$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8212462-975b-3021-970a-20bf4a9a2bbc.roa File: a8212462-975b-3021-970a-20bf4a9a2bbc.roa (raw, json) Hash identifier: HHzwspqfcpJpLC3vRvytXdekJqhfOnNR+LyfRVgfWCA= Subject key identifier: C4:4B:8A:73:30:48:88:01:49:10:1C:D6:58:6F:3A:1C:BF:30:B7:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6ECEDDB4F22D934F8D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8212462-975b-3021-970a-20bf4a9a2bbc.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.199.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6e:ce:dd:b4:f2:2d:93:4f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=2a400fb4-82c9-477e-81dc-c0182455cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b1:f4:77:20:f6:15:d5:c9:2f:85:ea:62:3a: b9:19:90:5a:89:ac:6b:f2:2e:6d:30:2a:0c:e4:95: d6:09:ed:7d:0f:30:dd:74:f9:8c:d1:0a:de:03:ed: 65:9b:89:f1:f6:14:d0:ab:40:57:10:b6:d8:07:2b: cf:dc:1c:26:20:21:b4:83:23:4e:a9:16:5b:c2:fb: 13:fa:a5:96:e6:84:6e:20:07:fd:45:6d:56:50:45: 88:e5:94:d5:19:d2:ea:45:29:2f:9a:a6:4e:46:6f: 28:75:69:6d:6f:27:a8:e2:06:a3:5c:2b:9a:42:59: 58:35:ef:b3:35:7a:c0:b4:d3:5b:6a:c8:f7:65:3f: 49:50:e8:4f:54:16:4f:37:8b:3b:d2:32:e9:9e:cd: 10:0f:da:3e:08:15:8a:49:61:e5:99:5d:63:4f:90: 5a:bf:c3:c6:ce:80:80:ff:93:f5:03:ee:9e:1c:0a: cf:a2:89:d2:cf:e1:37:24:26:f0:72:d9:b6:43:7c: a1:79:b7:c7:d7:19:35:bf:bc:e6:89:62:68:8d:a4: 03:0c:34:77:e1:6e:c0:00:eb:f9:1e:61:38:12:c6: a2:57:a6:1b:a4:b1:5b:69:db:01:42:6b:ce:35:c7: 43:11:09:f0:66:53:f7:32:42:35:dc:52:c7:72:de: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:8A:73:30:48:88:01:49:10:1C:D6:58:6F:3A:1C:BF:30:B7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8212462-975b-3021-970a-20bf4a9a2bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a6:f5:6e:0f:50:14:86:6f:8a:a6:a7:e4:65:8b:c1:87:69: 0d:65:c6:b8:c9:62:f4:3a:ae:1e:6c:02:96:99:15:28:5e:d3: 2f:da:3c:59:10:61:bd:d6:b7:0d:25:e8:b8:d9:b5:ed:ea:d3: 18:16:43:67:73:40:fa:4b:79:93:fa:ca:cf:b0:7a:f8:47:d2: 25:ea:fe:ab:b8:4e:5f:1a:ed:d7:1e:64:3a:8c:c7:c3:8f:9e: 0a:fc:d4:b0:85:e5:45:be:16:43:3f:86:4f:9e:bb:ed:76:1b: 77:40:98:e5:3f:70:92:ec:b5:94:14:9a:5f:82:9b:7a:87:05: f2:51:28:54:e3:b0:cd:1d:49:fc:83:89:44:39:b6:ae:bc:44: 29:44:1a:21:0f:53:fb:29:d8:e2:2b:56:ef:1a:7f:c0:13:06: 07:04:66:2a:6f:8e:d3:44:ab:ee:41:dd:e2:ae:52:7f:0d:5c: 8a:8c:4f:00:18:a9:44:15:86:ae:e6:3c:fc:64:5c:b3:ed:7f: 6e:e6:7b:ac:fb:d4:c2:1c:a5:28:0a:66:85:bd:5a:d1:26:cb: 54:3a:08:42:16:0a:8d:67:83:bc:96:60:3a:97:cf:87:37:b5: 5f:dc:3b:c8:41:62:e0:68:00:82:76:f0:1f:dc:44:70:d0:a1: 14:10:7f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy27O3bTyLZNPjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk MmE0MDBmYjQtODJjOS00NzdlLTgxZGMtYzAxODI0NTVjY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybH0dyD2FdXJL4XqYjq5GZBaiaxr8i5tMCoM 5JXWCe19DzDddPmM0QreA+1lm4nx9hTQq0BXELbYByvP3BwmICG0gyNOqRZbwvsT +qWW5oRuIAf9RW1WUEWI5ZTVGdLqRSkvmqZORm8odWltbyeo4gajXCuaQllYNe+z NXrAtNNbasj3ZT9JUOhPVBZPN4s70jLpns0QD9o+CBWKSWHlmV1jT5Bav8PGzoCA /5P1A+6eHArPoonSz+E3JCbwctm2Q3yhebfH1xk1v7zmiWJojaQDDDR34W7AAOv5 HmE4EsaiV6YbpLFbadsBQmvONcdDEQnwZlP3MkI13FLHct7FDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRLinMwSIgBSRAc1lhvOhy/MLdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgyMTI0NjItOTc1Yi0z MDIxLTk3MGEtMjBiZjRhOWEyYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8dKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2m9W4PUBSGb4qmp+Rli8GHaQ1lxrjJYvQ6rh5sApaZFShe0y/aPFkQ Yb3Wtw0l6LjZte3q0xgWQ2dzQPpLeZP6ys+wevhH0iXq/qu4Tl8a7dceZDqMx8OP ngr81LCF5UW+FkM/hk+eu+12G3dAmOU/cJLstZQUml+Cm3qHBfJRKFTjsM0dSfyD iUQ5tq68RClEGiEPU/sp2OIrVu8af8ATBgcEZipvjtNEq+5B3eKuUn8NXIqMTwAY qUQVhq7mPPxkXLPtf27me6z71MIcpSgKZoW9WtEmy1Q6CEIWCo1ng7yWYDqXz4c3 tV/cO8hBYuBoAIJ28B/cRHDQoRQQf4E= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:09 2025 by rpki-client