$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0eb425-0322-38cc-804c-181daa43a1c7.roa File: ca0eb425-0322-38cc-804c-181daa43a1c7.roa (raw, json) Hash identifier: GCENuuzQjzBeZp660GgKFK0KRo1ohyib96udfq9r1kc= Subject key identifier: 33:AC:C0:39:AA:35:BC:C8:99:A6:21:3C:02:74:60:DF:9B:A8:8F:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8BF172B93693EF51D520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0eb425-0322-38cc-804c-181daa43a1c7.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.211.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8b:f1:72:b9:36:93:ef:51:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=5f0a951c-f014-4714-895d-277f4c6183bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:70:db:9c:b2:d9:33:b7:47:0b:1c:36:98:e1: 7e:63:cb:c5:a6:4b:da:b3:d8:d0:fa:89:39:f2:93: 2f:63:c6:5f:f2:9b:3f:34:40:cf:2f:12:d2:93:09: fb:08:8f:71:b6:41:52:52:53:4d:c2:86:57:d4:8d: 4a:bf:bf:5f:f4:5d:83:ea:55:8d:24:22:b3:9b:f9: e1:b9:bf:4b:3d:55:ac:96:f0:d0:39:18:a9:05:c5: 14:c5:f2:88:f3:63:53:ce:4d:be:69:a3:ab:cc:45: 69:31:3e:be:f9:af:a9:6f:5e:ab:7c:4d:41:df:4e: 8a:82:15:02:da:ac:dd:93:ac:7d:33:ee:24:28:13: ba:28:a9:fd:34:af:ea:c0:0e:33:09:c9:4f:43:7b: 78:0d:ee:db:54:07:2a:62:f0:13:ce:94:79:cb:6a: 7e:c4:52:ab:0d:12:91:5e:73:71:12:23:05:04:b3: 90:9d:8a:bd:42:3f:49:17:4a:e7:dd:38:08:0c:19: 03:87:15:5b:6f:b3:89:57:67:17:60:73:5d:5d:fa: 3a:cb:16:df:ef:a8:3b:93:c1:71:f3:02:76:92:e5: 11:a4:52:65:4d:6b:a5:92:99:c8:ec:f1:07:8a:bc: ba:c0:c0:03:84:14:9a:ac:0b:66:b1:d3:54:19:71: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AC:C0:39:AA:35:BC:C8:99:A6:21:3C:02:74:60:DF:9B:A8:8F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0eb425-0322-38cc-804c-181daa43a1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bf:73:7c:a4:44:7f:5b:f8:9b:96:3c:c8:9a:38:1b:00:7c: 2c:62:6b:f9:6e:3e:28:53:c3:fd:78:fc:ba:d6:9a:df:c5:bf: 4f:53:e0:f6:3a:cb:d6:d1:d1:dd:f6:1c:d9:0b:cb:4c:d4:5d: f3:ed:f3:83:e7:4c:13:b7:d5:b2:d3:7f:32:b6:db:a8:1f:dd: 4e:ef:70:ef:18:c2:1e:b3:b4:fb:f9:f7:05:b3:4c:d7:3a:d3: b0:cb:1e:c6:00:8e:26:ce:a3:b6:58:05:f9:05:b2:26:83:94: 52:9a:7a:88:7f:1a:58:93:f0:a1:3a:f5:8d:4e:47:ac:70:19: f4:8c:cb:ae:14:3f:90:91:23:cc:67:61:33:0d:c4:f7:83:8e: d8:23:0e:1a:a2:e6:15:3e:20:32:51:c9:1d:91:cb:6b:1c:af: 6f:88:ae:d5:12:6f:05:0f:40:7e:26:96:be:5b:81:c2:74:42: f0:06:41:85:8d:36:5b:7c:72:3d:a6:87:1f:67:00:52:30:8b: 4a:88:c5:33:46:32:35:9f:71:bf:5f:ae:6a:41:c0:df:b7:70: 47:3d:e5:37:c7:54:23:49:cb:bc:1a:3c:3b:28:fc:5c:45:65: d3:c4:9d:eb:86:53:fc:a2:99:ee:1e:e4:91:42:0c:08:79:43: 9c:3b:c4:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4vxcrk2k+9R1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NWYwYTk1MWMtZjAxNC00NzE0LTg5NWQtMjc3ZjRjNjE4M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnDbnLLZM7dHCxw2mOF+Y8vFpkvas9jQ+ok5 8pMvY8Zf8ps/NEDPLxLSkwn7CI9xtkFSUlNNwoZX1I1Kv79f9F2D6lWNJCKzm/nh ub9LPVWslvDQORipBcUUxfKI82NTzk2+aaOrzEVpMT6++a+pb16rfE1B306KghUC 2qzdk6x9M+4kKBO6KKn9NK/qwA4zCclPQ3t4De7bVAcqYvATzpR5y2p+xFKrDRKR XnNxEiMFBLOQnYq9Qj9JF0rn3TgIDBkDhxVbb7OJV2cXYHNdXfo6yxbf76g7k8Fx 8wJ2kuURpFJlTWulkpnI7PEHiry6wMADhBSarAtmsdNUGXG+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOswDmqNbzImaYhPAJ0YN+bqI/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EwZWI0MjUtMDMyMi0z OGNjLTgwNGMtMTgxZGFhNDNhMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9MEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC/c3ykRH9b+JuWPMiaOBsAfCxia/luPihTw/14/LrWmt/Fv09T4PY6 y9bR0d32HNkLy0zUXfPt84PnTBO31bLTfzK226gf3U7vcO8Ywh6ztPv59wWzTNc6 07DLHsYAjibOo7ZYBfkFsiaDlFKaeoh/GliT8KE69Y1OR6xwGfSMy64UP5CRI8xn YTMNxPeDjtgjDhqi5hU+IDJRyR2Ry2scr2+IrtUSbwUPQH4mlr5bgcJ0QvAGQYWN Nlt8cj2mhx9nAFIwi0qIxTNGMjWfcb9frmpBwN+3cEc95TfHVCNJy7waPDso/FxF ZdPEneuGU/yime4e5JFCDAh5Q5w7xFE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:19 2025 by rpki-client