$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c52cc585-484a-3507-9439-23106d2e78dd.roa File: c52cc585-484a-3507-9439-23106d2e78dd.roa (raw, json) Hash identifier: P5yZaYIytA0Jhv6SVlHVK4UctmLpySA1LBySeyYN0n8= Subject key identifier: EA:93:7F:66:EA:4C:81:7A:2B:2E:77:38:A2:E7:CC:38:84:22:4E:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99662436A707132964EC480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c52cc585-484a-3507-9439-23106d2e78dd.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.202.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:62:43:6a:70:71:32:96:4e:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d9badd20-f63f-4e7b-a46f-b4b53657ba38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7a:64:71:3f:d2:68:91:5e:99:cf:25:34:0d: ce:34:b5:1f:ea:55:8d:64:62:6c:90:f6:3d:ca:ec: fe:fd:1b:45:39:00:0a:20:e7:8d:0a:2f:5e:a9:01: 0b:95:5a:a0:6e:b4:22:31:a2:b2:94:1a:46:f3:29: 2e:52:ee:6c:e2:07:66:19:ed:bd:c1:c3:d3:9f:a0: 0c:c8:f2:27:55:59:9d:6e:fa:f9:a1:2f:b7:e5:30: ee:d7:12:34:30:de:71:5a:5c:07:40:db:9c:77:d8: 8e:95:cb:78:06:08:2c:68:6d:64:dc:93:df:51:fa: 83:ca:ec:6f:77:cb:84:13:cb:e2:07:38:63:4b:c0: cc:a3:dc:46:db:5f:04:8e:11:fe:2c:42:a8:bd:0f: 10:f5:ef:84:28:8a:79:2b:e9:47:8b:2f:c7:a2:35: 0e:a7:fe:a0:da:2c:a7:a9:c8:51:6a:d9:91:d8:c8: 67:06:25:8a:7f:db:86:12:fe:3d:a6:b9:72:2c:df: a4:95:5b:60:e3:5f:49:94:43:46:4f:96:46:99:7e: 35:6e:74:33:5a:fe:6a:97:b5:59:b8:e6:c2:39:3d: bd:e6:c0:b1:92:a5:ca:af:1e:3a:80:e9:4d:50:52: 55:55:ae:42:90:57:50:8b:c8:3f:bf:e9:33:9b:3f: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:93:7F:66:EA:4C:81:7A:2B:2E:77:38:A2:E7:CC:38:84:22:4E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c52cc585-484a-3507-9439-23106d2e78dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1b:07:ad:bc:91:b2:75:eb:c0:4c:96:d9:5e:50:c7:5d:db: 76:c5:38:e0:de:f3:5b:c2:3a:df:22:19:25:0c:f4:16:0b:0f: ff:f7:39:5f:5b:e1:69:75:1e:9e:26:aa:19:28:04:c6:ea:a7: 13:b2:9e:3f:7d:a0:78:e3:e5:7e:99:fb:9d:77:bb:55:ec:d7: 30:f0:cc:a0:06:3e:36:d0:08:78:fd:3f:41:34:c1:5e:6d:e4: a5:65:be:8c:2e:89:ff:0b:43:ec:1a:2e:e0:95:db:56:53:42: 4f:5c:0c:31:26:ca:46:6f:6a:9f:1a:05:2a:55:5b:00:94:7a: a0:cc:d7:2b:c8:50:85:16:21:7f:8c:57:d1:54:df:32:e7:c0: 6d:12:28:80:0c:02:4b:88:93:2b:21:77:cf:6e:b9:26:eb:37: d0:96:63:de:d9:1c:d3:2f:01:2f:2b:24:22:54:3b:1c:34:7e: 29:16:5d:ff:ce:cb:2f:ba:5d:c1:8b:75:d8:78:5a:18:1e:7b: 6b:5e:a6:92:23:4f:a8:49:08:2a:32:34:1d:91:0b:e7:31:c3: e7:5e:ee:c9:b9:7c:21:f1:59:cb:2f:d3:a0:de:1a:1f:78:ec: e7:73:6c:b1:7a:16:06:8d:f7:08:25:61:8b:31:73:4a:2d:0a: be:c5:0e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmJDanBxMpZOxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDliYWRkMjAtZjYzZi00ZTdiLWE0NmYtYjRiNTM2NTdiYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63pkcT/SaJFemc8lNA3ONLUf6lWNZGJskPY9 yuz+/RtFOQAKIOeNCi9eqQELlVqgbrQiMaKylBpG8ykuUu5s4gdmGe29wcPTn6AM yPInVVmdbvr5oS+35TDu1xI0MN5xWlwHQNucd9iOlct4BggsaG1k3JPfUfqDyuxv d8uEE8viBzhjS8DMo9xG218EjhH+LEKovQ8Q9e+EKIp5K+lHiy/HojUOp/6g2iyn qchRatmR2MhnBiWKf9uGEv49prlyLN+klVtg419JlENGT5ZGmX41bnQzWv5ql7VZ uObCOT295sCxkqXKrx46gOlNUFJVVa5CkFdQi8g/v+kzmz8FmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqTf2bqTIF6Ky53OKLnzDiEIk4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzUyY2M1ODUtNDg0YS0z NTA3LTk0MzktMjMxMDZkMmU3OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8roMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGobB628kbJ168BMltleUMdd23bFOODe81vCOt8iGSUM9BYLD//3OV9b 4Wl1Hp4mqhkoBMbqpxOynj99oHjj5X6Z+513u1Xs1zDwzKAGPjbQCHj9P0E0wV5t 5KVlvowuif8LQ+waLuCV21ZTQk9cDDEmykZvap8aBSpVWwCUeqDM1yvIUIUWIX+M V9FU3zLnwG0SKIAMAkuIkyshd89uuSbrN9CWY97ZHNMvAS8rJCJUOxw0fikWXf/O yy+6XcGLddh4Whgee2teppIjT6hJCCoyNB2RC+cxw+de7sm5fCHxWcsv06DeGh94 7OdzbLF6FgaN9wglYYsxc0otCr7FDq8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:18 2025 by rpki-client