$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcaa1d59-2820-36c3-94b6-c7adb8d0defd.roa File: bcaa1d59-2820-36c3-94b6-c7adb8d0defd.roa (raw, json) Hash identifier: 8xHT03ibIQaC2YRlMPAG73hOPHiTA5+UiIDi9ZZbMXQ= Subject key identifier: 87:3F:77:A6:98:E9:98:4E:00:3F:BC:D3:42:78:2A:54:B4:D9:A6:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BAC730A6B0C63DC671A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcaa1d59-2820-36c3-94b6-c7adb8d0defd.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.222.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:ac:73:0a:6b:0c:63:dc:67:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=f3601570-e448-417c-8548-b7b5bac0bdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:24:fe:40:cf:00:2e:86:d1:9f:b9:f5:d1: df:59:c2:00:c5:f6:bf:27:96:dc:9b:58:b7:5f:7c: c6:19:a3:f7:fe:1e:0e:06:f8:26:1a:2c:c1:6b:fe: ef:42:68:9f:bc:65:32:f6:de:1c:1e:dc:b2:1d:c3: 27:da:fe:9c:b9:fd:e3:8a:84:90:26:bc:a6:d1:b5: d7:2a:0d:2f:72:17:1f:8a:15:2e:cc:33:f2:0d:4f: 7a:ef:d6:d5:8d:48:3a:19:2a:d8:84:ae:48:24:b5: e4:8e:0b:c2:24:90:02:e8:c9:50:d5:42:95:ba:c4: b5:ce:0e:c9:1a:3b:0e:e8:83:df:3c:63:78:f9:da: 8a:61:b5:f4:74:5a:08:06:bb:fb:ee:33:02:4d:8b: 64:01:a3:e8:a5:01:0e:90:ae:20:34:8c:40:2d:a8: 86:48:e8:a4:38:82:b9:76:5b:75:1c:b4:2e:6b:9d: 26:b4:c2:dd:a5:68:7c:ba:cf:1a:ba:fc:21:74:db: b7:b4:06:35:73:23:8b:62:47:75:5d:ea:0a:ad:3d: 82:1c:a4:9a:72:cc:73:c3:62:c9:4c:fe:a2:55:49: a6:70:60:99:62:1e:79:3f:1c:13:58:78:80:69:c4: 3d:9e:0a:86:69:4c:76:e6:cd:c6:a3:43:ee:b0:9a: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3F:77:A6:98:E9:98:4E:00:3F:BC:D3:42:78:2A:54:B4:D9:A6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcaa1d59-2820-36c3-94b6-c7adb8d0defd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0d:d4:73:4f:e7:ba:1b:ba:b7:40:20:67:06:1c:26:6b:ed: e1:b5:b9:5b:18:9b:9b:65:4c:6b:64:e7:34:a6:21:df:0e:12: f9:c4:bb:b7:cd:fd:05:63:e2:d8:35:b9:5a:9d:9c:dd:68:76: 51:10:96:32:14:25:bb:8e:2d:eb:42:df:17:61:20:a5:34:08: 6a:fc:f2:46:30:3b:d6:88:5b:e4:51:07:fe:e1:c5:98:1b:69: c4:46:80:bf:24:15:31:9b:fc:28:0c:b8:d6:70:b9:77:38:82: 0b:6c:b7:7a:61:32:15:1d:73:78:ba:77:a2:7f:9c:2e:a9:7f: 02:41:02:5e:c1:95:66:0c:f5:2a:89:3c:ff:f2:bf:97:6c:d8: 1f:a3:26:d5:68:52:77:2a:a3:74:ae:6d:02:20:60:9d:f5:16: a4:8c:5a:ef:18:02:44:0e:38:e4:0b:1a:78:78:51:ca:e7:49: 81:e4:f2:4f:e8:78:00:ac:ef:8f:2e:71:22:c2:b5:27:72:a5: 27:90:b9:ae:e6:97:93:f9:5f:43:e2:bb:5d:3c:ae:53:33:3b: a4:34:4a:69:b7:f2:61:0f:c0:97:09:f7:4a:4e:2d:46:53:e8: 1f:eb:9b:f7:f1:23:a9:f2:d5:de:e5:4b:2b:79:87:9d:32:51: 12:5b:2b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6xzCmsMY9xnGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZjM2MDE1NzAtZTQ0OC00MTdjLTg1NDgtYjdiNWJhYzBiZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqsk/kDPAC6G0Z+59dHfWcIAxfa/J5bcm1i3 X3zGGaP3/h4OBvgmGizBa/7vQmifvGUy9t4cHtyyHcMn2v6cuf3jioSQJrym0bXX Kg0vchcfihUuzDPyDU9679bVjUg6GSrYhK5IJLXkjgvCJJAC6MlQ1UKVusS1zg7J GjsO6IPfPGN4+dqKYbX0dFoIBrv77jMCTYtkAaPopQEOkK4gNIxALaiGSOikOIK5 dlt1HLQua50mtMLdpWh8us8auvwhdNu3tAY1cyOLYkd1XeoKrT2CHKSacsxzw2LJ TP6iVUmmcGCZYh55PxwTWHiAacQ9ngqGaUx25s3Go0PusJqVuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc/d6aY6ZhOAD+800J4KlS02abUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNhYTFkNTktMjgyMC0z NmMzLTk0YjYtYzdhZGI4ZDBkZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQN1HNP57oburdAIGcGHCZr7eG1uVsYm5tlTGtk5zSmId8OEvnEu7fN /QVj4tg1uVqdnN1odlEQljIUJbuOLetC3xdhIKU0CGr88kYwO9aIW+RRB/7hxZgb acRGgL8kFTGb/CgMuNZwuXc4ggtst3phMhUdc3i6d6J/nC6pfwJBAl7BlWYM9SqJ PP/yv5ds2B+jJtVoUncqo3SubQIgYJ31FqSMWu8YAkQOOOQLGnh4UcrnSYHk8k/o eACs748ucSLCtSdypSeQua7ml5P5X0Piu108rlMzO6Q0Smm38mEPwJcJ90pOLUZT 6B/rm/fxI6ny1d7lSyt5h50yURJbKyg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:39 2025 by rpki-client