$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b01f4920-154a-3b52-8dca-b226e22b9fcf.roa File: b01f4920-154a-3b52-8dca-b226e22b9fcf.roa (raw, json) Hash identifier: yfJlT9vXks5OTDk08poZuCXk569tbdAAO2AccdP6Rt0= Subject key identifier: 8F:E6:9A:06:90:75:AC:66:41:B8:31:2D:C1:0C:0B:58:8B:2D:D7:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584890760FC227995DD5134A4280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b01f4920-154a-3b52-8dca-b226e22b9fcf.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.195.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:0f:c2:27:99:5d:d5:13:4a:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=ca435c64-0f63-467a-9780-26940bc26286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:9b:7a:54:7c:d4:06:9f:e0:5b:d4:b8:2d: 41:4c:1b:c4:10:14:8c:22:68:66:d9:3a:da:6a:a5: 4d:ee:12:39:0a:15:61:dd:1a:76:bb:b5:20:00:a3: 52:be:73:b1:c4:9e:fe:ee:64:3e:73:20:99:d1:97: 0d:c8:8c:2c:bc:26:96:aa:31:d2:01:64:c5:46:4d: 94:7c:b6:8b:27:28:22:84:04:dd:67:77:18:60:d7: 93:ef:4f:4c:dd:7c:7c:aa:7a:57:58:cf:46:0e:1d: 1e:93:f9:28:59:a2:ae:0b:ad:0a:55:39:65:e6:6a: 36:0f:98:49:22:a7:00:c6:30:22:d0:82:03:ef:37: 49:05:b4:97:84:b2:88:b6:7a:47:b0:6c:52:93:a5: af:88:52:ba:d2:3d:93:fa:d4:53:b3:ae:45:13:92: 6d:37:62:7a:7a:29:3f:7c:e3:94:5f:15:49:45:05: 51:4c:c5:c2:86:d3:d0:89:db:97:5d:5b:09:f9:0c: 0b:fe:42:04:1a:87:6f:94:45:fd:23:c6:06:12:74: 8d:f6:e1:49:2a:c1:39:bb:c5:97:06:a5:d8:40:69: 86:56:3b:ed:ca:33:9a:8b:16:68:2f:c9:aa:2c:42: 77:f7:c0:9a:53:07:9f:6a:19:ce:bf:c8:e0:87:dc: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E6:9A:06:90:75:AC:66:41:B8:31:2D:C1:0C:0B:58:8B:2D:D7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b01f4920-154a-3b52-8dca-b226e22b9fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0e:ad:3f:fe:90:16:71:0d:cd:6b:2b:60:3a:2a:f5:b1:c5: 12:47:7e:73:0f:86:44:fb:20:11:46:89:09:95:9d:51:96:be: f4:57:06:3f:7c:12:08:b3:33:3f:98:63:07:d9:78:aa:96:65: fa:c8:5c:b8:5a:5a:b1:9d:1b:be:9d:04:c3:58:e2:dd:c2:53: e4:79:4c:88:eb:35:c1:af:0d:69:0f:a9:ef:1c:2d:c4:74:c6: 6f:71:7f:d4:ab:1f:ea:c2:22:42:ad:be:f2:1a:bc:dc:e3:cd: fc:5f:20:bd:d9:0f:1b:7d:65:d0:af:67:d9:bf:a4:03:d0:fc: 5f:91:ce:6e:2e:71:5d:4e:8d:0c:61:54:28:88:72:24:4a:e6: 33:16:3b:83:28:ec:06:56:a5:c4:98:b8:b2:06:66:ef:ad:96: 6d:08:a5:7f:09:0f:89:8a:dd:24:8d:e4:e1:f2:86:48:6d:5b: 53:79:e4:c8:11:4e:b4:8a:b3:de:b9:04:73:3d:38:9f:25:94: b7:d0:62:9a:e2:0a:a0:e1:10:17:df:93:fb:63:79:78:17:b4: 5b:7d:23:ab:b3:d3:dd:f7:d6:29:cb:1d:48:ff:a8:c4:79:a6: d7:45:89:b5:b1:9d:41:89:0e:39:75:2a:b2:d6:32:d0:fe:12: 1a:b1:78:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdg/CJ5ld1RNKQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk Y2E0MzVjNjQtMGY2My00NjdhLTk3ODAtMjY5NDBiYzI2Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqGbelR81Aaf4FvUuC1BTBvEEBSMImhm2Tra aqVN7hI5ChVh3Rp2u7UgAKNSvnOxxJ7+7mQ+cyCZ0ZcNyIwsvCaWqjHSAWTFRk2U fLaLJygihATdZ3cYYNeT709M3Xx8qnpXWM9GDh0ek/koWaKuC60KVTll5mo2D5hJ IqcAxjAi0IID7zdJBbSXhLKItnpHsGxSk6WviFK60j2T+tRTs65FE5JtN2J6eik/ fOOUXxVJRQVRTMXChtPQiduXXVsJ+QwL/kIEGodvlEX9I8YGEnSN9uFJKsE5u8WX BqXYQGmGVjvtyjOaixZoL8mqLEJ398CaUwefahnOv8jgh9zttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/mmgaQdaxmQbgxLcEMC1iLLdeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjAxZjQ5MjAtMTU0YS0z YjUyLThkY2EtYjIyNmUyMmI5ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8OEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcOrT/+kBZxDc1rK2A6KvWxxRJHfnMPhkT7IBFGiQmVnVGWvvRXBj98 EgizMz+YYwfZeKqWZfrIXLhaWrGdG76dBMNY4t3CU+R5TIjrNcGvDWkPqe8cLcR0 xm9xf9SrH+rCIkKtvvIavNzjzfxfIL3ZDxt9ZdCvZ9m/pAPQ/F+Rzm4ucV1OjQxh VCiIciRK5jMWO4Mo7AZWpcSYuLIGZu+tlm0IpX8JD4mK3SSN5OHyhkhtW1N55MgR TrSKs965BHM9OJ8llLfQYpriCqDhEBffk/tjeXgXtFt9I6uz09331inLHUj/qMR5 ptdFibWxnUGJDjl1KrLWMtD+EhqxeDY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:34 2025 by rpki-client