$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1453884-5b34-31d7-820d-d9515e8b48ab.roa File: b1453884-5b34-31d7-820d-d9515e8b48ab.roa (raw, json) Hash identifier: y+vACKHP1zgUMb2GVUJhtisypKaYWQaK79I3i4x4Vrk= Subject key identifier: B2:BC:A2:35:72:5B:6F:A5:64:1E:C3:57:A5:A5:B9:B2:8B:FB:4C:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DA7E3E76783352A83480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1453884-5b34-31d7-820d-d9515e8b48ab.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 52376 IP address blocks: 23.204.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:da:7e:3e:76:78:33:52:a8:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=59d56106-f7e4-45a1-ae64-c6d594edbdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:52:c4:89:06:ca:5c:9c:43:fc:26:23:a1: 75:13:4c:e4:2c:54:7e:e6:6c:d7:39:10:9b:bd:ce: c2:30:12:b7:86:a7:67:df:c6:e8:95:12:4d:9e:97: ae:e6:88:0d:54:d8:98:27:2a:42:93:fe:0a:06:0d: 4b:7c:11:78:56:3a:d5:84:9c:39:28:f8:3b:cc:b4: 66:a9:a7:ee:a8:15:d8:ca:6c:47:fe:b3:e8:8d:1f: 90:3c:c9:4e:ef:f5:e7:d7:fb:dd:c5:35:03:c9:20: 43:5e:90:1b:5a:36:e0:69:f6:be:a1:38:3a:f0:2f: a8:01:f3:b4:5d:53:da:ee:eb:9c:7b:47:bd:f1:4a: b9:a4:08:97:41:11:e6:2d:75:73:0d:e0:05:47:e8: c4:b0:47:4b:8e:95:90:66:53:d8:39:f9:58:b4:18: ed:20:51:0c:86:d3:88:ae:db:7d:74:9e:59:44:b2: 54:e5:ae:d7:b7:3b:66:bc:26:fe:9d:06:50:c8:9d: 53:66:3c:20:c5:19:cb:5d:8b:fd:06:59:06:4d:ec: e5:45:d5:2f:2d:3f:8d:4e:05:7b:25:08:a0:08:02: 29:39:96:ef:ea:6d:ab:c5:e1:dc:08:5c:f7:c1:ec: 17:3a:9c:6a:96:58:2b:c0:19:eb:0d:6a:95:aa:a1: f6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:A2:35:72:5B:6F:A5:64:1E:C3:57:A5:A5:B9:B2:8B:FB:4C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1453884-5b34-31d7-820d-d9515e8b48ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c3:89:6c:dd:c2:77:21:21:77:ac:a2:17:d2:54:ca:3e:26: 04:f9:d6:4b:31:88:a0:64:4a:13:4f:08:c0:16:c8:f3:91:e2: 18:e1:dd:47:34:d5:48:20:c9:e3:7c:14:41:a9:04:e4:29:9e: 24:82:ee:c0:e4:47:7e:03:a2:c9:32:72:89:70:eb:22:89:08: 7d:3f:4b:3d:07:52:57:5a:b4:fa:98:18:34:56:f0:98:2b:a2: e7:bf:21:e6:00:57:68:3e:2a:ef:d9:38:1c:e5:af:26:55:9d: 65:2b:b1:a4:89:8e:23:4c:5e:be:a3:d5:4d:97:f1:50:5b:02: 3f:80:ab:0c:21:7d:6c:bd:10:8d:c5:a0:5a:bd:25:ac:7b:ec: a9:81:dd:16:af:de:73:67:c6:3e:80:01:57:d7:7e:87:9e:2a: 04:46:97:f8:ef:06:c0:b7:9b:d7:df:ef:88:61:37:00:98:c6: 58:c9:21:bf:29:b0:41:27:6a:70:ec:e2:40:34:19:b8:22:81: ab:c1:96:9c:34:62:70:4d:a0:a1:ad:84:74:f2:c9:f2:58:f1: a9:da:7e:48:09:9a:40:f7:77:6f:f0:fc:78:81:35:07:bd:87: 8c:e3:15:5e:61:58:72:2c:1b:ca:61:d3:70:26:02:c2:5e:b7: e7:bc:b0:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Np+PnZ4M1KoNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NTlkNTYxMDYtZjdlNC00NWExLWFlNjQtYzZkNTk0ZWRiZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl11SxIkGylycQ/wmI6F1E0zkLFR+5mzXORCb vc7CMBK3hqdn38bolRJNnpeu5ogNVNiYJypCk/4KBg1LfBF4VjrVhJw5KPg7zLRm qafuqBXYymxH/rPojR+QPMlO7/Xn1/vdxTUDySBDXpAbWjbgafa+oTg68C+oAfO0 XVPa7uuce0e98Uq5pAiXQRHmLXVzDeAFR+jEsEdLjpWQZlPYOflYtBjtIFEMhtOI rtt9dJ5ZRLJU5a7XtztmvCb+nQZQyJ1TZjwgxRnLXYv9BlkGTezlRdUvLT+NTgV7 JQigCAIpOZbv6m2rxeHcCFz3wewXOpxqllgrwBnrDWqVqqH2qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK8ojVyW2+lZB7DV6WlubKL+0xGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE0NTM4ODQtNWIzNC0z MWQ3LTgyMGQtZDk1MTVlOGI0OGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjDiWzdwnchIXesohfSVMo+JgT51ksxiKBkShNPCMAWyPOR4hjh3Uc0 1UggyeN8FEGpBOQpniSC7sDkR34Doskycolw6yKJCH0/Sz0HUldatPqYGDRW8Jgr oue/IeYAV2g+Ku/ZOBzlryZVnWUrsaSJjiNMXr6j1U2X8VBbAj+AqwwhfWy9EI3F oFq9Jax77KmB3Rav3nNnxj6AAVfXfoeeKgRGl/jvBsC3m9ff74hhNwCYxljJIb8p sEEnanDs4kA0GbgigavBlpw0YnBNoKGthHTyyfJY8anafkgJmkD3d2/w/HiBNQe9 h4zjFV5hWHIsG8ph03AmAsJet+e8sO8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:26:36 2025 by rpki-client