$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caca6911-55fb-359f-aa7c-526e85cc06d6.roa File: caca6911-55fb-359f-aa7c-526e85cc06d6.roa (raw, json) Hash identifier: khOZhcFEVxOms3CY1v09dLYexLFQNrrGnwWrCtEG4FU= Subject key identifier: D5:2B:EE:CA:EA:5B:5E:45:75:2F:50:43:43:5E:F6:74:42:B8:70:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A996178566D0E0D49191BF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caca6911-55fb-359f-aa7c-526e85cc06d6.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.216.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:17:85:66:d0:e0:d4:91:91:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=61fb6a5f-5282-48e4-8e51-6d29a9376e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:f4:51:63:5e:34:31:5c:dc:e1:0f:00:ea: 91:92:68:a9:5d:8d:34:0e:f7:07:ab:b5:6c:02:a1: c2:ab:76:9a:72:0d:ba:15:90:8e:6e:7f:94:53:fd: ee:bf:4e:d9:a0:ba:cf:3f:f5:94:f6:a1:12:29:ea: 19:25:94:dc:0a:45:48:70:e2:09:b2:d2:43:c4:6d: c5:9f:7d:b9:9a:09:1b:73:4b:c9:01:47:d3:73:02: e9:f5:de:a6:e1:e2:d8:3a:0d:41:93:75:b3:86:fc: c9:90:df:6a:66:b0:dc:b3:9c:67:22:db:f9:17:04: f9:c2:c6:2a:99:cf:22:4a:00:18:92:71:dd:07:45: 98:d5:fe:d5:bb:96:cf:1c:b6:cf:1c:b4:32:f2:fd: 0e:b2:64:a1:09:a1:c7:de:3f:6e:63:a0:ad:4e:aa: 75:b1:2a:0f:17:f2:aa:93:85:b5:45:9d:60:78:c7: d0:15:53:cd:fe:e0:0b:64:d4:96:99:8c:f4:3d:e0: 2b:6d:4c:a8:99:37:f6:b6:85:02:8d:65:e7:12:4d: 60:dc:67:f2:00:f7:22:57:fb:99:aa:86:31:57:52: 73:4d:25:ae:d4:0a:82:ae:60:21:e3:6f:fe:7b:d2: 2c:b2:9c:e1:8e:da:24:4f:92:76:ee:a6:7d:cd:54: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2B:EE:CA:EA:5B:5E:45:75:2F:50:43:43:5E:F6:74:42:B8:70:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caca6911-55fb-359f-aa7c-526e85cc06d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d5:fd:0b:fc:58:0d:e4:7d:20:2e:7d:06:ea:36:63:d0:3c: 32:35:c9:6d:67:34:3e:30:77:36:c9:08:c8:09:84:f7:04:69: 57:1f:b6:9b:13:66:dd:1b:a9:e6:ca:3d:f9:ec:0b:13:79:6f: c0:e2:4b:fc:15:36:07:9d:b3:21:6c:c0:35:88:3f:a3:38:85: b2:72:34:5b:83:ad:70:1c:73:14:f2:82:8a:70:7b:2d:14:ff: 0f:da:55:df:2b:bd:f3:80:0d:7d:36:5f:ae:a2:40:d1:0d:89: db:54:b3:9f:11:93:6c:5d:52:8a:6f:42:2e:2e:bb:ab:68:a0: 92:9d:5f:dc:83:3f:20:0a:55:ad:f9:96:ca:26:64:17:7d:85: f9:95:f0:b3:1b:4a:b7:0b:0b:06:55:6c:94:ae:95:ca:6a:d0: 81:a1:63:32:6d:90:7a:fa:02:9f:ce:b5:e8:69:95:bf:e9:de: 0d:07:9f:ff:c7:08:79:cb:77:45:ee:28:f9:b4:63:d3:c4:82: 93:e2:4f:a4:1b:2f:c1:1d:d3:54:31:79:53:1f:7f:36:f0:af: 78:2d:99:25:51:e2:d8:18:da:4e:60:4c:01:11:c4:75:69:82: de:83:59:b9:e1:7e:54:31:e3:88:16:88:86:e4:63:07:c2:7a: 8e:e6:d6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplheFZtDg1JGRv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjFmYjZhNWYtNTI4Mi00OGU0LThlNTEtNmQyOWE5Mzc2ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUz0UWNeNDFc3OEPAOqRkmipXY00DvcHq7Vs AqHCq3aacg26FZCObn+UU/3uv07ZoLrPP/WU9qESKeoZJZTcCkVIcOIJstJDxG3F n325mgkbc0vJAUfTcwLp9d6m4eLYOg1Bk3WzhvzJkN9qZrDcs5xnItv5FwT5wsYq mc8iSgAYknHdB0WY1f7Vu5bPHLbPHLQy8v0OsmShCaHH3j9uY6CtTqp1sSoPF/Kq k4W1RZ1geMfQFVPN/uALZNSWmYz0PeArbUyomTf2toUCjWXnEk1g3GfyAPciV/uZ qoYxV1JzTSWu1AqCrmAh42/+e9IsspzhjtokT5J27qZ9zVQzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUr7srqW15FdS9QQ0Ne9nRCuHAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FjYTY5MTEtNTVmYi0z NTlmLWFhN2MtNTI2ZTg1Y2MwNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7V/Qv8WA3kfSAufQbqNmPQPDI1yW1nND4wdzbJCMgJhPcEaVcftpsT Zt0bqebKPfnsCxN5b8DiS/wVNgedsyFswDWIP6M4hbJyNFuDrXAccxTygopwey0U /w/aVd8rvfOADX02X66iQNENidtUs58Rk2xdUopvQi4uu6tooJKdX9yDPyAKVa35 lsomZBd9hfmV8LMbSrcLCwZVbJSulcpq0IGhYzJtkHr6Ap/Otehplb/p3g0Hn//H CHnLd0XuKPm0Y9PEgpPiT6QbL8Ed01QxeVMffzbwr3gtmSVR4tgY2k5gTAERxHVp gt6DWbnhflQx44gWiIbkYwfCeo7m1rs= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:38 2025 by rpki-client