$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2408e70-e77a-3e78-b062-0637a6437808.roa File: b2408e70-e77a-3e78-b062-0637a6437808.roa (raw, json) Hash identifier: Da2Kt/mIFyLuhyw8R0u5SXFWIFC9EqcqCEfr2wSsVf0= Subject key identifier: AC:85:50:7C:FE:3A:44:1F:D9:A0:26:3D:16:07:E1:4C:E2:CD:AC:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6F484CC63125E07E3280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2408e70-e77a-3e78-b062-0637a6437808.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 55644 IP address blocks: 23.199.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6f:48:4c:c6:31:25:e0:7e:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=c93a9e05-3241-42a6-8f14-861e0f23d24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:b4:01:10:09:ad:f5:1c:3b:01:84:a3:ac: 93:b6:5d:f2:2c:db:4c:c3:62:fd:56:57:95:8c:94: 61:a7:8e:fc:93:46:64:af:30:54:2f:46:d1:ad:e6: e7:54:5d:af:c8:e8:5e:0d:17:0b:13:98:49:a1:64: 40:f1:6b:f8:68:49:87:ea:3b:b3:cc:1a:6a:88:b7: 80:29:fe:e2:95:50:14:63:ea:cd:61:f4:07:f0:cf: 42:11:35:90:c4:92:1b:bb:bb:ff:ba:ac:bc:a0:c4: e8:bc:79:db:7f:e8:18:53:33:f1:87:b6:78:15:35: 41:7d:50:b5:bf:c1:71:b1:20:b4:fe:12:ea:ab:ab: 65:02:8d:b4:8f:91:6a:22:98:0b:c1:cc:2c:91:a6: a2:6d:e9:1f:8b:2e:84:c5:38:47:02:37:74:be:77: 29:5b:ba:44:9e:3b:71:d5:e2:49:96:5b:7f:e5:ef: f3:e6:64:92:19:90:9a:df:58:76:65:43:bb:96:c5: b1:64:ca:28:d9:eb:34:a1:fb:78:d0:70:cd:fc:63: 2a:c5:7a:30:eb:c6:3b:e0:27:b2:94:b7:39:e8:b5: f5:1d:48:85:5d:a3:d4:2e:2d:26:fb:be:00:fe:53: 31:51:1d:f6:90:d1:f6:92:6c:e4:e5:5b:6d:f2:59: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:50:7C:FE:3A:44:1F:D9:A0:26:3D:16:07:E1:4C:E2:CD:AC:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2408e70-e77a-3e78-b062-0637a6437808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:59:45:23:50:e0:af:63:d7:5a:f2:80:f9:a9:ce:35:60:f8: f2:11:9c:20:24:a7:d2:24:1e:01:6d:5c:99:f8:2f:ff:5f:33: 08:b2:c2:be:1b:69:27:6b:40:87:25:32:25:d0:c3:fc:7b:2e: 9d:47:2b:ce:59:44:17:42:24:22:e8:3a:d0:82:64:66:88:eb: b5:52:86:97:58:c6:93:02:73:7c:1d:94:e9:55:60:87:eb:3e: f2:11:bb:71:02:24:1b:f9:1f:21:7a:cf:c4:af:da:50:22:45: d9:05:0c:ed:d2:ea:81:e8:0c:1c:2e:20:ae:95:2b:5d:e2:4f: 46:5a:96:ab:11:fc:f4:0d:6a:db:39:44:91:1b:82:e8:d8:ae: c2:28:9c:66:ff:a5:53:8c:7f:ff:08:60:a5:4e:3d:e4:1f:b8: c7:ba:ea:96:84:f2:4c:15:92:a9:d2:6e:bc:87:2c:ac:7b:22: 26:0b:c9:d6:ce:24:89:6a:56:3d:15:d0:75:fd:63:b6:5e:8c: 85:44:d0:e1:30:1f:47:16:37:9a:77:6a:84:13:73:c8:3d:26: 9f:ec:4b:bd:1e:2b:29:41:cd:e4:50:77:72:8e:52:e4:6a:79: 9c:9c:fa:99:c5:60:e0:6b:0b:60:e3:82:03:8f:b1:28:10:46: 93:3f:b0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy29ITMYxJeB+MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk YzkzYTllMDUtMzI0MS00MmE2LThmMTQtODYxZTBmMjNkMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wy0ARAJrfUcOwGEo6yTtl3yLNtMw2L9VleV jJRhp478k0ZkrzBUL0bRrebnVF2vyOheDRcLE5hJoWRA8Wv4aEmH6juzzBpqiLeA Kf7ilVAUY+rNYfQH8M9CETWQxJIbu7v/uqy8oMTovHnbf+gYUzPxh7Z4FTVBfVC1 v8FxsSC0/hLqq6tlAo20j5FqIpgLwcwskaaibekfiy6ExThHAjd0vncpW7pEnjtx 1eJJllt/5e/z5mSSGZCa31h2ZUO7lsWxZMoo2es0oft40HDN/GMqxXow68Y74Cey lLc56LX1HUiFXaPULi0m+74A/lMxUR32kNH2kmzk5Vtt8lkmIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyFUHz+OkQf2aAmPRYH4UzizaxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI0MDhlNzAtZTc3YS0z ZTc4LWIwNjItMDYzN2E2NDM3ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5ZRSNQ4K9j11rygPmpzjVg+PIRnCAkp9IkHgFtXJn4L/9fMwiywr4b aSdrQIclMiXQw/x7Lp1HK85ZRBdCJCLoOtCCZGaI67VShpdYxpMCc3wdlOlVYIfr PvIRu3ECJBv5HyF6z8Sv2lAiRdkFDO3S6oHoDBwuIK6VK13iT0ZalqsR/PQNats5 RJEbgujYrsIonGb/pVOMf/8IYKVOPeQfuMe66paE8kwVkqnSbryHLKx7IiYLydbO JIlqVj0V0HX9Y7ZejIVE0OEwH0cWN5p3aoQTc8g9Jp/sS70eKylBzeRQd3KOUuRq eZyc+pnFYOBrC2DjggOPsSgQRpM/sJ4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:35 2025 by rpki-client