$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa File: a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa (raw, json) Hash identifier: u1hJ+hXgEze5QGxpHhn//wd8PJSYhBsQZ66LJHePvac= Subject key identifier: 33:10:C7:16:D7:58:E7:67:C2:45:10:86:C2:21:BA:16:52:8C:6F:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584898D615DED5BCE45327104500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.192.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:15:de:d5:bc:e4:53:27:10:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=18fdc3d8-8166-4831-9b73-ba583d9f859a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b8:43:0d:6c:5d:9f:d1:47:8c:76:90:af:4d: 29:33:96:d0:23:b7:0d:e2:9f:09:48:2d:21:76:31: fc:87:bd:75:b0:fa:69:5b:01:75:9d:8a:1c:36:36: 0d:bc:a5:da:52:33:6c:ff:53:4c:b8:ad:91:b1:4f: cd:19:e3:1b:7b:e0:c2:49:d9:05:c5:4e:d3:78:13: 77:7e:8a:3c:5e:65:00:d8:83:08:c1:77:3f:5b:92: 2f:f3:f3:8e:0b:60:10:8d:d0:bf:b1:ab:c4:35:65: b9:c9:0c:b2:d8:d6:6f:bf:91:1d:b9:1b:f5:ad:f2: 39:9f:e3:c7:b7:99:45:c6:20:78:58:66:b4:41:cc: 3a:3d:06:b0:8f:82:54:83:eb:06:5a:6f:03:eb:21: 8f:4d:dc:8c:df:79:2c:ab:5e:34:58:3d:03:ba:60: 98:7c:bb:f7:1c:45:d4:47:e1:ce:2a:27:8b:80:0a: ce:57:f1:3e:7a:e8:ff:e3:b3:cf:5a:09:14:93:d7: 0b:db:7c:34:0c:22:ca:c4:4f:e9:81:78:81:be:07: bd:96:97:7a:cf:4c:f5:32:e1:dd:60:fd:83:61:01: 5a:d3:93:e0:18:0f:ec:10:1b:df:e0:15:f0:bc:67: 95:c6:a1:85:92:ee:70:d3:81:40:b3:b3:46:02:ae: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:C7:16:D7:58:E7:67:C2:45:10:86:C2:21:BA:16:52:8C:6F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e0f0dc-02b6-39e2-9e90-00e642aa1a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c0:61:fb:92:b4:8e:20:c5:74:54:da:1b:6d:c5:19:6b:a0: d6:e8:d7:68:e4:01:31:44:d4:e9:cf:49:9b:0e:95:06:a9:52: d8:f6:e8:76:07:66:02:28:10:9f:a3:56:c3:a4:5c:22:b9:c6: e6:99:5a:63:68:af:d8:61:c9:ca:31:ba:63:50:e2:8a:64:51: 40:09:76:94:7a:5f:99:5c:ce:02:c1:aa:9b:52:77:57:0a:28: e6:aa:3f:cc:1d:64:54:44:68:c0:46:83:93:9e:25:24:99:96: 1e:45:41:76:4a:99:a5:50:39:c6:72:85:b9:4b:8b:a7:60:5c: e9:3b:24:10:22:bb:87:71:6b:bb:07:8d:98:d3:1b:d5:f4:b3: a9:9d:65:b1:c4:04:d6:03:79:97:e9:2b:ea:c7:5f:fb:2b:d1: a0:85:ee:66:be:82:64:05:40:2b:ee:d5:1b:fb:f8:9b:43:5e: 4a:14:4a:4e:0f:2d:02:db:02:c9:a0:bf:94:d5:a1:c8:58:b6: cb:50:ac:75:db:46:20:f3:84:8a:f2:d7:48:be:30:94:7b:b6: bc:77:06:04:be:91:9e:73:7c:cc:5e:bc:ed:5d:d4:ab:e4:48: c1:bc:3c:31:0c:8f:c0:fa:15:f0:eb:8f:24:a4:ef:92:74:4a: d5:58:0c:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1hXe1bzkUycQRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MThmZGMzZDgtODE2Ni00ODMxLTliNzMtYmE1ODNkOWY4NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rhDDWxdn9FHjHaQr00pM5bQI7cN4p8JSC0h djH8h711sPppWwF1nYocNjYNvKXaUjNs/1NMuK2RsU/NGeMbe+DCSdkFxU7TeBN3 foo8XmUA2IMIwXc/W5Iv8/OOC2AQjdC/savENWW5yQyy2NZvv5EduRv1rfI5n+PH t5lFxiB4WGa0Qcw6PQawj4JUg+sGWm8D6yGPTdyM33ksq140WD0DumCYfLv3HEXU R+HOKieLgArOV/E+euj/47PPWgkUk9cL23w0DCLKxE/pgXiBvge9lpd6z0z1MuHd YP2DYQFa05PgGA/sEBvf4BXwvGeVxqGFku5w04FAs7NGAq7T6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMQxxbXWOdnwkUQhsIhuhZSjG+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVlMGYwZGMtMDJiNi0z OWUyLTllOTAtMDBlNjQyYWExYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8DlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPAYfuStI4gxXRU2httxRlroNbo12jkATFE1OnPSZsOlQapUtj26HYH ZgIoEJ+jVsOkXCK5xuaZWmNor9hhycoxumNQ4opkUUAJdpR6X5lczgLBqptSd1cK KOaqP8wdZFREaMBGg5OeJSSZlh5FQXZKmaVQOcZyhblLi6dgXOk7JBAiu4dxa7sH jZjTG9X0s6mdZbHEBNYDeZfpK+rHX/sr0aCF7ma+gmQFQCvu1Rv7+JtDXkoUSk4P LQLbAsmgv5TVochYtstQrHXbRiDzhIry10i+MJR7trx3BgS+kZ5zfMxevO1d1Kvk SMG8PDEMj8D6FfDrjySk75J0StVYDM4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:10 2025 by rpki-client