$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaff624a-7bc4-36d9-ab33-f9400e20c551.roa File: aaff624a-7bc4-36d9-ab33-f9400e20c551.roa (raw, json) Hash identifier: V46WlqqLCuIdCUo1nYsKieoTerudaTCTcwZt/XpRdOU= Subject key identifier: FC:DB:B8:97:E2:96:BD:37:95:AC:73:A2:AA:F4:52:06:FD:B3:C9:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400CB58342167EEA76C0880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaff624a-7bc4-36d9-ab33-f9400e20c551.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.197.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:cb:58:34:21:67:ee:a7:6c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=98d6ee7f-31ac-4e21-aeba-a123455c2539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:45:f6:79:74:e3:ce:41:2d:cd:f9:ec:bd: 43:6b:6e:12:47:f4:56:94:ae:f7:9c:4e:02:36:da: cc:dc:d3:0d:30:ee:bc:8c:d7:31:cb:7b:2b:4f:23: 24:ad:58:48:04:88:e7:e8:1f:56:10:79:ea:7e:81: 5b:b0:42:98:2d:23:18:32:77:5b:ba:fb:57:68:8a: ab:28:a8:65:5f:17:b7:8a:01:8a:ee:98:71:52:ab: 02:99:04:f1:b4:a7:f9:4d:72:dd:d3:d5:a8:74:e3: 7e:a5:0b:1c:ed:46:a1:f3:b7:96:7a:3b:eb:9e:d9: 35:55:b3:58:47:e6:30:a3:af:e2:6a:71:db:c7:af: d5:52:03:9b:60:37:af:e5:49:c9:d5:c3:07:8a:55: e9:12:ef:31:f4:11:43:df:26:94:6b:96:08:6a:17: c1:2b:45:14:70:5f:a0:16:45:5a:97:89:65:2a:df: 90:7e:de:82:b0:fb:ca:93:bf:82:84:9d:73:9d:96: 70:02:1c:61:70:2d:81:af:f3:39:6b:8d:fb:b5:26: 46:f8:21:ae:8b:85:19:72:09:46:b3:8f:a9:66:e8: 96:b3:6f:b3:68:10:da:e0:7e:26:ae:b7:72:b0:3b: 02:70:38:56:94:ab:63:d9:ab:ef:35:4f:12:6e:a6: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DB:B8:97:E2:96:BD:37:95:AC:73:A2:AA:F4:52:06:FD:B3:C9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaff624a-7bc4-36d9-ab33-f9400e20c551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:76:78:97:d9:34:8a:a2:a3:37:46:32:51:df:d1:6a:5b:35: b3:5a:22:5a:3d:21:dd:ee:f4:66:5e:85:24:6a:d8:ac:82:08: 11:c1:98:08:b3:50:fe:b9:e8:54:20:17:ee:b0:9d:3c:d2:44: 0f:32:c3:83:c0:58:7b:93:a4:78:a6:de:7d:ab:6e:90:29:05: 6f:e2:18:22:0c:c7:6f:23:cc:bb:23:76:7f:78:9c:fc:14:63: 02:cb:d6:1b:2e:60:e5:c9:a8:7b:5d:c9:fc:0d:0b:02:69:6e: 47:d0:b5:f8:8e:9b:57:84:b3:4e:2f:60:6b:1f:1e:b8:63:87: c8:2d:3e:91:81:9e:43:40:43:51:28:cc:48:86:fd:73:c8:9f: a7:cd:7b:41:9e:37:ee:b7:9b:b4:64:1c:52:fb:e3:2c:d8:71: a3:c9:8b:25:7b:7c:6e:3b:82:61:b6:90:94:17:59:42:b9:30: ec:8a:f0:ff:38:3e:68:75:e9:52:ed:a7:aa:a7:70:b3:4b:18: ec:9c:e0:7c:cd:c2:bb:c8:28:6c:9c:d6:c6:1d:cc:06:84:c4: 4d:66:0d:97:62:76:36:fe:45:20:c6:fb:dc:4b:35:39:60:49: c1:d2:f1:9e:7e:d1:ea:c8:09:a8:fa:37:5a:9a:01:91:48:8c: 99:5e:ff:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMtYNCFn7qdsCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OThkNmVlN2YtMzFhYy00ZTIxLWFlYmEtYTEyMzQ1NWMyNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhphF9nl0485BLc357L1Da24SR/RWlK73nE4C NtrM3NMNMO68jNcxy3srTyMkrVhIBIjn6B9WEHnqfoFbsEKYLSMYMndbuvtXaIqr KKhlXxe3igGK7phxUqsCmQTxtKf5TXLd09WodON+pQsc7Uah87eWejvrntk1VbNY R+Ywo6/ianHbx6/VUgObYDev5UnJ1cMHilXpEu8x9BFD3yaUa5YIahfBK0UUcF+g FkVal4llKt+Qft6CsPvKk7+ChJ1znZZwAhxhcC2Br/M5a437tSZG+CGui4UZcglG s4+pZuiWs2+zaBDa4H4mrrdysDsCcDhWlKtj2avvNU8SbqZ4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzbuJfilr03laxzoqr0Ugb9s8nEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFmZjYyNGEtN2JjNC0z NmQ5LWFiMzMtZjk0MDBlMjBjNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8VkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR2eJfZNIqiozdGMlHf0WpbNbNaIlo9Id3u9GZehSRq2KyCCBHBmAiz UP656FQgF+6wnTzSRA8yw4PAWHuTpHim3n2rbpApBW/iGCIMx28jzLsjdn94nPwU YwLL1hsuYOXJqHtdyfwNCwJpbkfQtfiOm1eEs04vYGsfHrhjh8gtPpGBnkNAQ1Eo zEiG/XPIn6fNe0GeN+63m7RkHFL74yzYcaPJiyV7fG47gmG2kJQXWUK5MOyK8P84 Pmh16VLtp6qncLNLGOyc4HzNwrvIKGyc1sYdzAaExE1mDZdidjb+RSDG+9xLNTlg ScHS8Z5+0erICaj6N1qaAZFIjJle/10= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:38 2025 by rpki-client