$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa File: aa87476e-6587-32f8-9e25-ff671f5c947a.roa (raw, json) Hash identifier: P+IQezalsXQ3a1ojtifntZ7jRO+K9gQjyPVa0TDpEW4= Subject key identifier: 30:69:C4:BC:AB:0A:2D:B1:6C:F0:FA:49:EA:CD:D7:7D:B7:39:0F:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584890760FB0CA49E48EB8A99BD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.195.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0f:b0:ca:49:e4:8e:b8:a9:9b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=ec1926f9-d516-4010-8be9-081f7aed0622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:2d:96:8d:12:a0:94:cd:98:49:92:b1:14: 1d:85:67:8e:32:c0:db:db:2b:67:fa:fd:10:04:89: 73:3a:0e:0e:48:ad:61:d5:cf:7a:ab:d3:09:a9:b6: 96:75:a5:f7:43:a1:b1:4b:25:cf:e1:c9:58:a6:d9: a3:42:f8:af:35:bb:9b:54:55:86:51:80:9d:3a:48: 8a:5f:91:15:9a:76:9b:34:2b:7d:9d:f0:05:30:1b: 79:8b:c0:f1:e2:65:aa:e7:54:bb:56:41:ce:d2:6f: b6:68:90:76:15:af:31:53:6d:14:9f:e3:f3:d3:48: bf:18:79:c3:b5:79:60:cd:b3:a3:ae:32:98:8b:36: c8:a1:df:ea:44:bb:9a:05:c6:cb:02:04:7c:98:5a: 5e:16:78:f2:80:8c:13:01:6c:26:da:01:fa:fc:b1: 68:22:87:0d:e4:db:53:8f:cf:35:33:a1:2a:b4:57: df:80:23:54:92:64:82:13:75:7f:e5:38:9e:4d:7f: 8a:01:91:83:46:b8:de:22:55:62:80:d0:b9:27:36: 83:35:0e:a3:45:c8:c5:32:25:38:53:7d:c1:46:05: fb:a7:3c:ed:37:c8:75:1d:1e:61:75:53:f2:37:29: da:eb:01:10:e6:b1:bc:ad:1b:73:e9:45:0b:87:48: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:69:C4:BC:AB:0A:2D:B1:6C:F0:FA:49:EA:CD:D7:7D:B7:39:0F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:51:8f:73:a7:b5:9c:9f:ab:49:f3:b4:3c:97:f7:c8:34:20: 20:38:53:88:93:7a:78:b7:63:31:cc:0d:a6:71:bc:e3:40:22: b0:19:98:c7:e1:0e:0e:a5:92:6d:60:3a:6d:0f:5a:b0:41:b3: b4:27:eb:4a:27:03:42:e9:bf:73:ca:12:04:e7:1d:c0:7c:6b: e1:bb:d2:00:e0:a6:9e:39:98:0f:7f:7a:fd:ac:9e:63:34:97: d5:32:0f:7a:a9:95:eb:8d:c7:e4:f2:9c:0c:20:32:e2:0c:df: 14:45:ef:4e:b9:44:f1:1e:7b:7b:e3:2c:ba:e6:3b:90:fe:75: c9:01:ed:f5:13:46:d8:30:7d:76:c0:9e:5d:b5:0e:02:fb:8c: 1b:de:08:ce:aa:81:67:6e:47:fa:e2:53:1d:56:fd:36:0b:b1: 72:a1:f5:ab:6f:db:bd:66:6c:18:a9:ff:9e:06:b4:15:cb:db: 9e:a4:17:88:6a:1d:0a:2e:fb:2f:e3:4d:16:ef:aa:05:ae:e9: ae:0e:83:ba:69:62:78:24:f1:45:df:3a:58:e1:a6:c1:47:77: 7d:64:92:dd:31:77:82:4f:37:81:f8:a0:1b:54:3a:28:7e:52: 68:17:cc:65:c2:31:53:85:57:7d:06:cd:2a:43:20:65:9e:a3: 11:ad:46:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg+wyknkjripm9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZWMxOTI2ZjktZDUxNi00MDEwLThiZTktMDgxZjdhZWQwNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz8tlo0SoJTNmEmSsRQdhWeOMsDb2ytn+v0Q BIlzOg4OSK1h1c96q9MJqbaWdaX3Q6GxSyXP4clYptmjQvivNbubVFWGUYCdOkiK X5EVmnabNCt9nfAFMBt5i8Dx4mWq51S7VkHO0m+2aJB2Fa8xU20Un+Pz00i/GHnD tXlgzbOjrjKYizbIod/qRLuaBcbLAgR8mFpeFnjygIwTAWwm2gH6/LFoIocN5NtT j881M6EqtFffgCNUkmSCE3V/5TieTX+KAZGDRrjeIlVigNC5JzaDNQ6jRcjFMiU4 U33BRgX7pzztN8h1HR5hdVPyNyna6wEQ5rG8rRtz6UULh0iwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBpxLyrCi2xbPD6SerN1323OQ+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4NzQ3NmUtNjU4Ny0z MmY4LTllMjUtZmY2NzFmNWM5NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9Rj3OntZyfq0nztDyX98g0ICA4U4iTeni3YzHMDaZxvONAIrAZmMfh Dg6lkm1gOm0PWrBBs7Qn60onA0Lpv3PKEgTnHcB8a+G70gDgpp45mA9/ev2snmM0 l9UyD3qpleuNx+TynAwgMuIM3xRF7065RPEee3vjLLrmO5D+dckB7fUTRtgwfXbA nl21DgL7jBveCM6qgWduR/riUx1W/TYLsXKh9atv271mbBip/54GtBXL256kF4hq HQou+y/jTRbvqgWu6a4Og7ppYngk8UXfOljhpsFHd31kkt0xd4JPN4H4oBtUOih+ UmgXzGXCMVOFV30GzSpDIGWeoxGtRjw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:45 2025 by rpki-client