$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa File: dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa (raw, json) Hash identifier: QfQJ4al/TW8WMewvyHiEsOcTnRkIPtyr40VOrFKwN4A= Subject key identifier: 4F:CD:1D:A6:6C:3D:A9:28:7C:66:4D:72:3C:AA:F5:30:1B:57:72:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FBF1266700C2C1E5AEE7D800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 20940 IP address blocks: 23.197.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:26:67:00:c2:c1:e5:ae:e7:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=0d1b66b2-fa23-452e-b5a0-7f84be93227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:58:67:20:2f:76:92:c3:05:02:56:e6:33: a4:66:e8:cd:69:c8:bd:8c:0f:61:da:f0:8f:95:57: 64:7a:36:6d:be:78:25:02:d3:76:84:f1:77:e8:8d: 69:99:ec:5f:ea:e2:3a:9a:5c:40:ce:13:62:61:a7: 78:1b:2f:13:03:77:99:60:db:01:25:89:7c:23:20: 23:72:d0:3d:44:62:52:18:14:2d:3d:cf:08:71:1b: a4:d6:24:a3:bc:9e:30:1e:c0:6f:df:98:e7:51:04: f9:30:cb:f1:5b:02:06:8b:38:b5:44:80:26:b8:a4: ae:09:68:d8:cd:4c:55:11:63:00:07:57:de:0a:1d: 46:8b:0a:09:a4:14:89:9c:28:19:b9:f3:31:d0:68: fb:7c:32:a1:e1:61:70:a5:c1:bf:96:f8:a2:b4:6d: a7:51:62:71:d3:00:c5:98:7c:21:e5:76:e6:bb:e4: 14:e7:37:11:c2:e4:d1:c9:9e:30:95:cf:2c:b8:7b: 6b:6a:3a:76:e8:91:85:85:c6:a2:35:8f:36:ab:44: 38:71:17:eb:4a:4d:97:a6:ab:e8:36:98:03:e6:75: b5:40:9e:c5:9a:81:24:20:58:16:30:19:be:b2:da: fc:9f:c4:29:46:2b:46:85:b5:88:1d:a6:85:37:4e: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CD:1D:A6:6C:3D:A9:28:7C:66:4D:72:3C:AA:F5:30:1B:57:72:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:59:1f:94:75:07:d2:25:c0:2b:71:2a:41:fc:6c:37:12:ec: fb:e3:cb:92:1a:98:e4:19:d2:81:8f:33:b8:f1:c6:02:33:30: 77:20:73:9b:c8:02:c1:ef:7c:ed:ab:6c:e3:3b:cc:77:26:d8: 55:dd:a1:61:07:e8:1d:4a:7b:a9:2c:93:04:a5:5b:c6:1e:28: 2d:b0:2c:97:cc:fa:48:f1:04:bd:1f:c8:cb:d9:f8:84:67:a3: dc:8a:7d:cf:a8:96:7f:d8:cf:06:c7:08:b8:7c:8a:df:bb:42: 55:7e:e2:89:cc:a7:fe:d9:bd:8e:b3:f2:10:ed:0e:f2:14:44: db:f9:00:e7:18:40:bd:42:12:70:5a:8f:bb:50:26:3d:b2:9c: 32:c6:47:0f:0e:31:ba:20:ca:07:02:71:d6:cc:62:8e:25:d4: 8c:a0:cc:2f:1c:29:2a:32:e4:58:ae:7b:ec:83:e8:b4:c3:f5: 9e:c8:10:b8:6b:a0:d3:91:5f:99:28:96:ff:87:e4:ef:91:09: 1b:52:d6:d8:92:ff:2f:e7:05:f1:01:78:1f:61:6e:30:5d:9f: ca:74:2c:0b:7b:b7:f9:f4:5d:a9:a6:f0:ae:65:80:e5:4f:ce: fc:71:fb:eb:ff:9b:de:d9:66:0e:56:f2:74:c4:77:4a:46:ad: e9:65:f7:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78SZnAMLB5a7n2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk MGQxYjY2YjItZmEyMy00NTJlLWI1YTAtN2Y4NGJlOTMyMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yNYZyAvdpLDBQJW5jOkZujNaci9jA9h2vCP lVdkejZtvnglAtN2hPF36I1pmexf6uI6mlxAzhNiYad4Gy8TA3eZYNsBJYl8IyAj ctA9RGJSGBQtPc8IcRuk1iSjvJ4wHsBv35jnUQT5MMvxWwIGizi1RIAmuKSuCWjY zUxVEWMAB1feCh1GiwoJpBSJnCgZufMx0Gj7fDKh4WFwpcG/lviitG2nUWJx0wDF mHwh5Xbmu+QU5zcRwuTRyZ4wlc8suHtrajp26JGFhcaiNY82q0Q4cRfrSk2Xpqvo NpgD5nW1QJ7FmoEkIFgWMBm+str8n8QpRitGhbWIHaaFN06BxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/NHaZsPakofGZNcjyq9TAbV3JqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFlNDdmMTktYTQ1Mi0z NjVkLWE0NWEtODlmNWU0ZDhiOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhZH5R1B9IlwCtxKkH8bDcS7Pvjy5IamOQZ0oGPM7jxxgIzMHcgc5vI AsHvfO2rbOM7zHcm2FXdoWEH6B1Ke6kskwSlW8YeKC2wLJfM+kjxBL0fyMvZ+IRn o9yKfc+oln/YzwbHCLh8it+7QlV+4onMp/7ZvY6z8hDtDvIURNv5AOcYQL1CEnBa j7tQJj2ynDLGRw8OMbogygcCcdbMYo4l1IygzC8cKSoy5Fiue+yD6LTD9Z7IELhr oNORX5kolv+H5O+RCRtS1tiS/y/nBfEBeB9hbjBdn8p0LAt7t/n0Xamm8K5lgOVP zvxx++v/m97ZZg5W8nTEd0pGrell9yM= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:43 2025 by rpki-client