$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa File: ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa (raw, json) Hash identifier: MJ6LQveTzm5D5T3Tsf/fWm1m1tuyFQcnmJT+kUS1Rgs= Subject key identifier: B6:9D:6A:70:A0:8D:99:01:A4:B0:37:2D:20:49:6F:19:2C:E9:60:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BAA9C7D99FB199FBBAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.221.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:aa:9c:7d:99:fb:19:9f:bb:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=52b9ed1b-5bf9-42ac-85dd-23ca6a208a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:2c:95:7d:02:df:59:b1:02:38:d7:b9:47: e0:0d:7e:73:03:12:5d:a9:d6:e3:e2:0f:fb:ee:af: 74:7d:44:8f:1d:b3:59:49:98:cf:c5:85:8d:74:c6: 53:fc:e4:43:39:35:fd:97:38:c9:f1:42:e5:a7:fa: 72:33:48:c3:94:df:4d:5b:1d:82:8d:38:30:33:56: fd:cd:63:2f:d2:86:24:68:9f:63:95:7e:26:a7:41: bf:27:10:1f:52:f1:f1:9f:f2:28:24:12:da:54:5c: af:30:dc:b2:f3:7f:87:be:b6:ab:82:4d:6b:95:6f: 47:dd:c4:1c:a7:6b:19:0e:49:68:3d:0e:da:86:0d: 73:fb:5e:a5:65:c9:b0:58:ac:8d:31:fc:58:05:ea: c8:52:2d:a1:ac:4b:90:69:69:60:74:c2:58:70:20: b9:16:af:89:60:a1:51:77:f0:a7:d6:67:bd:f5:b9: 11:29:90:a8:32:99:de:bc:dc:13:0f:2a:84:06:22: 99:17:f4:dd:26:91:52:f5:67:8e:0f:0e:74:5b:05: 62:99:b9:d5:9c:f2:ed:34:98:09:e2:5a:78:13:44: fa:1d:9f:62:46:5f:6b:a8:26:c5:67:8f:44:1f:68: d0:cd:e4:ab:6b:22:3c:ca:e2:21:77:02:02:8b:4b: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:6A:70:A0:8D:99:01:A4:B0:37:2D:20:49:6F:19:2C:E9:60:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:17:a7:54:98:de:ed:f3:c7:be:08:73:bb:8d:09:1b:66:ac: f9:e8:7c:f9:92:39:d7:78:f1:2c:a5:03:e3:3f:f6:b0:28:2c: 58:80:2d:e7:aa:ae:aa:bd:a0:cb:5d:c4:8e:62:db:67:93:51: 66:24:fe:b1:14:44:9c:03:14:93:8b:3f:8a:b2:76:e9:bf:af: ec:5d:44:f4:e5:7e:63:67:15:97:f5:7c:42:e5:f2:bb:ec:6c: 9f:24:c6:5d:e0:80:5a:94:1e:5a:7d:3f:6a:e1:d8:47:89:9d: 58:92:d1:d0:70:9d:52:51:4e:bf:1e:80:5d:5b:34:35:0f:fc: fb:34:2b:6a:4c:02:20:49:3a:da:93:9e:8a:4c:df:aa:9d:31: 72:78:74:55:0b:df:2e:25:c3:5c:59:be:62:e6:fe:35:8c:89: 72:8e:ca:07:a4:21:07:02:bc:b6:26:c0:d6:f0:84:1b:f7:59: 92:62:8a:e1:5c:85:a8:20:59:08:d6:6a:30:a1:73:5b:2d:86: dc:9f:74:bc:ba:f8:63:37:88:4d:0d:78:68:b7:43:48:23:da: ec:85:6f:7c:76:41:c8:e4:e0:3e:c2:48:5c:2c:34:6f:e9:d8: 90:1b:aa:bc:63:98:4e:e0:33:b8:ca:4a:7a:80:46:54:1a:e4: 6c:d5:23:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6qcfZn7GZ+7rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NTJiOWVkMWItNWJmOS00MmFjLTg1ZGQtMjNjYTZhMjA4YTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdgslX0C31mxAjjXuUfgDX5zAxJdqdbj4g/7 7q90fUSPHbNZSZjPxYWNdMZT/ORDOTX9lzjJ8ULlp/pyM0jDlN9NWx2CjTgwM1b9 zWMv0oYkaJ9jlX4mp0G/JxAfUvHxn/IoJBLaVFyvMNyy83+Hvrargk1rlW9H3cQc p2sZDkloPQ7ahg1z+16lZcmwWKyNMfxYBerIUi2hrEuQaWlgdMJYcCC5Fq+JYKFR d/Cn1me99bkRKZCoMpnevNwTDyqEBiKZF/TdJpFS9WeODw50WwVimbnVnPLtNJgJ 4lp4E0T6HZ9iRl9rqCbFZ49EH2jQzeSrayI8yuIhdwICi0tF2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLadanCgjZkBpLA3LSBJbxks6WBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMyZDViYTktMGZlNi0z ZTRkLTk5M2MtMDM5ZjFlMTg2YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgXp1SY3u3zx74Ic7uNCRtmrPnofPmSOdd48SylA+M/9rAoLFiALeeq rqq9oMtdxI5i22eTUWYk/rEURJwDFJOLP4qydum/r+xdRPTlfmNnFZf1fELl8rvs bJ8kxl3ggFqUHlp9P2rh2EeJnViS0dBwnVJRTr8egF1bNDUP/Ps0K2pMAiBJOtqT nopM36qdMXJ4dFUL3y4lw1xZvmLm/jWMiXKOygekIQcCvLYmwNbwhBv3WZJiiuFc haggWQjWajChc1sthtyfdLy6+GM3iE0NeGi3Q0gj2uyFb3x2Qcjk4D7CSFwsNG/p 2JAbqrxjmE7gM7jKSnqARlQa5GzVI+Y= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:02 2025 by rpki-client