$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca62901c-6c8f-3015-b4da-b743b01b7d07.roa File: ca62901c-6c8f-3015-b4da-b743b01b7d07.roa (raw, json) Hash identifier: Vr3/vu6kvgUqkeGH8eQuGT0wJFvTv2WsaTIs95+TVac= Subject key identifier: E1:3F:28:F2:C3:09:91:19:E7:90:B5:DC:32:50:5F:68:DC:DA:B0:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DE5F86C3A16D7E42F380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca62901c-6c8f-3015-b4da-b743b01b7d07.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.195.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:de:5f:86:c3:a1:6d:7e:42:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=e47770bf-ab8b-430e-8547-dd27076b0543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:dd:4e:88:57:34:22:58:a6:fe:d7:1e:a9: 38:53:72:7c:f1:44:fd:19:21:c8:cf:cd:ee:3d:31: 7c:a7:cd:fc:6e:20:f9:e0:be:d0:17:5f:a3:54:99: 17:56:64:1b:1d:21:05:7e:d6:83:3c:ce:a2:a2:48: f4:f6:80:82:b6:0c:8c:96:0e:a8:09:cc:96:53:f4: 1c:db:c5:ac:53:f8:cd:eb:d2:b6:d6:87:c2:b0:f3: 5b:52:1e:d0:db:35:f9:6c:1b:1c:41:14:0a:82:15: dd:a0:58:05:35:59:97:5d:cf:b5:68:62:02:18:9e: 18:bd:f2:d7:52:d4:8f:0c:e0:15:04:9b:dc:30:9f: 99:f3:7c:36:df:9d:43:5c:f1:54:f5:42:18:5a:1b: 5a:0a:3d:09:ee:71:40:86:ee:e0:9c:68:29:64:55: 06:0d:33:31:9a:42:ca:8a:d1:f5:b0:5d:e1:71:8d: 51:af:98:6e:31:65:59:bc:20:92:a0:c3:20:f4:4a: 55:3f:41:34:b4:bc:c3:28:47:6c:cf:0c:1c:44:dd: 12:56:03:1b:9f:f2:80:76:87:34:e4:f3:4a:7d:1f: dd:3a:d7:25:da:e5:ce:fe:bf:59:4d:75:d7:18:01: 13:da:9e:7f:25:7e:bd:87:37:ad:85:f6:db:42:00: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:28:F2:C3:09:91:19:E7:90:B5:DC:32:50:5F:68:DC:DA:B0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca62901c-6c8f-3015-b4da-b743b01b7d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c8:bf:e7:29:71:09:64:35:0b:ef:5c:97:ca:63:ee:d3:74: 7f:9f:65:d5:1d:e1:c3:c5:51:5d:41:53:cc:e9:4b:84:86:32: e7:7a:4d:32:31:02:1f:91:f6:20:54:53:43:ea:39:49:19:2f: 50:52:49:d8:e6:2b:e0:c0:f9:0a:46:02:4e:c2:4e:55:05:c4: 7d:15:9c:a6:44:49:47:34:45:ff:db:10:b3:90:43:72:12:93: 52:94:ee:b9:2d:82:2c:f5:d1:eb:81:a0:59:4e:74:59:45:55: fa:a3:5b:a5:a9:5f:d7:8d:1c:8d:47:2e:59:fb:71:f0:cd:e6: d2:8e:06:f1:78:87:9e:91:05:fe:b0:40:09:82:e8:d2:00:3c: 0e:a6:9d:5b:7c:03:43:92:e8:38:fc:55:b2:ae:06:19:2f:cc: 5a:2c:45:50:5a:81:b6:ee:98:02:9e:18:bd:e9:e3:e2:61:15: 7d:7d:db:65:55:b2:7b:4e:02:3c:4f:64:7d:7d:6d:09:4f:c1: 0b:98:3a:8a:4b:dc:a9:9e:c5:8e:3b:02:22:60:f2:91:f2:c1: df:a2:1e:1b:9b:f7:17:96:2b:73:52:bd:3c:9b:8f:c5:aa:70: 98:15:c5:59:6a:2b:16:9a:a0:db:45:30:75:e8:23:af:94:43: 45:ba:13:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAN5fhsOhbX5C84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZTQ3NzcwYmYtYWI4Yi00MzBlLTg1NDctZGQyNzA3NmIwNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaDdTohXNCJYpv7XHqk4U3J88UT9GSHIz83u PTF8p838biD54L7QF1+jVJkXVmQbHSEFftaDPM6iokj09oCCtgyMlg6oCcyWU/Qc 28WsU/jN69K21ofCsPNbUh7Q2zX5bBscQRQKghXdoFgFNVmXXc+1aGICGJ4YvfLX UtSPDOAVBJvcMJ+Z83w2351DXPFU9UIYWhtaCj0J7nFAhu7gnGgpZFUGDTMxmkLK itH1sF3hcY1Rr5huMWVZvCCSoMMg9EpVP0E0tLzDKEdszwwcRN0SVgMbn/KAdoc0 5PNKfR/dOtcl2uXO/r9ZTXXXGAET2p5/JX69hzethfbbQgDIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE/KPLDCZEZ55C13DJQX2jc2rBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E2MjkwMWMtNmM4Zi0z MDE1LWI0ZGEtYjc0M2IwMWI3ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTIv+cpcQlkNQvvXJfKY+7TdH+fZdUd4cPFUV1BU8zpS4SGMud6TTIx Ah+R9iBUU0PqOUkZL1BSSdjmK+DA+QpGAk7CTlUFxH0VnKZESUc0Rf/bELOQQ3IS k1KU7rktgiz10euBoFlOdFlFVfqjW6WpX9eNHI1HLln7cfDN5tKOBvF4h56RBf6w QAmC6NIAPA6mnVt8A0OS6Dj8VbKuBhkvzFosRVBagbbumAKeGL3p4+JhFX1922VV sntOAjxPZH19bQlPwQuYOopL3KmexY47AiJg8pHywd+iHhub9xeWK3NSvTybj8Wq cJgVxVlqKxaaoNtFMHXoI6+UQ0W6E6Y= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:26 2025 by rpki-client