$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3b272f6-f8f1-39f6-a32c-e92244542ecc.roa File: c3b272f6-f8f1-39f6-a32c-e92244542ecc.roa (raw, json) Hash identifier: olSOvWhvqnFUK4VudFza2AteEBEx331eTEMkNGxyhfI= Subject key identifier: 34:74:C0:09:69:92:E9:01:05:84:32:90:AD:AF:19:25:4D:A4:12:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830CC098DD8196B329F6980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3b272f6-f8f1-39f6-a32c-e92244542ecc.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.200.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:cc:09:8d:d8:19:6b:32:9f:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=842ddefd-3b9a-46b7-bf86-7f8c15596d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:1b:11:83:16:b1:3e:7f:eb:62:88:75:71: c7:dd:d8:a4:b3:14:34:13:80:ce:dc:f6:14:2b:a4: 88:68:d4:98:d0:3b:6a:5f:ed:de:61:f6:36:56:45: 65:0c:c8:b0:cd:10:db:92:ba:b2:92:7c:2f:60:bd: a3:bd:b4:f5:2d:a6:77:e0:69:a9:95:c4:4b:dc:b9: 0b:73:6a:b8:97:55:9f:c1:f0:6c:93:a4:67:88:ea: 3c:e4:da:2e:1a:80:a6:e4:28:1a:9d:58:40:b4:7f: 07:76:7d:9e:6f:b5:4f:b5:34:35:67:1b:07:37:4b: d3:71:b2:5b:fc:10:74:fc:22:a7:2e:f6:c7:ef:89: 84:91:69:32:b4:5f:6a:1c:79:1f:4d:3f:56:7f:3e: 5a:50:12:a1:92:18:90:da:4c:cd:2b:46:fa:4b:4d: 6c:35:b2:16:b1:59:dc:a5:49:22:48:f5:ac:31:c3: 31:5e:f7:0f:a8:0e:73:26:2a:97:02:d8:4d:17:b9: 6a:bd:e4:94:13:06:c6:b7:5f:72:97:0f:6d:5d:da: bd:0b:db:c2:74:bb:c7:d0:48:f8:94:71:67:e4:d8: 48:a0:43:13:dc:3e:9b:01:55:d9:04:d8:66:5e:d2: 72:ca:14:df:9a:d1:a5:42:70:36:d7:93:2c:4f:43: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:C0:09:69:92:E9:01:05:84:32:90:AD:AF:19:25:4D:A4:12:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3b272f6-f8f1-39f6-a32c-e92244542ecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d1:b8:7f:80:84:a2:9d:32:88:a1:9c:69:e5:33:ac:bf:23: 55:59:b4:03:f5:ae:63:8f:ef:62:44:4e:1f:22:21:ed:9e:4b: 5e:75:83:b8:3e:98:2c:f1:1c:a8:61:3d:ae:b3:27:b3:96:1b: 69:92:0f:1c:f2:29:3f:a7:ed:43:91:0d:5b:e9:96:0b:46:6b: 30:55:90:ca:30:9b:7d:3d:b1:b6:2a:7e:0f:89:ee:0e:46:45: 5a:c1:66:29:0b:10:6a:3a:68:db:8c:f5:f5:2a:35:10:cb:00: ca:da:cd:2b:f4:ca:01:b3:fc:c8:30:21:7c:59:0e:45:89:82: 90:96:bd:70:33:66:66:37:38:7e:a2:25:08:c5:7d:c4:7b:e0: 29:46:14:fb:cd:1f:3a:81:24:f2:87:dc:f8:28:a3:67:0f:b0: 8b:24:ef:ef:e4:40:dd:55:e2:b4:46:63:24:ff:7a:03:cf:ae: cb:c0:96:2c:98:3d:eb:ec:9d:9b:5a:27:a4:62:d9:a7:5c:ae: 28:07:e4:ce:5f:03:68:0d:02:8c:ed:cc:0f:8c:ad:8b:ba:89: 86:41:3a:aa:8f:ce:61:58:66:36:e9:a1:b5:aa:e2:2f:7e:b6: f2:9a:fc:8d:11:a1:1e:f9:6c:e1:95:56:ce:5b:fd:7a:17:14: f8:6b:88:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMwJjdgZazKfaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ODQyZGRlZmQtM2I5YS00NmI3LWJmODYtN2Y4YzE1NTk2ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi0bEYMWsT5/62KIdXHH3diksxQ0E4DO3PYU K6SIaNSY0DtqX+3eYfY2VkVlDMiwzRDbkrqyknwvYL2jvbT1LaZ34GmplcRL3LkL c2q4l1WfwfBsk6RniOo85NouGoCm5CganVhAtH8Hdn2eb7VPtTQ1ZxsHN0vTcbJb /BB0/CKnLvbH74mEkWkytF9qHHkfTT9Wfz5aUBKhkhiQ2kzNK0b6S01sNbIWsVnc pUkiSPWsMcMxXvcPqA5zJiqXAthNF7lqveSUEwbGt19ylw9tXdq9C9vCdLvH0Ej4 lHFn5NhIoEMT3D6bAVXZBNhmXtJyyhTfmtGlQnA215MsT0NyOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR0wAlpkukBBYQykK2vGSVNpBIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNiMjcyZjYtZjhmMS0z OWY2LWEzMmMtZTkyMjQ0NTQyZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbRuH+AhKKdMoihnGnlM6y/I1VZtAP1rmOP72JETh8iIe2eS151g7g+ mCzxHKhhPa6zJ7OWG2mSDxzyKT+n7UORDVvplgtGazBVkMowm309sbYqfg+J7g5G RVrBZikLEGo6aNuM9fUqNRDLAMrazSv0ygGz/MgwIXxZDkWJgpCWvXAzZmY3OH6i JQjFfcR74ClGFPvNHzqBJPKH3Pgoo2cPsIsk7+/kQN1V4rRGYyT/egPPrsvAliyY PevsnZtaJ6Ri2adcrigH5M5fA2gNAoztzA+MrYu6iYZBOqqPzmFYZjbpobWq4i9+ tvKa/I0RoR75bOGVVs5b/XoXFPhriCM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:05 2025 by rpki-client