$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0dab203-53a8-3298-bcb4-72d48f9652b2.roa File: b0dab203-53a8-3298-bcb4-72d48f9652b2.roa (raw, json) Hash identifier: DRqneS+GGRatldkG3wR6N9zNzFwDSvQBmxxj2TtkDto= Subject key identifier: 77:D4:05:BB:F5:5C:67:FC:F5:B6:C7:5D:D8:29:81:BC:6D:34:DF:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488F1088842ECC914ED277AA60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0dab203-53a8-3298-bcb4-72d48f9652b2.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.62.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:88:84:2e:cc:91:4e:d2:77:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=9a198473-c53a-42a2-a9e1-dde938118154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:6f:3c:ce:27:7b:00:77:8c:41:dc:ab:14: 1a:03:88:57:a3:e4:6a:7c:4e:1e:7d:29:a4:48:a3: 39:24:56:8b:7f:f2:7a:46:b5:8e:55:02:7a:6e:1c: dc:f0:ba:85:bf:5b:e9:93:4f:33:43:4f:bb:01:a3: a7:5f:20:cb:77:0d:5d:7e:fa:6e:1b:f8:30:76:0f: 8d:dd:ac:34:64:70:c8:52:ff:6b:cf:8b:08:06:2b: b5:dd:ee:01:4f:3c:26:65:d8:e8:6a:75:33:cf:58: 2d:6d:89:af:d1:bf:e9:6a:39:c8:17:a3:ea:f9:8c: 55:14:77:a4:bd:ab:02:fd:6f:90:df:a1:5d:04:33: 44:63:0a:5f:fa:c0:77:79:c6:0e:47:f0:96:ae:4e: f2:23:f5:53:9e:ad:a3:af:cf:49:43:8f:d3:86:9e: 94:7b:60:29:37:39:18:1b:ee:7f:e6:8a:75:3e:99: 19:b5:5c:79:53:94:f0:39:19:cd:b1:9b:27:80:05: 5a:d2:d6:42:9e:e3:c5:0b:3f:c8:52:b3:53:a7:84: 5a:4c:36:9a:22:3e:31:d4:be:fc:12:59:ff:96:15: d8:a5:09:77:d1:37:5f:51:ce:3f:29:d7:f6:66:d8: 6d:73:ed:74:6f:42:c2:4f:aa:82:c6:54:f3:84:b9: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D4:05:BB:F5:5C:67:FC:F5:B6:C7:5D:D8:29:81:BC:6D:34:DF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0dab203-53a8-3298-bcb4-72d48f9652b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:9e:fd:d8:d7:61:99:97:20:fe:8f:e7:21:4e:86:bb:dd: 00:56:6c:0a:fa:e0:98:45:33:93:38:41:95:53:46:91:b7:13: 20:2e:32:9c:00:0c:4f:63:6d:e0:f9:63:a1:a8:76:c0:5f:83: 39:64:bb:99:a0:cb:62:23:dc:c4:9e:3a:b9:b5:bc:2c:9a:7e: 2f:79:2e:a1:29:3a:0c:d0:6b:2a:2a:ea:73:71:29:75:97:d7: 91:c4:91:f9:a9:e0:0d:81:56:a6:56:73:33:53:29:49:f6:74: fc:ba:67:0e:2b:4c:eb:26:99:cb:3b:0b:52:a5:bb:12:1d:7d: 32:ff:79:a6:25:a3:82:7a:e1:da:ad:c0:4e:51:37:d2:26:ab: 5a:ef:43:9c:a9:35:e6:57:1c:1d:be:bc:4c:1f:c0:38:98:35: 28:13:4a:f5:7f:27:47:ce:6c:f2:a1:af:77:23:8f:83:f2:1b: c8:3a:e6:69:0d:a8:86:17:ad:54:51:44:82:46:69:fa:b4:7c: 6e:dc:e2:ac:82:b2:a4:75:b7:17:89:d9:1c:d5:0d:33:d4:36: 97:24:cd:52:a0:ee:7d:0b:37:4f:a7:18:c5:8d:fb:6a:c6:c2: 11:4b:c2:cf:22:dd:51:fe:74:39:c4:83:09:13:1e:36:8a:a6: 8f:55:09:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIiELsyRTtJ3qmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk OWExOTg0NzMtYzUzYS00MmEyLWE5ZTEtZGRlOTM4MTE4MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT9vPM4newB3jEHcqxQaA4hXo+RqfE4efSmk SKM5JFaLf/J6RrWOVQJ6bhzc8LqFv1vpk08zQ0+7AaOnXyDLdw1dfvpuG/gwdg+N 3aw0ZHDIUv9rz4sIBiu13e4BTzwmZdjoanUzz1gtbYmv0b/pajnIF6Pq+YxVFHek vasC/W+Q36FdBDNEYwpf+sB3ecYOR/CWrk7yI/VTnq2jr89JQ4/Thp6Ue2ApNzkY G+5/5op1PpkZtVx5U5TwORnNsZsngAVa0tZCnuPFCz/IUrNTp4RaTDaaIj4x1L78 Eln/lhXYpQl30TdfUc4/Kdf2Zthtc+10b0LCT6qCxlTzhLkBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfUBbv1XGf89bbHXdgpgbxtNN8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBkYWIyMDMtNTNhOC0z Mjk4LWJjYjQtNzJkNDhmOTY1MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxCnv3Y12GZlyD+j+chToa73QBWbAr64JhFM5M4QZVTRpG3EyAuMpwA DE9jbeD5Y6GodsBfgzlku5mgy2Ij3MSeOrm1vCyafi95LqEpOgzQayoq6nNxKXWX 15HEkfmp4A2BVqZWczNTKUn2dPy6Zw4rTOsmmcs7C1KluxIdfTL/eaYlo4J64dqt wE5RN9Imq1rvQ5ypNeZXHB2+vEwfwDiYNSgTSvV/J0fObPKhr3cjj4PyG8g65mkN qIYXrVRRRIJGafq0fG7c4qyCsqR1txeJ2RzVDTPUNpckzVKg7n0LN0+nGMWN+2rG whFLws8i3VH+dDnEgwkTHjaKpo9VCdk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:17 2025 by rpki-client