$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8804c1f-6e1b-33c2-9621-fb17d332e324.roa File: d8804c1f-6e1b-33c2-9621-fb17d332e324.roa (raw, json) Hash identifier: 6N/NaOAFgEhPBAbI5t1SYCc+QFV1fU1g6kBuvySzu1k= Subject key identifier: E5:9A:BE:9A:31:74:6F:66:08:10:5D:5C:DA:E3:78:7B:E7:D2:48:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830CC3579D3D59F867D9F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8804c1f-6e1b-33c2-9621-fb17d332e324.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.200.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:cc:35:79:d3:d5:9f:86:7d:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=ff0eea29-2690-46a8-8234-906f9e613505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:c7:fb:b5:c7:3b:4d:3f:43:14:d1:e4:d2: 7a:15:65:ce:cc:dd:d9:dc:ce:73:66:09:36:ee:53: cd:87:5f:4f:cd:1e:8b:90:f9:da:c6:9b:75:80:3a: aa:ba:6a:41:14:b4:82:64:d6:db:12:e9:82:50:e3: ff:aa:0b:6a:63:ee:2f:5f:7d:25:49:eb:a2:07:72: f2:04:96:e2:9f:b3:eb:2a:14:d2:37:ba:21:b2:5c: 3b:dd:b3:90:ba:05:62:53:06:55:5a:4b:6c:e8:ae: 5c:ba:f6:ce:ca:f8:ce:09:4f:94:34:5b:38:0b:74: 15:31:7f:3a:5b:db:7f:d2:a6:25:71:f0:70:12:38: a5:4e:54:4f:63:0e:85:6f:75:2c:52:67:ce:2c:c3: ba:9c:ca:6f:70:44:b4:49:f6:11:e2:c0:be:c3:b9: ce:5f:e1:a3:70:d6:3a:b1:99:3d:69:8b:8a:2c:9f: b1:5f:09:47:15:2c:d1:85:75:d0:b8:df:8a:4b:0a: ca:d7:f9:f2:f5:32:0c:d7:d5:37:fb:fe:39:f8:b6: 82:ca:4d:ae:92:99:91:c2:0f:ea:2b:2a:c9:68:bb: bc:0b:34:5b:82:16:1f:fb:de:f6:ef:3c:e8:17:07: f1:78:ca:6d:48:4b:c6:25:f1:4e:a2:10:de:2b:51: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9A:BE:9A:31:74:6F:66:08:10:5D:5C:DA:E3:78:7B:E7:D2:48:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8804c1f-6e1b-33c2-9621-fb17d332e324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:71:fd:71:8b:f6:ef:e1:b1:4f:0d:6e:b9:2c:fa:c1:a1:d2: 6a:3b:c7:0f:c2:23:5d:0a:d3:68:f9:9c:dc:44:04:21:4a:f0: 6a:9f:bb:9d:52:c1:c3:b6:3e:83:ef:71:19:94:99:c9:98:bd: 25:a2:f1:2e:83:2a:fd:92:31:35:18:34:c6:90:3f:5a:ba:b6: 22:c9:5d:97:6e:2b:b4:f3:08:8b:03:e2:22:1d:9d:63:7f:1c: 22:b6:f6:08:21:81:db:e0:e1:cc:fa:5d:7c:34:98:a7:9f:44: f6:e2:27:48:da:1c:5a:57:67:77:d6:da:7b:f4:f1:e3:53:b6: 4d:07:bf:af:8f:ce:92:2d:b6:1b:98:30:21:fc:09:3f:da:06: 3b:8b:c3:eb:43:5e:0b:6d:11:52:7a:06:95:40:27:cc:6a:c4: 0a:bb:74:d2:91:63:03:68:54:6e:7f:18:47:7a:3f:4d:97:dd: b5:03:28:a0:67:a7:ac:c8:79:f9:53:51:66:a9:27:99:d9:9d: f1:88:04:06:8a:79:e9:9b:ae:9f:38:69:5b:32:65:4d:ce:9d: 98:dd:92:15:74:df:92:af:58:67:56:d4:30:8d:8a:f6:5f:b1: 75:ca:0f:26:1a:2f:b8:75:7b:47:fa:70:ad:1f:e6:a6:04:9a: 5a:f5:a6:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMw1edPVn4Z9nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmYwZWVhMjktMjY5MC00NmE4LTgyMzQtOTA2ZjllNjEzNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAPH+7XHO00/QxTR5NJ6FWXOzN3Z3M5zZgk2 7lPNh19PzR6LkPnaxpt1gDqqumpBFLSCZNbbEumCUOP/qgtqY+4vX30lSeuiB3Ly BJbin7PrKhTSN7ohslw73bOQugViUwZVWkts6K5cuvbOyvjOCU+UNFs4C3QVMX86 W9t/0qYlcfBwEjilTlRPYw6Fb3UsUmfOLMO6nMpvcES0SfYR4sC+w7nOX+GjcNY6 sZk9aYuKLJ+xXwlHFSzRhXXQuN+KSwrK1/ny9TIM19U3+/45+LaCyk2ukpmRwg/q KyrJaLu8CzRbghYf+9727zzoFwfxeMptSEvGJfFOohDeK1G9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWavpoxdG9mCBBdXNrjeHvn0kgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg4MDRjMWYtNmUxYi0z M2MyLTk2MjEtZmIxN2QzMzJlMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5x/XGL9u/hsU8Nbrks+sGh0mo7xw/CI10K02j5nNxEBCFK8Gqfu51S wcO2PoPvcRmUmcmYvSWi8S6DKv2SMTUYNMaQP1q6tiLJXZduK7TzCIsD4iIdnWN/ HCK29gghgdvg4cz6XXw0mKefRPbiJ0jaHFpXZ3fW2nv08eNTtk0Hv6+PzpItthuY MCH8CT/aBjuLw+tDXgttEVJ6BpVAJ8xqxAq7dNKRYwNoVG5/GEd6P02X3bUDKKBn p6zIeflTUWapJ5nZnfGIBAaKeembrp84aVsyZU3OnZjdkhV035KvWGdW1DCNivZf sXXKDyYaL7h1e0f6cK0f5qYEmlr1pso= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:42 2025 by rpki-client