$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa File: ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa (raw, json) Hash identifier: oDsa60B+L0cnpINUQh32OvdsSCToCGPX/zwku9xXryU= Subject key identifier: FC:B2:AE:D4:39:7B:AB:AF:08:63:BB:F4:FA:07:5A:07:FF:5C:94:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400E021768A83E42D07E380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.196.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e0:21:76:8a:83:e4:2d:07:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=1c656cd7-de9b-4f71-a7c8-0b3d02267a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:72:14:dd:bd:92:ac:70:32:a7:ad:88:f9: cd:c7:4f:41:72:a0:29:dd:36:7c:6c:4d:51:72:19: 9e:fb:3a:2c:52:f6:76:6b:1d:2d:c2:d3:bc:56:a0: ed:24:c9:94:14:2a:52:c9:a7:76:07:52:3a:d9:b7: 1a:63:06:43:27:26:0a:b2:29:04:57:84:ae:9b:00: 79:e8:e0:10:7a:dd:0b:f2:e7:39:be:8c:92:c0:92: fa:2b:f7:bb:cb:25:0b:fa:ef:a8:1f:d5:3f:f6:5d: b0:bc:03:1b:3f:69:ae:f1:82:64:4b:3f:fc:d9:a5: 4c:7d:4b:ba:e9:3b:6c:72:ca:44:1e:2d:d1:51:5b: f9:06:02:15:f8:3c:cb:62:3e:12:79:65:0e:fc:93: 2e:08:2c:52:b4:7f:48:90:0b:11:d8:bf:d9:51:9d: d4:1f:ad:62:80:4d:44:5e:c2:35:d1:af:9d:3d:01: 43:bd:0b:29:24:c8:ad:3e:a9:f9:03:95:fd:50:b5: 12:50:96:e9:51:4a:48:4b:3c:f4:b3:84:ad:4a:4f: 60:e1:9b:82:e6:7b:5d:13:b4:d7:e5:0b:df:52:cf: 27:0e:fd:bf:fb:75:5d:fb:0b:53:18:03:69:34:9f: 09:f8:a8:67:40:30:76:f9:10:31:99:f6:87:b0:8c: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B2:AE:D4:39:7B:AB:AF:08:63:BB:F4:FA:07:5A:07:FF:5C:94:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:54:d5:42:4d:9f:c5:60:fd:f8:fd:3f:2b:4a:72:36:a7:7a: 95:15:d4:41:66:80:26:3b:c5:11:8b:32:3a:79:36:32:c8:87: 3b:9f:94:49:6d:98:88:57:fd:ec:5a:8b:df:a3:be:e5:33:9d: 3f:e5:a7:96:71:e0:e8:03:61:7e:de:90:5e:07:61:02:2b:72: 4f:c7:b7:c4:52:e9:b8:f7:5e:54:45:00:46:94:9e:43:50:60: 3a:2c:05:95:16:96:86:e1:41:b5:fc:7f:cf:d4:aa:64:ac:f9: f6:6e:2b:9e:f0:7c:78:36:5f:da:92:68:60:7b:9c:db:c3:7c: df:87:d4:da:79:07:0f:81:3a:1c:49:53:0a:43:0a:4d:c3:ce: 0a:fe:b7:f5:dc:34:cf:0a:1c:cd:5d:6d:08:74:89:52:b6:fd: d8:35:ef:46:15:17:ae:6d:66:0a:86:d0:d6:dd:80:7b:91:fc: f8:37:b3:4f:8a:6b:f8:4d:97:ec:a6:b4:49:d0:3f:65:90:50: 28:8b:0b:1f:fe:b9:bc:74:22:7d:8a:d9:32:73:bf:33:04:8a: 37:8c:f2:da:60:e2:2d:6a:83:41:78:86:b7:db:04:ed:4f:eb: 3d:98:2f:3c:ce:ad:e8:bd:73:0d:db:20:33:37:46:72:9d:0e: 9a:f4:be:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAOAhdoqD5C0H44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MWM2NTZjZDctZGU5Yi00ZjcxLWE3YzgtMGIzZDAyMjY3YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn95yFN29kqxwMqetiPnNx09BcqAp3TZ8bE1R chme+zosUvZ2ax0twtO8VqDtJMmUFCpSyad2B1I62bcaYwZDJyYKsikEV4SumwB5 6OAQet0L8uc5voySwJL6K/e7yyUL+u+oH9U/9l2wvAMbP2mu8YJkSz/82aVMfUu6 6TtscspEHi3RUVv5BgIV+DzLYj4SeWUO/JMuCCxStH9IkAsR2L/ZUZ3UH61igE1E XsI10a+dPQFDvQspJMitPqn5A5X9ULUSUJbpUUpISzz0s4StSk9g4ZuC5ntdE7TX 5QvfUs8nDv2/+3Vd+wtTGANpNJ8J+KhnQDB2+RAxmfaHsIyqaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyyrtQ5e6uvCGO79PoHWgf/XJRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U2Y2I4OTQtZjNkMC0z Y2E2LTk4MjAtODNmMzY2NTg3YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8TuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNU1UJNn8Vg/fj9PytKcjanepUV1EFmgCY7xRGLMjp5NjLIhzuflElt mIhX/exai9+jvuUznT/lp5Zx4OgDYX7ekF4HYQIrck/Ht8RS6bj3XlRFAEaUnkNQ YDosBZUWlobhQbX8f8/UqmSs+fZuK57wfHg2X9qSaGB7nNvDfN+H1Np5Bw+BOhxJ UwpDCk3Dzgr+t/XcNM8KHM1dbQh0iVK2/dg170YVF65tZgqG0NbdgHuR/Pg3s0+K a/hNl+ymtEnQP2WQUCiLCx/+ubx0In2K2TJzvzMEijeM8tpg4i1qg0F4hrfbBO1P 6z2YLzzOrei9cw3bIDM3RnKdDpr0vig= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:29 2025 by rpki-client