$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa File: d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa (raw, json) Hash identifier: UOzKcpL13KkRtMVh+Av9CNpEvGJZkvhPuoY72PnZBDM= Subject key identifier: D4:03:A6:11:9F:1B:41:D1:AF:BE:64:73:B9:7E:8D:16:76:7F:1D:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400D9CD1DD835D7B2BEFB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.193.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d9:cd:1d:d8:35:d7:b2:be:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=4c23f192-b864-4128-9598-46003e0d1fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:07:e7:87:6b:ad:03:89:c5:5c:03:1c:44: 19:9a:48:78:bc:98:1d:71:f1:5b:3d:8a:b2:5f:fb: 3f:72:aa:87:b6:ac:bb:4a:41:cc:1b:70:3b:df:b6: dc:2e:24:1a:f4:c5:ac:7b:d3:7f:67:ec:36:fd:e2: 7a:92:6e:41:5a:25:8d:68:61:4c:e4:3a:d3:02:02: bb:1d:43:1f:13:8d:eb:a2:06:2a:e7:d4:49:5a:a6: 01:cf:21:7a:49:80:36:f9:ce:f2:68:91:83:3b:bc: 53:a7:a9:4d:2c:0e:1f:cd:db:7e:17:48:79:81:16: 97:96:eb:10:3c:f9:72:86:a6:f7:dd:31:cd:5c:cc: d9:12:d4:0b:35:d3:a4:b7:e8:ca:f7:46:b0:40:a2: ed:d1:a2:e3:99:31:e9:19:01:bd:19:10:ae:d2:96: b2:b3:41:23:17:00:3e:81:64:85:71:88:ff:2e:7c: 30:35:1f:32:62:89:96:2b:f8:18:13:56:e1:c6:22: c1:00:10:17:45:29:ac:2a:7e:77:71:6d:b6:63:e7: ef:11:0f:1a:d8:8b:c9:1a:08:fd:26:fd:e5:c9:81: 3b:27:4b:5e:d7:98:ba:08:5a:93:61:3c:d0:1f:19: 1b:c8:a7:88:35:6e:3f:29:e7:2f:c5:a8:60:25:0a: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:03:A6:11:9F:1B:41:D1:AF:BE:64:73:B9:7E:8D:16:76:7F:1D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d05be79f-a6bf-3f27-a8e5-0bf670dbd128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:01:ae:5f:8f:7b:45:d7:56:f1:9c:99:4a:ca:a0:83:52:1c: a1:ce:13:8d:1c:69:7c:6b:c6:f3:1e:4f:d8:2d:f7:ed:f1:1e: 8a:a3:65:43:c5:08:35:48:5e:2d:6f:f3:fe:4c:df:b0:a9:78: 1d:0b:9a:17:aa:32:a8:be:51:5e:35:b6:64:38:77:83:6c:c8: 6d:19:ee:a3:8f:bf:1a:e0:07:f0:5c:ba:13:08:46:c6:b1:9e: af:c3:93:f7:55:c6:61:ec:3c:66:8d:1a:5c:f3:fe:bd:3f:2b: 72:b3:e2:e6:08:88:5e:1a:7d:4f:99:01:63:2c:ef:9c:2a:20: df:65:fa:fa:2c:46:be:17:57:bf:88:6c:9d:10:da:b3:f2:b4: a9:61:77:20:7e:90:72:6c:76:b8:36:68:6e:d4:99:75:e6:c6: 29:b3:92:f0:17:fb:08:5b:15:99:dd:8f:3a:6e:73:5e:87:64: 73:e0:a2:27:cf:fd:85:b2:57:ca:4a:e2:af:0c:62:5b:83:5f: 5d:b5:9d:1f:e1:d8:cb:ad:37:9a:b0:56:f5:16:64:89:90:ba: 77:e5:f1:d9:ca:52:3d:b5:ce:4e:5c:66:2e:e1:46:0f:dc:aa: 2b:e4:c4:f5:8f:0a:b8:11:b7:31:c4:13:c0:e3:46:28:d6:18: d8:9b:b4:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANnNHdg117K++wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NGMyM2YxOTItYjg2NC00MTI4LTk1OTgtNDYwMDNlMGQxZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilsH54drrQOJxVwDHEQZmkh4vJgdcfFbPYqy X/s/cqqHtqy7SkHMG3A737bcLiQa9MWse9N/Z+w2/eJ6km5BWiWNaGFM5DrTAgK7 HUMfE43rogYq59RJWqYBzyF6SYA2+c7yaJGDO7xTp6lNLA4fzdt+F0h5gRaXlusQ PPlyhqb33THNXMzZEtQLNdOkt+jK90awQKLt0aLjmTHpGQG9GRCu0pays0EjFwA+ gWSFcYj/LnwwNR8yYomWK/gYE1bhxiLBABAXRSmsKn53cW22Y+fvEQ8a2IvJGgj9 Jv3lyYE7J0te15i6CFqTYTzQHxkbyKeINW4/KecvxahgJQqcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQDphGfG0HRr75kc7l+jRZ2fx2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDA1YmU3OWYtYTZiZi0z ZjI3LWE4ZTUtMGJmNjcwZGJkMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIBrl+Pe0XXVvGcmUrKoINSHKHOE40caXxrxvMeT9gt9+3xHoqjZUPF CDVIXi1v8/5M37CpeB0LmheqMqi+UV41tmQ4d4NsyG0Z7qOPvxrgB/BcuhMIRsax nq/Dk/dVxmHsPGaNGlzz/r0/K3Kz4uYIiF4afU+ZAWMs75wqIN9l+vosRr4XV7+I bJ0Q2rPytKlhdyB+kHJsdrg2aG7UmXXmximzkvAX+whbFZndjzpuc16HZHPgoifP /YWyV8pK4q8MYluDX121nR/h2MutN5qwVvUWZImQunfl8dnKUj21zk5cZi7hRg/c qivkxPWPCrgRtzHEE8DjRijWGNibtPY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:12:57 2025 by rpki-client