$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da2e7354-8976-3232-9080-07a1c19f0679.roa File: da2e7354-8976-3232-9080-07a1c19f0679.roa (raw, json) Hash identifier: nYdawhKDDqpJ4cpZL+8yFbH9gXmIVZnuP4iv3hAIrMs= Subject key identifier: E3:0A:E8:B2:EA:B4:50:ED:31:8A:11:DE:71:D7:7C:D8:29:1D:BB:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C5763E64E4770D846CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da2e7354-8976-3232-9080-07a1c19f0679.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 7713 IP address blocks: 23.193.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c5:76:3e:64:e4:77:0d:84:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=3504ac02-b858-4aa1-91e2-af0ac9120988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:64:f9:c8:c6:58:30:56:d4:c6:ae:ac:b8: 97:5c:89:de:42:06:b5:02:87:00:09:24:8d:f5:05: 67:16:6e:46:b1:df:d9:64:f2:a7:67:26:c2:45:f1: d3:c6:94:1c:4a:e1:96:11:56:6c:83:1d:52:c2:87: c7:06:87:e6:4a:38:19:b7:88:07:d0:e4:0c:cb:c5: 40:ff:0c:eb:43:56:8e:d5:66:16:0a:a2:08:b2:55: 8a:5f:c3:7d:89:3e:87:25:1f:20:80:98:8d:38:a9: 30:80:78:7e:75:1f:e3:ca:86:89:20:2e:0f:c7:7a: a7:a4:6b:a9:51:2b:33:15:73:87:d5:97:a4:18:e7: d6:bc:24:81:ab:d0:5e:68:3a:f5:bc:8e:e9:24:7e: f5:6d:af:1a:18:d3:94:33:2d:f4:bb:5a:27:3b:49: 62:c3:30:5c:51:81:f4:61:f7:2b:cb:20:fb:e4:0b: 7f:12:38:65:32:a0:6b:24:85:27:66:5f:d2:8b:a8: f9:e9:9f:ee:24:98:bd:83:f2:fd:1c:4b:eb:8e:50: 2a:23:90:2c:6f:af:93:12:29:4a:b6:cc:95:a2:18: 44:d4:10:f3:f6:47:d2:98:3f:35:ae:66:d8:47:c0: 13:07:9c:ce:54:10:3c:0d:d9:65:f2:0a:d6:86:28: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0A:E8:B2:EA:B4:50:ED:31:8A:11:DE:71:D7:7C:D8:29:1D:BB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da2e7354-8976-3232-9080-07a1c19f0679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e2:b9:fc:2b:1d:86:ca:1d:ee:12:51:5d:b3:33:02:d7:64: 0d:06:4c:c6:f7:90:f5:bd:3c:48:9e:5e:c5:2a:96:0d:89:10: e2:4b:4a:fc:25:62:14:fc:b7:86:c0:2f:ff:53:91:1d:c7:e7: f2:40:be:24:80:07:49:e5:5d:30:e8:02:01:9f:01:43:b9:67: 68:bb:84:1b:b4:16:05:22:ba:46:40:46:4c:4e:64:4e:c9:d7: e4:e8:58:11:0b:23:c0:e0:02:a3:80:22:0d:7b:86:0b:5a:0a: 06:e4:b0:41:db:11:c7:f3:f2:43:02:b8:45:e3:be:ab:7f:e5: ef:03:24:13:bf:36:d9:21:0d:01:d8:8a:e3:06:21:2c:ba:24: 05:24:f8:ca:04:59:29:77:6f:aa:a8:7e:fc:5d:54:5d:f7:fb: 90:9c:70:d2:b0:26:ea:04:9b:3b:f1:aa:72:c1:6c:65:95:45: 05:b9:5b:74:d5:89:de:03:d7:da:24:ae:31:a5:e6:d1:53:30: 4c:4f:a7:6f:92:4d:68:c3:db:6e:13:29:4b:63:ad:48:51:cc: eb:d8:d8:6f:44:19:02:2b:c8:35:4e:87:91:cb:21:a8:04:84: 0f:ee:65:c0:85:b8:63:af:e4:56:31:19:9f:e4:15:e7:3a:9d: 04:2e:87:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMV2PmTkdw2EbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MzUwNGFjMDItYjg1OC00YWExLTkxZTItYWYwYWM5MTIwOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DNk+cjGWDBW1MaurLiXXIneQga1AocACSSN 9QVnFm5Gsd/ZZPKnZybCRfHTxpQcSuGWEVZsgx1SwofHBofmSjgZt4gH0OQMy8VA /wzrQ1aO1WYWCqIIslWKX8N9iT6HJR8ggJiNOKkwgHh+dR/jyoaJIC4Px3qnpGup USszFXOH1ZekGOfWvCSBq9BeaDr1vI7pJH71ba8aGNOUMy30u1onO0liwzBcUYH0 YfcryyD75At/EjhlMqBrJIUnZl/Si6j56Z/uJJi9g/L9HEvrjlAqI5Asb6+TEilK tsyVohhE1BDz9kfSmD81rmbYR8ATB5zOVBA8Ddll8grWhijmfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMK6LLqtFDtMYoR3nHXfNgpHbuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEyZTczNTQtODk3Ni0z MjMyLTkwODAtMDdhMWMxOWYwNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTiufwrHYbKHe4SUV2zMwLXZA0GTMb3kPW9PEieXsUqlg2JEOJLSvwl YhT8t4bAL/9TkR3H5/JAviSAB0nlXTDoAgGfAUO5Z2i7hBu0FgUiukZARkxOZE7J 1+ToWBELI8DgAqOAIg17hgtaCgbksEHbEcfz8kMCuEXjvqt/5e8DJBO/NtkhDQHY iuMGISy6JAUk+MoEWSl3b6qofvxdVF33+5CccNKwJuoEmzvxqnLBbGWVRQW5W3TV id4D19okrjGl5tFTMExPp2+STWjD224TKUtjrUhRzOvY2G9EGQIryDVOh5HLIagE hA/uZcCFuGOv5FYxGZ/kFec6nQQuh20= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:08 2025 by rpki-client