$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa File: b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa (raw, json) Hash identifier: eUQQCatd3bcIUZiRJqPeJrY1TVF7mw0pvIaMsCsc42k= Subject key identifier: 76:54:35:56:78:AC:2F:34:1A:99:4F:5A:50:95:D6:75:2E:ED:8B:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584887A337225C16C5572524EF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa Signing time: Mon 13 Jan 2025 10:09:52 +0000 ROA not before: Mon 13 Jan 2025 10:09:52 +0000 ROA not after: Sun 13 Apr 2025 09:09:52 +0000 asID: 16625 IP address blocks: 23.208.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:87:a3:37:22:5c:16:c5:57:25:24:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 13 10:09:52 2025 GMT Not After : Apr 13 09:09:52 2025 GMT Subject: CN=a3912651-b117-4781-ac58-c618e995d112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:fd:7c:a4:df:a3:79:b6:4c:0e:01:ea:86: c1:7f:ab:72:54:2e:fe:aa:90:7e:7a:c1:f8:df:a5: 1c:80:e8:6e:1a:6c:af:aa:af:36:da:00:b2:c0:67: 82:03:4c:67:e2:49:71:54:c0:6b:56:18:bc:4a:52: bd:2f:2c:c5:d8:61:b4:6c:cf:2f:68:31:a3:fe:09: db:d3:8a:1b:26:a9:e4:eb:3e:e1:0e:4d:df:b6:f5: 10:f5:a9:fe:47:2b:a0:3f:5c:6c:00:da:54:23:5f: 29:39:60:b7:b3:f1:c9:a2:af:76:cc:7e:80:03:9c: d2:38:8b:27:6d:1c:57:ad:fc:97:1c:57:3f:1b:b0: 3c:a6:05:92:76:ab:1c:22:45:35:8f:21:64:6a:9a: a9:48:dc:4b:e4:c5:32:cf:fb:fa:b4:e5:96:15:29: 27:dc:a7:d2:2c:f8:c9:73:c4:32:05:f1:b5:34:7e: f1:d5:22:dc:b2:12:5d:46:63:d6:a5:f7:f6:4b:b1: fd:d7:5f:4e:9e:f0:36:60:15:4d:8d:8a:60:e9:c7: 8d:3e:73:fe:13:95:74:a9:d0:a2:67:8b:5d:e1:c2: f2:ff:82:b5:2c:f5:4c:de:41:f2:58:c4:ec:c0:1b: 9c:c3:80:09:83:ad:48:f2:0f:5e:8d:44:da:2c:c4: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:54:35:56:78:AC:2F:34:1A:99:4F:5A:50:95:D6:75:2E:ED:8B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4f:27:59:4d:be:01:a1:44:fc:56:c8:68:e2:3f:84:2c:a5: d2:56:a0:34:da:49:6c:14:ab:24:7b:45:ca:af:5e:fb:12:c1: dd:ad:c9:7f:5e:33:d6:56:f4:2d:08:bc:c9:46:9f:db:cd:cb: 94:56:db:dc:7b:6f:f8:89:2c:7c:aa:91:84:bc:a2:ba:42:b4: d0:18:4e:4f:07:7c:5f:2e:75:80:64:98:16:8e:81:28:b6:ad: 6a:68:67:09:37:62:8e:da:5b:50:7b:13:33:52:af:b5:95:33: 31:b8:d0:de:74:3a:b7:91:4a:11:62:00:78:7e:a5:45:4b:c6: ea:31:f9:5b:43:88:1d:e9:32:5c:16:e2:93:a2:b7:47:7a:a0: 7b:60:96:a3:48:62:59:d5:79:c1:ea:a6:66:64:f3:eb:8e:cb: 92:de:79:5b:ac:c8:e8:11:07:aa:d8:b8:54:f6:5c:ae:90:3c: 81:b4:02:36:f4:6d:51:39:a2:e8:c0:c3:99:5e:e8:53:28:a0: d3:9f:e8:47:47:15:9a:e5:81:a1:6d:2e:73:0e:e0:b8:3c:b9: 3f:50:b1:9f:20:1b:02:00:eb:ed:39:53:f7:d2:ff:a4:68:c0: 89:1b:29:71:fd:92:4d:0c:a9:93:9e:57:a2:b9:07:78:27:48: 6a:61:73:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiHozciXBbFVyUk74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExMzEwMDk1MloXDTI1MDQxMzA5MDk1MlowLzEtMCsGA1UEAxMk YTM5MTI2NTEtYjExNy00NzgxLWFjNTgtYzYxOGU5OTVkMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRD9fKTfo3m2TA4B6obBf6tyVC7+qpB+esH4 36UcgOhuGmyvqq822gCywGeCA0xn4klxVMBrVhi8SlK9LyzF2GG0bM8vaDGj/gnb 04obJqnk6z7hDk3ftvUQ9an+RyugP1xsANpUI18pOWC3s/HJoq92zH6AA5zSOIsn bRxXrfyXHFc/G7A8pgWSdqscIkU1jyFkapqpSNxL5MUyz/v6tOWWFSkn3KfSLPjJ c8QyBfG1NH7x1SLcshJdRmPWpff2S7H9119OnvA2YBVNjYpg6ceNPnP+E5V0qdCi Z4td4cLy/4K1LPVM3kHyWMTswBucw4AJg61I8g9ejUTaLMTo5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZUNVZ4rC80GplPWlCV1nUu7Yv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYxY2EzNGEtYjEzNC0z YWVhLTg1ZTAtNGRjOTVlMzRhZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFPJ1lNvgGhRPxWyGjiP4QspdJWoDTaSWwUqyR7RcqvXvsSwd2tyX9e M9ZW9C0IvMlGn9vNy5RW29x7b/iJLHyqkYS8orpCtNAYTk8HfF8udYBkmBaOgSi2 rWpoZwk3Yo7aW1B7EzNSr7WVMzG40N50OreRShFiAHh+pUVLxuox+VtDiB3pMlwW 4pOit0d6oHtglqNIYlnVecHqpmZk8+uOy5LeeVusyOgRB6rYuFT2XK6QPIG0Ajb0 bVE5oujAw5le6FMooNOf6EdHFZrlgaFtLnMO4Lg8uT9QsZ8gGwIA6+05U/fS/6Ro wIkbKXH9kk0MqZOeV6K5B3gnSGphc9U= -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:56 2025 by rpki-client