$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5b114ce-da76-3a61-b1da-7977aa4b895e.roa File: c5b114ce-da76-3a61-b1da-7977aa4b895e.roa (raw, json) Hash identifier: 0ZTjyiAbMC8MaqRK5WkNOYKsuq7yJ/xJRdrHnA2umRM= Subject key identifier: 69:D2:84:39:AA:5F:4B:AD:B1:2B:84:FA:1E:78:A0:03:15:83:D1:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858487D4D8957B9AF93B7CF290C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5b114ce-da76-3a61-b1da-7977aa4b895e.roa Signing time: Thu 09 Jan 2025 17:19:09 +0000 ROA not before: Thu 09 Jan 2025 17:19:09 +0000 ROA not after: Wed 09 Apr 2025 16:19:09 +0000 asID: 16625 IP address blocks: 23.192.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:4d:89:57:b9:af:93:b7:cf:29:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 17:19:09 2025 GMT Not After : Apr 9 16:19:09 2025 GMT Subject: CN=22ef71aa-378b-44d1-9c6d-fe1b9aa7968e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:1f:a0:e1:f3:b2:51:b2:26:f1:67:19:e4: 55:5b:e0:a6:0e:c3:3f:7b:75:81:61:ee:a7:54:dd: 68:06:8c:27:c3:de:12:ae:36:14:89:23:fa:d8:e2: 47:80:5f:eb:21:f3:ef:c9:f8:d3:ee:7a:a5:6a:4c: 84:d1:78:c4:e3:df:1f:2e:ab:10:2e:a8:cd:59:c2: d4:1b:4b:31:de:31:2c:4a:00:95:23:c3:03:93:25: 6e:c3:76:4f:ad:b4:1b:66:88:35:e9:f6:84:04:83: 63:3c:14:b0:37:5b:4b:c9:fa:b6:53:d7:5d:33:f6: 86:68:92:c5:f8:4e:f4:0e:f2:ac:12:7c:75:44:b9: 9c:34:d7:00:74:aa:56:9c:51:9d:f1:0b:5b:17:ee: 62:ef:db:47:cf:6a:cc:a4:9e:88:09:12:f3:d4:06: 37:0c:57:90:be:33:ab:1c:0e:f0:22:8a:af:90:7a: a9:39:7b:0b:92:e7:15:77:12:5e:a5:5c:48:0a:0d: 86:db:2a:ce:f7:66:7d:51:f6:31:2a:e0:2a:d9:8e: 25:52:86:b7:d1:a2:e5:04:bc:b5:9d:9b:02:c1:25: ce:e4:39:ec:86:54:b4:90:c7:2b:4e:8e:17:e7:f7: 41:45:ee:78:6c:c1:56:87:52:ea:12:0a:8a:d7:43: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D2:84:39:AA:5F:4B:AD:B1:2B:84:FA:1E:78:A0:03:15:83:D1:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5b114ce-da76-3a61-b1da-7977aa4b895e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:30:92:0f:22:ab:56:2a:42:42:f1:34:44:e3:fd:ed:bb:6a: 37:60:4e:4a:04:2c:39:05:79:7e:cf:b9:67:00:6d:fa:58:9d: b5:57:49:a6:88:c2:68:90:56:e5:bd:a4:c0:2e:41:c7:f9:88: 77:07:fa:6e:99:a4:b1:8f:4d:7d:2c:a8:c4:10:39:ad:40:06: 62:e7:a0:75:b7:5d:04:e0:97:12:5f:67:6d:8e:72:10:cf:47: cf:38:70:a2:3e:9a:61:95:11:cf:46:31:16:d1:3c:97:74:e5: 8c:84:d0:c1:93:7c:ba:07:79:42:a2:72:00:14:c3:96:9c:cf: 19:83:36:42:09:7f:ef:cf:80:1a:1a:d4:94:cf:4a:b0:69:0c: 54:f3:ca:57:c9:3a:64:22:30:b5:db:ac:3b:c9:cc:38:e4:ea: 8a:fc:f5:53:bb:5f:77:49:46:3e:2b:12:53:e5:6f:44:76:86: 6a:af:d8:a3:4d:10:29:fa:26:0f:3c:c7:41:ed:bd:da:cc:ec: 6e:e1:0c:64:78:9f:c7:ec:c7:25:df:8b:e1:37:0b:9d:89:8a: 7e:1b:a6:9e:71:92:51:ad:c3:8e:5f:03:43:a2:62:8a:77:15: b1:c0:15:6d:64:3d:33:be:af:cd:32:b4:7f:f9:9b:74:13:e0: 71:cc:74:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh9TYlXua+Tt88pDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwOTE3MTkwOVoXDTI1MDQwOTE2MTkwOVowLzEtMCsGA1UEAxMk MjJlZjcxYWEtMzc4Yi00NGQxLTljNmQtZmUxYjlhYTc5NjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrofoOHzslGyJvFnGeRVW+CmDsM/e3WBYe6n VN1oBownw94SrjYUiSP62OJHgF/rIfPvyfjT7nqlakyE0XjE498fLqsQLqjNWcLU G0sx3jEsSgCVI8MDkyVuw3ZPrbQbZog16faEBINjPBSwN1tLyfq2U9ddM/aGaJLF +E70DvKsEnx1RLmcNNcAdKpWnFGd8QtbF+5i79tHz2rMpJ6ICRLz1AY3DFeQvjOr HA7wIoqvkHqpOXsLkucVdxJepVxICg2G2yrO92Z9UfYxKuAq2Y4lUoa30aLlBLy1 nZsCwSXO5DnshlS0kMcrTo4X5/dBRe54bMFWh1LqEgqK10OWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnShDmqX0utsSuE+h54oAMVg9H8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzViMTE0Y2UtZGE3Ni0z YTYxLWIxZGEtNzk3N2FhNGI4OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAowkg8iq1YqQkLxNETj/e27ajdgTkoELDkFeX7PuWcAbfpYnbVXSaaI wmiQVuW9pMAuQcf5iHcH+m6ZpLGPTX0sqMQQOa1ABmLnoHW3XQTglxJfZ22OchDP R884cKI+mmGVEc9GMRbRPJd05YyE0MGTfLoHeUKicgAUw5aczxmDNkIJf+/PgBoa 1JTPSrBpDFTzylfJOmQiMLXbrDvJzDjk6or89VO7X3dJRj4rElPlb0R2hmqv2KNN ECn6Jg88x0HtvdrM7G7hDGR4n8fsxyXfi+E3C52Jin4bpp5xklGtw45fA0OiYop3 FbHAFW1kPTO+r80ytH/5m3QT4HHMdIg= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:07 2025 by rpki-client