$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ac1fcb-938f-3472-b7ed-da2dbd104ae0.roa File: d7ac1fcb-938f-3472-b7ed-da2dbd104ae0.roa (raw, json) Hash identifier: qACLoLQIfAyvG7b8Hms3UjYXhyl2S4ip2LqRoWmr3Fc= Subject key identifier: 99:09:41:45:7B:4A:C1:DB:AC:E3:94:C4:A6:D7:EA:F7:17:F9:2E:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A996681ED5D2F58C20863570 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ac1fcb-938f-3472-b7ed-da2dbd104ae0.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 23.202.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:68:1e:d5:d2:f5:8c:20:86:35:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=5161c956-9893-4258-92d3-1532573ddba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:fc:75:d3:39:ac:fb:05:78:b8:08:07:66: 82:a5:ba:5b:5a:5a:d7:eb:0e:f5:2d:03:da:93:76: 9b:ba:d5:c0:98:e7:8e:39:52:bf:ab:91:89:31:6f: 3c:45:ef:cb:21:d4:08:f5:d1:e4:7e:81:83:2c:30: 5e:6d:fa:83:e0:76:7f:ff:cd:47:87:2c:24:ef:b9: ee:01:bf:62:de:8e:5d:36:3b:d6:f4:f2:6b:bb:7a: 55:88:7b:cc:a2:00:26:ef:04:a5:54:80:72:8e:f9: fc:9d:d3:d2:36:a8:8b:4d:b6:dd:d9:88:95:0e:ed: 5e:a0:da:00:b9:48:b9:25:f4:c5:4d:b7:81:4c:39: f0:64:71:34:94:80:38:e0:96:72:7e:78:93:ec:2d: 78:e9:b2:ab:22:fe:a1:ae:aa:18:59:1b:e7:e4:aa: dc:9b:f3:94:50:6d:fc:51:37:95:d3:73:f6:95:df: 7b:00:ce:1b:f6:19:1e:b0:09:2c:b7:e7:8c:20:1b: 31:db:63:ad:7e:ca:56:da:7f:10:26:f7:cd:5e:94: 0b:60:36:31:6c:6a:37:8a:68:15:1a:19:01:4a:f9: c0:da:07:55:b3:e2:48:08:20:1c:b2:11:f5:d9:6a: ed:ab:f3:da:0f:2e:a8:a1:81:3a:27:b2:1b:fa:7e: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:09:41:45:7B:4A:C1:DB:AC:E3:94:C4:A6:D7:EA:F7:17:F9:2E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ac1fcb-938f-3472-b7ed-da2dbd104ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:35:85:0a:47:ec:06:7c:4b:df:9b:5d:47:12:82:f8:11:e8: 46:49:fb:79:58:18:8d:4f:75:5a:4c:8a:cb:53:09:f1:01:0f: e6:4d:46:6f:d9:0d:41:ea:96:84:6b:df:91:5c:0b:65:39:f5: e0:b7:e7:0d:d4:a7:2e:d1:c2:7f:de:f6:97:51:73:8f:19:0b: 59:d0:c9:6d:3c:68:0a:0c:a1:7b:dc:7a:8d:7a:77:55:02:e2: 81:fd:48:fd:f6:81:77:e3:fb:a4:44:79:ed:56:be:a8:f9:ec: e9:a5:fa:b5:d4:92:64:42:69:7e:a2:f6:b7:be:7e:be:ac:91: bc:c0:25:08:e1:8a:72:32:e5:5f:1b:00:68:3c:de:e5:a0:5c: 99:e3:a3:84:7c:fa:15:e6:39:8f:e2:5e:fc:50:de:23:59:8a: 87:b7:42:40:40:81:3d:0f:2c:0b:84:21:49:38:83:82:49:36: 04:cf:b8:6c:7a:e8:21:22:4e:f2:c4:bb:06:cb:63:73:c2:5e: 3e:34:23:cd:0e:b1:78:7b:e2:0e:31:09:20:2a:02:7d:49:c1: 6f:4c:66:93:15:64:d7:b0:eb:43:49:91:a4:ac:46:24:8e:6f: 97:a3:4b:21:de:b6:d9:1e:dc:5a:2a:96:dc:21:34:84:5d:27: e0:5b:24:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmge1dL1jCCGNXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTE2MWM5NTYtOTg5My00MjU4LTkyZDMtMTUzMjU3M2RkYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyL8ddM5rPsFeLgIB2aCpbpbWlrX6w71LQPa k3abutXAmOeOOVK/q5GJMW88Re/LIdQI9dHkfoGDLDBebfqD4HZ//81Hhywk77nu Ab9i3o5dNjvW9PJru3pViHvMogAm7wSlVIByjvn8ndPSNqiLTbbd2YiVDu1eoNoA uUi5JfTFTbeBTDnwZHE0lIA44JZyfniT7C146bKrIv6hrqoYWRvn5Krcm/OUUG38 UTeV03P2ld97AM4b9hkesAkst+eMIBsx22OtfspW2n8QJvfNXpQLYDYxbGo3imgV GhkBSvnA2gdVs+JICCAcshH12Wrtq/PaDy6ooYE6J7Ib+n5S5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkJQUV7SsHbrOOUxKbX6vcX+S7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdhYzFmY2ItOTM4Zi0z NDcyLWI3ZWQtZGEyZGJkMTA0YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw1hQpH7AZ8S9+bXUcSgvgR6EZJ+3lYGI1PdVpMistTCfEBD+ZNRm/Z DUHqloRr35FcC2U59eC35w3Upy7Rwn/e9pdRc48ZC1nQyW08aAoMoXvceo16d1UC 4oH9SP32gXfj+6REee1Wvqj57Oml+rXUkmRCaX6i9re+fr6skbzAJQjhinIy5V8b AGg83uWgXJnjo4R8+hXmOY/iXvxQ3iNZioe3QkBAgT0PLAuEIUk4g4JJNgTPuGx6 6CEiTvLEuwbLY3PCXj40I80OsXh74g4xCSAqAn1JwW9MZpMVZNew60NJkaSsRiSO b5ejSyHettke3FoqltwhNIRdJ+BbJN4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:49 2025 by rpki-client