTlmZDEtZjAxZWNkNzUxZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8b8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHzMs4PNNJuS+rmN8dBcXmVaWTVlqz9njxA4bzUzkfK8/Qe2AVLyuFx oPx0Ud+CxYoHwjzg9dlJlnAXISAjMzl+SYKLCzahXE0Auvzy/2bkwbnPRvcUEV3b EC65msAAln+kSkwHrBHwMMa8VMoyCoRSzDreZY3kkwm3FWwehiY6RDV8qWpqErzK o/ayt1AJ5/+Ap2pHQwyeuf0UaYMdUdq3cy5oYeHvoZZULuzEnHgrn3QN1GZ7fWeI HmH1blyTbaoP7EiZAaHT5LnpcaZvVKlJcuSCJLQhWaXT0cgUmkghpoUosw3e6yp6 3+B5ziymT8SgSm/afhovOx77Wj3X1w8= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:46 2025 by rpki-client