$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8bd8aa4-0606-3520-b803-2b9651f8910d.roa File: b8bd8aa4-0606-3520-b803-2b9651f8910d.roa (raw, json) Hash identifier: u221rjIX0K3cg/6u9Ik0DoINPMAIdjtBXuN8kb+KhlY= Subject key identifier: 04:A6:D7:F3:F1:96:97:A2:A4:D4:D6:B1:41:0E:AD:AD:F4:64:F7:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DF52EA23D37824067100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8bd8aa4-0606-3520-b803-2b9651f8910d.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.196.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:df:52:ea:23:d3:78:24:06:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=72a8bcb3-e12e-4712-b2d8-1c1b979676e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:a9:c4:3b:a6:4a:de:d6:d6:5a:2b:dc:6b: a2:bc:0b:a3:54:e6:1c:c6:41:7e:c1:99:c0:ca:89: 45:90:da:8f:74:0e:60:06:90:d9:19:63:0f:c7:33: 01:1f:88:cb:e4:4d:1f:76:6d:9a:3b:52:15:ba:50: fe:c6:72:ce:e8:20:f7:89:1d:39:3e:06:ca:d1:ae: 06:e9:65:1b:aa:5a:c2:ba:cf:12:23:92:b1:bb:1f: 78:04:24:07:05:e4:67:33:ec:98:43:53:2d:6d:19: 07:93:ed:ac:f2:51:bc:74:91:e1:03:d0:46:de:cc: 24:91:e7:13:c2:e8:c3:1d:26:df:d1:39:1a:68:7a: 59:7b:31:2f:5b:81:85:9a:d9:5f:cc:4c:70:5c:28: 15:77:65:a8:23:ab:b7:37:ea:cc:95:90:97:67:2e: 1c:1f:79:ae:b1:5b:a9:ab:e6:6c:de:88:10:43:1e: 70:15:22:0f:c0:1f:d0:16:a7:c4:31:7b:04:de:a1: a4:73:22:cb:91:92:d8:cd:09:0a:16:62:21:86:ee: 76:d7:fb:12:25:40:d5:ab:1a:d0:bf:f6:d5:fb:62: a1:c7:c1:83:a6:ea:09:1e:90:08:b2:58:0c:63:86: dc:6b:6e:c5:8c:d7:c7:57:78:74:45:c9:97:7c:a1: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:D7:F3:F1:96:97:A2:A4:D4:D6:B1:41:0E:AD:AD:F4:64:F7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8bd8aa4-0606-3520-b803-2b9651f8910d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:28:28:91:e8:4a:62:b4:ea:e3:8a:3a:7d:09:5a:d4:08:1f: 55:0e:3b:0c:52:10:15:17:26:04:a3:9e:65:50:2c:56:dd:13: a5:50:68:3d:9e:94:58:47:f3:0b:a7:06:64:ed:45:a7:5d:f8: 58:b4:07:38:13:f1:42:7b:be:05:ef:5a:0d:17:9f:c7:80:95: 46:0a:f5:e6:77:73:2e:da:1e:c7:b8:32:85:97:c1:78:ce:4a: ad:8b:33:44:b8:02:75:be:c4:9d:80:18:51:a5:0e:02:31:cf: 67:cd:dd:b0:4e:d3:6d:9e:39:89:64:76:25:2f:4b:9c:5a:6b: a5:9b:7b:b5:01:5e:ef:83:77:cc:83:16:8c:f6:48:4b:65:88: 1a:39:f1:69:f9:e2:b1:3e:04:dd:f7:2e:44:8d:9a:92:5a:87: 58:8c:ca:d9:2d:f7:a8:fe:2a:1b:ee:86:36:1d:be:48:04:f3: f7:e6:30:c2:ae:ed:53:df:45:d2:15:c9:77:97:45:69:87:72: 63:75:4d:12:c2:19:24:ad:60:e3:88:44:52:ab:dd:cc:7f:b9: b1:26:47:95:02:d8:aa:ca:0c:dc:b0:3e:b0:8c:cb:69:c9:77: 89:f0:a1:0b:ba:a7:2e:1a:2c:a9:5a:5f:cb:18:09:39:e1:c1: 1e:4d:3f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN9S6iPTeCQGcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NzJhOGJjYjMtZTEyZS00NzEyLWIyZDgtMWMxYjk3OTY3NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5GpxDumSt7W1lor3GuivAujVOYcxkF+wZnA yolFkNqPdA5gBpDZGWMPxzMBH4jL5E0fdm2aO1IVulD+xnLO6CD3iR05PgbK0a4G 6WUbqlrCus8SI5Kxux94BCQHBeRnM+yYQ1MtbRkHk+2s8lG8dJHhA9BG3swkkecT wujDHSbf0TkaaHpZezEvW4GFmtlfzExwXCgVd2WoI6u3N+rMlZCXZy4cH3musVup q+Zs3ogQQx5wFSIPwB/QFqfEMXsE3qGkcyLLkZLYzQkKFmIhhu521/sSJUDVqxrQ v/bV+2Khx8GDpuoJHpAIslgMY4bca27FjNfHV3h0RcmXfKGzjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASm1/PxlpeipNTWsUEOra30ZPdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjhiZDhhYTQtMDYwNi0z NTIwLWI4MDMtMmI5NjUxZjg5MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8Q4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQoKJHoSmK06uOKOn0JWtQIH1UOOwxSEBUXJgSjnmVQLFbdE6VQaD2e lFhH8wunBmTtRadd+Fi0BzgT8UJ7vgXvWg0Xn8eAlUYK9eZ3cy7aHse4MoWXwXjO Sq2LM0S4AnW+xJ2AGFGlDgIxz2fN3bBO022eOYlkdiUvS5xaa6Wbe7UBXu+Dd8yD Foz2SEtliBo58Wn54rE+BN33LkSNmpJah1iMytkt96j+KhvuhjYdvkgE8/fmMMKu 7VPfRdIVyXeXRWmHcmN1TRLCGSStYOOIRFKr3cx/ubEmR5UC2KrKDNywPrCMy2nJ d4nwoQu6py4aLKlaX8sYCTnhwR5NP/s= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:43 2025 by rpki-client