$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa File: d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa (raw, json) Hash identifier: b/OtPoxqKi7SEVY8esFMSh5DIBTdbD061A4oZPe81O4= Subject key identifier: A0:83:A7:B4:D1:C9:9A:8D:24:04:29:B8:28:8F:C6:37:35:73:FC:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848907610E43518493A1425BF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.200.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:10:e4:35:18:49:3a:14:25:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=ca40a93e-56a7-4e4c-a230-c8013a1bfda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:97:0c:33:e5:a1:37:33:a8:8b:e7:58:a2: c6:9b:84:4e:19:0b:64:64:bd:a9:74:55:cd:ac:49: 68:9e:dc:48:87:b3:73:b9:0c:00:e1:44:ce:b3:74: b3:71:dc:33:ed:bb:33:bf:29:9c:cf:d0:7b:e4:f2: 61:ff:24:42:01:b2:f1:93:52:9e:ea:8e:7d:ef:e7: 25:67:91:f3:2b:67:63:e0:23:cd:2d:7f:bd:1a:0b: 2d:92:8b:b9:af:0e:a9:f5:02:78:78:06:28:ea:ae: e8:dd:cc:2a:9d:b2:f1:3c:f0:34:bf:5f:ca:d4:af: 72:7c:fa:f2:29:e3:99:94:b4:71:67:2d:f7:ff:5f: ac:45:f7:2e:ed:31:f5:8a:91:d3:75:87:a8:c4:a5: 16:7d:25:51:59:07:b6:9b:b8:15:39:28:31:02:e2: 4f:16:d0:a9:ec:75:a7:f3:8d:c3:ba:37:cb:bf:a9: b0:1e:8a:a4:01:45:b2:a0:2a:8f:69:21:d3:77:95: 56:2b:44:94:71:36:ee:14:42:2f:4b:aa:a6:77:4f: aa:b8:91:3a:81:6b:58:e5:ec:57:4a:bc:6b:47:97: 0c:df:a1:40:85:2d:c0:b1:82:12:1b:2e:ce:3a:00: 91:95:9a:ca:db:68:d6:69:58:55:3e:e5:56:bc:97: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:A7:B4:D1:C9:9A:8D:24:04:29:B8:28:8F:C6:37:35:73:FC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95cfdf7-08cd-3d99-b68c-603dc053f1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2a:43:6b:1a:c3:06:61:db:dd:7e:1c:41:4a:aa:8e:0c:6e: 29:25:49:35:ec:8d:d0:60:ab:00:a6:50:28:2d:9e:c5:45:6c: 5b:16:37:ff:22:a7:f2:56:f2:41:1b:eb:24:eb:13:22:1b:f9: 67:68:fa:67:71:8d:ca:e5:3f:cb:27:70:29:4e:b6:21:f9:1b: b1:2a:0f:4e:32:d2:28:64:51:80:ba:ae:04:17:a3:6a:fb:86: f0:a1:f4:5b:98:8b:99:3d:da:68:a9:9d:50:5c:42:68:58:8a: ce:e9:01:69:c2:55:aa:00:44:a3:92:70:41:27:c8:77:94:0c: bb:f9:19:06:48:ce:77:81:77:28:b7:07:66:6b:e8:90:4a:49: a0:04:22:f3:71:1e:c1:b5:a8:f7:48:0e:a4:35:83:72:f1:b9: 60:69:d8:e1:5a:b0:2f:c3:06:6d:3e:10:24:e2:13:9e:99:83: 1a:1e:b7:36:d4:8d:b2:33:f3:fc:62:69:79:66:34:81:c6:83: f0:cc:44:33:15:c8:e6:2d:17:66:db:3b:19:df:04:a6:a0:5f: 89:06:80:2f:43:03:40:dd:7a:cb:4d:28:03:29:2c:9a:72:64: 5b:26:07:23:a4:a2:ba:23:40:de:80:89:2c:29:6d:21:69:57: 2e:60:bc:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdhDkNRhJOhQlv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk Y2E0MGE5M2UtNTZhNy00ZTRjLWEyMzAtYzgwMTNhMWJmZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkieXDDPloTczqIvnWKLGm4ROGQtkZL2pdFXN rElontxIh7NzuQwA4UTOs3Szcdwz7bszvymcz9B75PJh/yRCAbLxk1Ke6o597+cl Z5HzK2dj4CPNLX+9Ggstkou5rw6p9QJ4eAYo6q7o3cwqnbLxPPA0v1/K1K9yfPry KeOZlLRxZy33/1+sRfcu7TH1ipHTdYeoxKUWfSVRWQe2m7gVOSgxAuJPFtCp7HWn 843DujfLv6mwHoqkAUWyoCqPaSHTd5VWK0SUcTbuFEIvS6qmd0+quJE6gWtY5exX SrxrR5cM36FAhS3AsYISGy7OOgCRlZrK22jWaVhVPuVWvJe+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCDp7TRyZqNJAQpuCiPxjc1c/xeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk1Y2ZkZjctMDhjZC0z ZDk5LWI2OGMtNjAzZGMwNTNmMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8giMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgqQ2sawwZh291+HEFKqo4MbiklSTXsjdBgqwCmUCgtnsVFbFsWN/8i p/JW8kEb6yTrEyIb+Wdo+mdxjcrlP8sncClOtiH5G7EqD04y0ihkUYC6rgQXo2r7 hvCh9FuYi5k92mipnVBcQmhYis7pAWnCVaoARKOScEEnyHeUDLv5GQZIzneBdyi3 B2Zr6JBKSaAEIvNxHsG1qPdIDqQ1g3LxuWBp2OFasC/DBm0+ECTiE56ZgxoetzbU jbIz8/xiaXlmNIHGg/DMRDMVyOYtF2bbOxnfBKagX4kGgC9DA0DdestNKAMpLJpy ZFsmByOkorojQN6AiSwpbSFpVy5gvDE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:38 2025 by rpki-client