$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0819b90-fe1a-3c58-9550-3d7d3a8cd435.roa File: c0819b90-fe1a-3c58-9550-3d7d3a8cd435.roa (raw, json) Hash identifier: dgWx0cE9/uyxLRTQxdlRwzStkdXKo7BMYHiX0clByno= Subject key identifier: 56:E2:6E:F9:8A:4D:02:F8:C7:75:A0:2F:C5:E1:80:8B:14:99:78:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A6CB6EB10685267F88808364 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0819b90-fe1a-3c58-9550-3d7d3a8cd435.roa Signing time: Fri 24 Jan 2025 14:00:52 +0000 ROA not before: Fri 24 Jan 2025 14:00:52 +0000 ROA not after: Thu 24 Apr 2025 13:00:52 +0000 asID: 7545 IP address blocks: 23.199.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:cb:6e:b1:06:85:26:7f:88:80:83:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 24 14:00:52 2025 GMT Not After : Apr 24 13:00:52 2025 GMT Subject: CN=8b44d29f-d2e4-4a92-822c-54560d337b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:31:32:31:b7:c6:40:17:3b:a4:77:96:d3: e2:ef:a7:2d:5a:13:a0:95:45:04:39:57:79:20:00: 93:59:3b:f4:59:71:70:41:c0:c5:b0:5d:5e:ed:e8: 8b:64:59:0c:b1:1c:52:37:bd:a6:63:71:a3:f1:86: 69:4e:47:f6:91:2d:c7:aa:94:fd:a3:93:73:e2:d0: d9:9b:c5:8b:a4:a2:d8:c3:2d:1e:b5:4a:11:fd:24: 0f:9d:8e:1d:b0:c7:e8:3f:8e:49:94:b1:45:62:d2: 0d:48:08:1f:33:5c:06:2a:13:26:09:f4:de:7f:00: 9b:42:c6:58:ff:55:39:9c:cc:59:9d:4d:5d:4e:50: 90:f7:92:2f:8a:7a:19:ac:40:6b:81:6f:ba:8a:af: 21:84:25:c1:ff:c0:88:44:c9:9d:fd:8c:17:49:bc: 42:50:7e:c2:bf:61:31:94:5a:8d:33:86:44:1e:4a: 1a:b1:a5:f8:6b:3b:ff:b6:17:76:e6:ae:0d:a9:f2: 67:14:aa:0c:59:08:4b:62:4c:4c:7e:ed:63:dd:f9: a1:41:9b:15:f3:12:9c:c5:bc:3b:9c:20:d7:5b:96: f3:10:8a:75:c5:87:10:19:03:b4:11:c7:c9:a6:63: e9:cc:c0:d7:b3:ce:e0:f9:28:cd:9a:53:d2:16:32: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E2:6E:F9:8A:4D:02:F8:C7:75:A0:2F:C5:E1:80:8B:14:99:78:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0819b90-fe1a-3c58-9550-3d7d3a8cd435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:87:12:ad:ac:7f:32:8b:51:d4:b5:e4:31:df:32:9e:01:20: 3f:24:e0:bb:ca:2b:f1:ef:8e:16:24:21:8d:e7:1c:22:6d:f9: 64:58:d9:0c:46:bd:cb:c3:b3:73:9c:cd:01:25:12:a2:08:b3: d2:eb:c9:32:c9:e1:50:f3:81:df:28:b2:e7:8a:2b:ee:85:cf: 5b:03:bc:13:b8:34:a8:29:d6:73:b6:da:6f:e7:57:22:35:89: 56:9d:ff:9d:e9:0e:1b:95:d3:33:bb:49:cb:45:5a:e3:fc:42: da:54:73:88:5d:4a:5a:7b:1e:08:97:2e:ac:65:78:a6:21:92: 18:25:3d:fd:cd:fc:ed:75:a9:84:6b:d6:c7:ed:74:99:9c:f3: be:0a:d8:41:9c:d7:33:c8:3f:50:68:7d:e1:de:d5:f2:c2:f5: 07:15:1a:ef:96:44:d4:bc:9e:09:37:aa:6f:98:52:ff:f0:2b: e7:56:80:09:16:2c:3b:c5:29:02:dc:5d:1a:bf:80:1e:85:ea: 94:f1:ad:63:75:d1:a6:06:97:15:8b:5d:00:8a:fc:5d:d7:d7: 34:70:21:a8:58:7a:eb:82:90:ff:a3:0c:3b:cb:8b:1e:f7:34: cb:9b:3c:5b:73:85:d6:83:52:5a:e4:e8:b3:69:b9:02:c4:b7: 23:0b:a9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy26xBoUmf4iAg2QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk OGI0NGQyOWYtZDJlNC00YTkyLTgyMmMtNTQ1NjBkMzM3YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3AxMjG3xkAXO6R3ltPi76ctWhOglUUEOVd5 IACTWTv0WXFwQcDFsF1e7eiLZFkMsRxSN72mY3Gj8YZpTkf2kS3HqpT9o5Nz4tDZ m8WLpKLYwy0etUoR/SQPnY4dsMfoP45JlLFFYtINSAgfM1wGKhMmCfTefwCbQsZY /1U5nMxZnU1dTlCQ95IvinoZrEBrgW+6iq8hhCXB/8CIRMmd/YwXSbxCUH7Cv2Ex lFqNM4ZEHkoasaX4azv/thd25q4NqfJnFKoMWQhLYkxMfu1j3fmhQZsV8xKcxbw7 nCDXW5bzEIp1xYcQGQO0EcfJpmPpzMDXs87g+SjNmlPSFjJtVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbibvmKTQL4x3WgL8XhgIsUmXhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA4MTliOTAtZmUxYS0z YzU4LTk1NTAtM2Q3ZDNhOGNkNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8dEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCHEq2sfzKLUdS15DHfMp4BID8k4LvKK/HvjhYkIY3nHCJt+WRY2QxG vcvDs3OczQElEqIIs9LryTLJ4VDzgd8osueKK+6Fz1sDvBO4NKgp1nO22m/nVyI1 iVad/53pDhuV0zO7SctFWuP8QtpUc4hdSlp7HgiXLqxleKYhkhglPf3N/O11qYRr 1sftdJmc874K2EGc1zPIP1BofeHe1fLC9QcVGu+WRNS8ngk3qm+YUv/wK+dWgAkW LDvFKQLcXRq/gB6F6pTxrWN10aYGlxWLXQCK/F3X1zRwIahYeuuCkP+jDDvLix73 NMubPFtzhdaDUlrk6LNpuQLEtyMLqd0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:29 2025 by rpki-client