$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b393a606-75f4-3834-bed8-1175b735a1b9.roa File: b393a606-75f4-3834-bed8-1175b735a1b9.roa (raw, json) Hash identifier: 7/49mM4NPWr0vYamhq5XS83rPG0u9tl44fKb13zwd3g= Subject key identifier: 46:39:C9:E0:75:FC:14:DD:35:03:DD:F1:B3:70:C6:EB:CA:08:6D:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C583CC06922E18E97480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b393a606-75f4-3834-bed8-1175b735a1b9.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.194.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c5:83:cc:06:92:2e:18:e9:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=ec691d32-1079-491e-a4fb-e088bcd3ad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:79:61:a0:3d:75:f7:ff:3a:aa:1b:b6:04:00: b4:57:74:da:8e:70:da:e5:35:ed:3f:fd:a5:ee:e7: ca:0b:10:70:f7:3b:9c:fe:22:4c:41:c9:18:53:f4: 24:0b:89:39:69:3d:92:3c:c7:e3:da:1a:9d:a6:e0: 53:ab:55:9a:1b:d5:3a:46:cb:ba:1d:d9:70:7c:a4: f4:d7:3d:1a:13:52:b5:5b:70:70:2c:a9:83:37:e0: 5d:73:55:71:98:0b:ed:e0:50:c1:c0:36:1d:f2:a7: 92:a5:5e:2f:93:14:4b:c2:da:37:76:7e:ba:42:3b: 92:4a:3c:4b:9d:d7:1f:ad:7c:a2:91:b8:5d:76:a9: 5b:df:9c:f0:35:b4:a5:7b:32:d2:f2:fd:ea:7d:3d: 50:2d:7c:83:7a:4f:98:f5:7f:29:49:16:af:9b:91: 87:f4:37:bf:26:8e:4e:42:15:b3:7c:5d:c3:a5:16: 35:a6:72:26:01:23:e7:64:0c:d5:8d:16:df:52:10: e8:b0:b6:e1:e3:e7:eb:3e:78:0f:3b:8a:18:24:b3: 4e:6c:fb:bd:af:33:c7:8a:a8:bd:eb:e3:4e:70:d9: e6:63:53:db:d4:a6:86:81:9a:8f:5b:3a:8d:8f:f6: 78:cf:65:ac:ae:19:2e:9b:19:ce:e3:a0:71:1e:7c: eb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:39:C9:E0:75:FC:14:DD:35:03:DD:F1:B3:70:C6:EB:CA:08:6D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b393a606-75f4-3834-bed8-1175b735a1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5b:56:db:b5:ab:d0:6b:66:0f:81:53:f2:2e:3b:8a:d9:4f: a8:24:ca:49:73:bd:50:a4:14:ee:88:20:62:56:ad:c1:6e:a3: 87:7a:2a:cb:29:49:e3:2a:78:43:53:d5:0a:85:dc:ba:28:c8: 7e:b2:25:34:8e:63:cb:44:bf:e3:4c:46:da:1d:a1:44:dd:2f: 00:21:38:63:78:76:cb:20:13:41:f5:73:f9:7b:91:43:81:d8: 8a:72:c5:db:41:be:98:e2:ad:33:d2:bf:07:6f:70:d8:b0:a7: ea:b1:b2:84:44:47:84:b8:1b:2c:a4:63:e4:99:8d:31:db:39: 4e:5b:5b:fe:aa:eb:04:f1:9a:c5:4e:82:22:f0:ae:58:ae:28: b0:ef:33:13:15:7f:dc:bd:de:bb:ee:2e:57:57:f8:c0:04:42: 6c:d1:ac:70:af:fe:c6:c0:d1:45:24:3b:30:64:42:e7:bf:ce: 71:7a:a2:cd:05:ab:3a:0b:7a:0d:a6:6c:a6:df:e2:3a:38:8e: 56:b8:69:f2:ce:4b:e6:84:e5:19:28:13:f0:25:c2:4b:8b:f5: 1c:ee:b9:27:61:f9:87:b6:37:be:50:fc:5c:e4:c2:9f:f1:48: 91:ac:ae:81:4d:dd:ae:9e:95:8a:1b:6c:b5:7f:0f:50:64:11: 28:d0:70:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMWDzAaSLhjpdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZWM2OTFkMzItMTA3OS00OTFlLWE0ZmItZTA4OGJjZDNhZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXlhoD119/86qhu2BAC0V3TajnDa5TXtP/2l 7ufKCxBw9zuc/iJMQckYU/QkC4k5aT2SPMfj2hqdpuBTq1WaG9U6Rsu6HdlwfKT0 1z0aE1K1W3BwLKmDN+Bdc1VxmAvt4FDBwDYd8qeSpV4vkxRLwto3dn66QjuSSjxL ndcfrXyikbhddqlb35zwNbSlezLS8v3qfT1QLXyDek+Y9X8pSRavm5GH9De/Jo5O QhWzfF3DpRY1pnImASPnZAzVjRbfUhDosLbh4+frPngPO4oYJLNObPu9rzPHiqi9 6+NOcNnmY1Pb1KaGgZqPWzqNj/Z4z2WsrhkumxnO46BxHnzrUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY5yeB1/BTdNQPd8bNwxuvKCG1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjM5M2E2MDYtNzVmNC0z ODM0LWJlZDgtMTE3NWI3MzVhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8IAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdbVtu1q9BrZg+BU/IuO4rZT6gkyklzvVCkFO6IIGJWrcFuo4d6Kssp SeMqeENT1QqF3LooyH6yJTSOY8tEv+NMRtodoUTdLwAhOGN4dssgE0H1c/l7kUOB 2IpyxdtBvpjirTPSvwdvcNiwp+qxsoRER4S4GyykY+SZjTHbOU5bW/6q6wTxmsVO giLwrliuKLDvMxMVf9y93rvuLldX+MAEQmzRrHCv/sbA0UUkOzBkQue/znF6os0F qzoLeg2mbKbf4jo4jla4afLOS+aE5RkoE/AlwkuL9RzuuSdh+Ye2N75Q/Fzkwp/x SJGsroFN3a6elYobbLV/D1BkESjQcFM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:39 2025 by rpki-client