$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2c9ee38-62e7-3eac-9361-42d123495836.roa File: d2c9ee38-62e7-3eac-9361-42d123495836.roa (raw, json) Hash identifier: Hffmn0I3PunmGOltQGr76JnXp30l38rW8tjHKOP6f0Y= Subject key identifier: 86:7A:C8:87:F5:E1:07:84:3D:87:3D:0E:4E:F3:28:91:6B:10:F4:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400E0E49B05FE2DC0378FE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2c9ee38-62e7-3eac-9361-42d123495836.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.197.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e0:e4:9b:05:fe:2d:c0:37:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=9e19d976-cac9-4690-9a9b-803cc6c54f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:74:95:c7:30:36:96:5a:3c:fd:d9:e5:4b: f2:f0:48:a8:6a:98:ea:04:bf:3b:a8:cb:66:e4:2d: 56:6b:53:c4:2b:7b:d5:e6:26:4e:9e:a6:6f:22:fa: 59:4c:8c:40:b7:3d:7f:b4:16:fb:63:9c:4d:f7:2d: 74:36:91:ca:7a:e6:e1:3c:d3:1e:27:6d:0d:28:37: d0:db:ce:7e:4f:ab:ba:9e:9b:65:7f:f1:3f:68:76: 77:bb:bb:8a:4f:a5:c5:4b:35:c7:4d:fa:8a:be:26: b0:e0:72:78:60:16:33:09:1b:7d:1a:c6:68:ee:b2: 14:ac:fc:29:62:28:24:49:3d:77:6a:bb:69:a1:60: 0c:e5:16:c8:78:48:b9:aa:7c:92:fe:a8:e4:52:2a: e4:23:7f:ff:ed:f3:a5:08:69:8b:8a:d8:d2:ef:bf: 09:57:c4:eb:62:72:d5:be:ed:d7:c7:dd:74:86:cc: 81:3a:3d:80:e4:3b:86:8f:cf:6a:bf:d6:6f:36:b4: 16:fa:f6:76:36:15:71:69:bf:2c:3b:98:f8:bf:03: a8:f4:c7:b0:86:5d:92:0d:84:e1:f5:b1:4b:32:bb: c1:46:93:6e:cc:04:4d:5c:df:b8:e2:84:be:3b:b6: 16:af:52:b7:4c:7e:07:2e:60:c1:41:d5:e2:bc:eb: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7A:C8:87:F5:E1:07:84:3D:87:3D:0E:4E:F3:28:91:6B:10:F4:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2c9ee38-62e7-3eac-9361-42d123495836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0e:d2:57:b9:83:8a:a0:3b:51:77:1a:e0:db:e2:8a:c6:6f: c3:5e:97:1b:b6:06:22:bc:1f:08:a7:59:d0:4e:38:b2:fc:c4: c4:ee:e2:f9:8b:7c:d9:87:88:f5:35:40:93:19:34:31:30:06: cc:3a:7d:26:9a:8b:1d:57:f2:57:58:d4:31:ff:49:57:a4:6f: 6e:2e:f3:ef:33:07:0a:fc:77:31:c0:cf:79:c6:71:21:11:2e: 65:e8:17:32:ea:0c:72:ab:77:ed:3c:11:01:65:d7:88:67:2c: 9a:9f:bc:f5:79:c2:6a:80:64:60:fa:07:c8:a5:ff:5b:bc:4f: 6a:ae:aa:50:8d:3d:a7:f8:99:4a:8f:3e:68:08:11:63:24:e6: e1:9e:70:ac:9a:a9:a0:ad:66:27:0e:f8:68:bc:fb:dc:b9:3b: 4b:e9:ea:78:85:09:b9:39:1e:f1:e1:05:8c:f5:f4:a2:f7:98: 01:65:3d:21:d7:ff:61:45:1c:62:e0:f0:33:19:b5:d3:ee:91: 03:04:72:2f:38:a9:c2:5f:17:d4:a7:66:92:4b:25:74:80:32: 4c:8f:56:e0:e6:fd:14:6e:23:35:97:ef:3b:ec:cf:5d:9a:2c: cc:69:01:d4:7b:81:04:40:1c:3b:5f:32:f4:3a:d7:f3:11:fa: 92:ac:71:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAODkmwX+LcA3j+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OWUxOWQ5NzYtY2FjOS00NjkwLTlhOWItODAzY2M2YzU0ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjR0lccwNpZaPP3Z5Uvy8EioapjqBL87qMtm 5C1Wa1PEK3vV5iZOnqZvIvpZTIxAtz1/tBb7Y5xN9y10NpHKeubhPNMeJ20NKDfQ 285+T6u6nptlf/E/aHZ3u7uKT6XFSzXHTfqKviaw4HJ4YBYzCRt9GsZo7rIUrPwp YigkST13artpoWAM5RbIeEi5qnyS/qjkUirkI3//7fOlCGmLitjS778JV8TrYnLV vu3Xx910hsyBOj2A5DuGj89qv9ZvNrQW+vZ2NhVxab8sO5j4vwOo9Mewhl2SDYTh 9bFLMrvBRpNuzARNXN+44oS+O7YWr1K3TH4HLmDBQdXivOvKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ6yIf14QeEPYc9Dk7zKJFrEPTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJjOWVlMzgtNjJlNy0z ZWFjLTkzNjEtNDJkMTIzNDk1ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0O0le5g4qgO1F3GuDb4orGb8Nelxu2BiK8HwinWdBOOLL8xMTu4vmL fNmHiPU1QJMZNDEwBsw6fSaaix1X8ldY1DH/SVekb24u8+8zBwr8dzHAz3nGcSER LmXoFzLqDHKrd+08EQFl14hnLJqfvPV5wmqAZGD6B8il/1u8T2quqlCNPaf4mUqP PmgIEWMk5uGecKyaqaCtZicO+Gi8+9y5O0vp6niFCbk5HvHhBYz19KL3mAFlPSHX /2FFHGLg8DMZtdPukQMEci84qcJfF9SnZpJLJXSAMkyPVuDm/RRuIzWX7zvsz12a LMxpAdR7gQRAHDtfMvQ61/MR+pKscX0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:41 2025 by rpki-client