$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6b0baf2-99a6-392b-bc5b-a3b967fbb8fa.roa File: a6b0baf2-99a6-392b-bc5b-a3b967fbb8fa.roa (raw, json) Hash identifier: 7XwtZm0StniBidKkrfIIA9eyk9ZIEMuEbFhzNN2RRJ4= Subject key identifier: 00:17:8B:CE:AA:66:17:10:20:AD:AE:43:AD:D1:C3:49:4E:AA:3D:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA811F503A774CA484900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6b0baf2-99a6-392b-bc5b-a3b967fbb8fa.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.220.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a8:11:f5:03:a7:74:ca:48:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=6ed9c536-558c-43af-8711-31bb12a0e7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:f6:bc:6d:5b:8b:78:95:a9:e3:2c:f0:6d: f8:89:50:5f:38:7b:f3:5c:59:bf:f2:c4:be:30:6c: 90:bf:6a:d4:da:e1:56:16:ae:e1:bb:17:68:34:7c: de:e0:48:1e:83:65:bd:8b:c4:13:a5:0e:ef:ca:1c: fc:3b:cf:f3:e8:09:40:c9:f1:65:75:fb:a3:b2:c0: d5:de:3e:57:b5:4d:e0:4a:0b:34:dd:14:be:81:dd: d4:72:c8:9f:85:ed:69:c3:b4:80:0e:e0:27:9d:e9: 6f:f8:f3:30:98:cb:f6:1b:d4:f0:fa:7f:e7:7d:9b: c7:c3:1c:b6:3c:06:ea:6d:14:3b:5b:bd:20:20:4a: ce:a9:7a:6a:4c:54:24:8d:d1:6b:76:54:fc:01:5c: 11:dc:d0:b0:ee:49:86:44:8f:fa:8c:08:71:4f:51: 8e:37:24:ee:d9:76:fc:46:16:7f:af:3c:6d:43:08: 34:c6:64:84:89:40:cc:74:1b:cd:fa:bd:c8:66:82: 85:a9:36:fe:e2:7f:0e:6f:10:41:2a:a1:37:6e:6e: 70:2e:0a:2a:de:ee:bf:34:65:f8:b1:be:df:2b:3c: db:1c:0f:08:04:9b:75:19:76:9c:21:dc:b6:00:4d: 9a:d5:25:05:27:c9:20:73:3b:21:97:e5:e4:21:ce: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:8B:CE:AA:66:17:10:20:AD:AE:43:AD:D1:C3:49:4E:AA:3D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6b0baf2-99a6-392b-bc5b-a3b967fbb8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:52:07:df:1a:ed:9a:21:fe:15:1e:e4:66:06:da:9c:e7:3d: 2c:66:45:9b:ae:31:3a:5b:d6:39:7b:44:d6:88:dd:81:b6:92: 96:d2:2e:a4:65:67:47:9c:d3:f2:25:5c:0e:2f:9c:8e:4e:c5: 6c:70:fc:a6:17:64:b4:e7:83:eb:fb:dd:5a:c9:26:61:7c:10: 13:28:65:fb:77:2d:d1:90:ba:35:b4:92:ed:c5:13:c8:e4:c2: 8d:8f:2a:3a:a7:c7:99:82:9c:bc:8b:d4:47:5e:66:5d:51:a0: 7c:2d:41:5d:91:a6:e7:a7:a4:cb:58:38:8d:c6:2d:2c:32:f6: 17:80:13:1b:24:67:6d:2a:e8:f5:84:93:05:69:3c:69:a4:4f: 94:75:4b:3d:92:e1:c6:7f:8e:f5:c9:6e:4c:2a:f3:6d:d4:0e: 71:13:e9:5f:8f:3c:4a:0c:2c:b5:a8:be:95:b8:f7:49:7a:1e: ff:97:be:f1:ed:9e:5d:aa:ab:80:49:33:6f:19:67:ef:cc:85: 01:fe:d9:1b:37:44:fc:08:98:d8:73:3f:22:2f:05:75:4b:71: e8:b7:57:fe:0a:3a:3a:32:df:bd:33:db:3d:70:12:69:99:63: 8e:94:87:08:50:f9:b1:24:d9:65:53:bd:74:79:e4:0a:9a:24: 63:88:0a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6gR9QOndMpISQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NmVkOWM1MzYtNTU4Yy00M2FmLTg3MTEtMzFiYjEyYTBlN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTX2vG1bi3iVqeMs8G34iVBfOHvzXFm/8sS+ MGyQv2rU2uFWFq7huxdoNHze4Egeg2W9i8QTpQ7vyhz8O8/z6AlAyfFldfujssDV 3j5XtU3gSgs03RS+gd3Ucsifhe1pw7SADuAnnelv+PMwmMv2G9Tw+n/nfZvHwxy2 PAbqbRQ7W70gIErOqXpqTFQkjdFrdlT8AVwR3NCw7kmGRI/6jAhxT1GONyTu2Xb8 RhZ/rzxtQwg0xmSEiUDMdBvN+r3IZoKFqTb+4n8ObxBBKqE3bm5wLgoq3u6/NGX4 sb7fKzzbHA8IBJt1GXacIdy2AE2a1SUFJ8kgczshl+XkIc6CYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAXi86qZhcQIK2uQ63Rw0lOqj0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZiMGJhZjItOTlhNi0z OTJiLWJjNWItYTNiOTY3ZmJiOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNSB98a7Zoh/hUe5GYG2pznPSxmRZuuMTpb1jl7RNaI3YG2kpbSLqRl Z0ec0/IlXA4vnI5OxWxw/KYXZLTng+v73VrJJmF8EBMoZft3LdGQujW0ku3FE8jk wo2PKjqnx5mCnLyL1EdeZl1RoHwtQV2RpuenpMtYOI3GLSwy9heAExskZ20q6PWE kwVpPGmkT5R1Sz2S4cZ/jvXJbkwq823UDnET6V+PPEoMLLWovpW490l6Hv+XvvHt nl2qq4BJM28ZZ+/MhQH+2Rs3RPwImNhzPyIvBXVLcei3V/4KOjoy370z2z1wEmmZ Y46UhwhQ+bEk2WVTvXR55AqaJGOICsg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:59 2025 by rpki-client