$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbf7a6d1-3c5a-3a8f-8645-777922ab6415.roa File: dbf7a6d1-3c5a-3a8f-8645-777922ab6415.roa (raw, json) Hash identifier: CTBIwPMuWziPYTrhGN1zgFzti3hy3WvBo61DrTEjO/c= Subject key identifier: C1:33:9D:B6:A2:F9:73:30:DB:CC:10:AE:8D:EA:1D:B4:70:28:2B:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858483F8042D7AC76AA78CF5C0600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbf7a6d1-3c5a-3a8f-8645-777922ab6415.roa Signing time: Wed 18 Dec 2024 14:00:52 +0000 ROA not before: Wed 18 Dec 2024 14:00:52 +0000 ROA not after: Tue 18 Mar 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.72.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3f:80:42:d7:ac:76:aa:78:cf:5c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 14:00:52 2024 GMT Not After : Mar 18 13:00:52 2025 GMT Subject: CN=767a003b-ff73-4693-81b3-4a5df80f950d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:ae:96:06:03:a5:c8:34:5e:d6:26:7d:72: 2e:94:06:e7:a3:29:26:74:37:e2:dd:3a:1c:c1:00: c5:50:2d:01:ee:73:40:f8:7e:fe:0a:15:49:81:b6: 9f:9d:f2:f5:01:c7:2f:cb:18:dd:8f:f1:83:a1:12: b3:54:94:fa:bf:aa:c8:eb:3e:59:af:78:c4:f2:32: 51:39:c5:9f:25:a4:4d:db:75:87:e1:56:02:2a:ed: 6a:a9:38:79:05:49:f0:f7:1c:9a:18:07:41:c7:c7: ac:07:18:73:0e:ca:54:53:af:d4:49:da:f1:81:9b: 30:ef:04:dc:21:79:30:34:7f:4d:d2:d2:cb:3f:dc: 04:b0:b3:54:4c:a5:49:e6:52:88:33:cf:20:06:32: 5f:d3:62:9d:e3:30:ba:de:d8:30:8d:10:78:92:6d: 1e:11:e0:99:91:0a:28:4d:54:c9:37:72:f4:19:14: 24:08:65:c3:85:ac:f8:8a:77:bb:a2:50:10:b8:af: bd:00:e3:4d:cc:6b:2e:5e:9f:ec:76:d7:2e:a1:df: a0:e6:2a:a1:9a:90:7a:74:55:9c:18:c8:79:a8:77: 65:68:6c:ff:d5:07:a7:6c:85:80:95:92:22:92:e1: 6f:a0:ba:90:e9:0e:7d:73:0b:fe:5e:b2:d0:70:d8: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:9D:B6:A2:F9:73:30:DB:CC:10:AE:8D:EA:1D:B4:70:28:2B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbf7a6d1-3c5a-3a8f-8645-777922ab6415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:35:92:6b:65:1e:47:09:23:5f:8c:c1:f9:f0:e8:3c:86:5b: 28:b9:72:33:54:80:1e:31:46:3d:f3:6c:97:87:2d:f0:17:5b: af:59:4c:4e:8b:48:a9:1d:2f:21:ac:57:1b:9e:cd:bc:b1:a8: 5e:6f:6f:67:1e:b7:a1:86:bf:31:3d:27:35:1b:9f:a7:f5:b2: 64:2c:0a:f6:0f:44:31:eb:29:11:fd:4e:62:2b:31:46:a7:5e: 1a:63:3e:be:06:33:ee:53:5a:cd:ac:36:ec:35:1a:05:63:28: db:fe:94:12:4d:f1:e2:78:b5:30:ef:1c:f5:ee:7e:a4:7a:ac: 54:f7:87:7d:59:55:87:98:8f:de:91:12:87:b1:b8:4c:bb:c7: 8d:f4:fe:d9:0d:e5:8a:20:c4:3e:de:1f:5e:37:0e:40:02:91: 3a:c3:3e:34:73:08:dd:71:d3:7d:04:4f:c5:86:d1:27:42:d3: 8b:81:f2:78:a6:df:e4:cb:34:c5:ca:3a:9f:d6:e1:74:24:4e: ba:8d:17:26:19:e4:79:e4:7e:1b:6a:74:79:f0:89:84:38:d4: 30:68:ca:37:e6:9d:83:93:c6:c5:8c:2f:bc:05:3a:d5:ee:28: 1e:cc:14:88:d0:34:61:4e:24:a3:3d:9a:95:76:b0:b9:9c:77: bb:fd:e4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gELXrHaqeM9cBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk NzY3YTAwM2ItZmY3My00NjkzLTgxYjMtNGE1ZGY4MGY5NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiKulgYDpcg0XtYmfXIulAbnoykmdDfi3Toc wQDFUC0B7nNA+H7+ChVJgbafnfL1Accvyxjdj/GDoRKzVJT6v6rI6z5Zr3jE8jJR OcWfJaRN23WH4VYCKu1qqTh5BUnw9xyaGAdBx8esBxhzDspUU6/USdrxgZsw7wTc IXkwNH9N0tLLP9wEsLNUTKVJ5lKIM88gBjJf02Kd4zC63tgwjRB4km0eEeCZkQoo TVTJN3L0GRQkCGXDhaz4ine7olAQuK+9AONNzGsuXp/sdtcuod+g5iqhmpB6dFWc GMh5qHdlaGz/1QenbIWAlZIikuFvoLqQ6Q59cwv+XrLQcNjzDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEznbai+XMw28wQro3qHbRwKCtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJmN2E2ZDEtM2M1YS0z YThmLTg2NDUtNzc3OTIyYWI2NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0j0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY1kmtlHkcJI1+Mwfnw6DyGWyi5cjNUgB4xRj3zbJeHLfAXW69ZTE6L SKkdLyGsVxuezbyxqF5vb2cet6GGvzE9JzUbn6f1smQsCvYPRDHrKRH9TmIrMUan XhpjPr4GM+5TWs2sNuw1GgVjKNv+lBJN8eJ4tTDvHPXufqR6rFT3h31ZVYeYj96R EoexuEy7x430/tkN5YogxD7eH143DkACkTrDPjRzCN1x030ET8WG0SdC04uB8nim 3+TLNMXKOp/W4XQkTrqNFyYZ5HnkfhtqdHnwiYQ41DBoyjfmnYOTxsWML7wFOtXu KB7MFIjQNGFOJKM9mpV2sLmcd7v95PE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:41:57 2025 by rpki-client