$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de5ad006-1cab-37f2-b01c-cad9cecdc035.roa File: de5ad006-1cab-37f2-b01c-cad9cecdc035.roa (raw, json) Hash identifier: lYbDNqvtr+6uL8/I+pDi6ikHGRpYXIGoJWbgBUrhmPQ= Subject key identifier: 01:61:A2:B7:1F:D3:45:9F:AD:1E:27:8D:CC:3F:CD:CE:53:A9:7B:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA671175212DE01B51000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de5ad006-1cab-37f2-b01c-cad9cecdc035.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.223.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a6:71:17:52:12:de:01:b5:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=b3460e60-dfe7-407e-8d1f-191fb4cf2617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:9c:1e:00:28:8b:c3:88:93:7f:5f:fd:21: 8c:03:6f:71:27:1e:49:a7:d6:fb:87:43:4e:fb:6c: cc:48:19:f5:cf:ae:de:bd:45:d2:a9:ec:3c:bb:a8: 3b:76:6a:c3:8b:03:de:28:8f:bc:a3:da:3b:b3:b9: 04:b3:cf:22:6e:14:7e:ca:3d:ca:92:d8:b5:6b:8a: 77:d2:d6:f8:40:82:24:6d:bf:88:89:f8:2a:db:75: 33:cb:19:09:80:69:23:bc:7c:ba:ed:44:39:fe:c1: d7:24:3f:21:da:15:c1:ab:56:3c:a1:c5:0b:88:ba: c7:0a:85:4b:22:3d:db:fb:41:ac:dd:8d:22:9c:8f: df:16:6b:be:fa:e8:e0:5c:20:a9:b9:9e:a6:03:55: 5e:6b:a0:b3:96:7e:76:e9:4d:d2:77:3c:a0:7f:4c: 17:26:67:dd:aa:36:30:0d:3a:03:16:f8:15:4d:af: 0c:99:20:df:dd:8c:ea:fa:e3:85:1c:24:04:d4:30: ce:47:81:05:be:03:8d:d5:2f:e9:56:70:d4:6a:85: b1:0a:28:e5:48:e0:c6:c7:de:84:a7:75:a0:af:d9: c4:4c:35:0d:1c:d3:90:21:3a:07:f7:7b:a1:66:e7: 8e:73:5b:ce:c0:bb:94:c8:f1:58:61:66:80:90:0d: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:61:A2:B7:1F:D3:45:9F:AD:1E:27:8D:CC:3F:CD:CE:53:A9:7B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de5ad006-1cab-37f2-b01c-cad9cecdc035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cc:56:5f:1c:04:bf:ad:b1:df:9e:ab:33:87:91:76:c3:b8: 79:22:87:01:6e:1b:47:20:1f:39:2d:2d:12:74:07:20:ce:cb: 3b:88:06:03:2f:24:d1:e3:20:e5:0a:8e:a3:8c:16:77:77:06: 30:a9:4b:33:5a:85:65:a9:39:eb:bc:cd:8a:fc:7b:5e:39:b5: 0d:8e:57:92:ee:88:99:3e:e4:23:67:e8:a2:3f:b7:94:2d:71: 92:71:7a:49:ed:8f:f6:40:5a:ee:1f:a7:86:bc:c5:b8:86:5f: d7:80:aa:09:d6:0c:3f:c3:69:6f:ed:20:2d:0c:ec:11:78:ba: a0:49:59:09:c0:82:1e:24:75:f4:cb:59:3b:2d:81:ed:b0:65: 4c:69:88:db:3b:7c:cc:30:90:1e:f9:2f:fd:7d:95:31:c3:4a: a2:bf:b8:e0:2f:6f:14:aa:08:2e:cf:6f:b3:a2:c9:f0:ad:ad: 04:00:29:4d:fc:bd:02:51:f7:f6:7c:d7:76:b6:58:86:c9:6c: 76:5b:3a:8f:81:de:61:3f:c9:3b:b3:cc:72:f0:36:7c:3c:ad: c7:6a:96:75:fa:d7:d2:57:a8:6d:a2:a2:8c:4a:dd:5d:e7:3d: f7:76:12:ce:76:5b:fb:0c:2e:a1:53:8d:27:c7:bc:fb:64:07: 1b:de:8f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6ZxF1IS3gG1EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YjM0NjBlNjAtZGZlNy00MDdlLThkMWYtMTkxZmI0Y2YyNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6mcHgAoi8OIk39f/SGMA29xJx5Jp9b7h0NO +2zMSBn1z67evUXSqew8u6g7dmrDiwPeKI+8o9o7s7kEs88ibhR+yj3Kkti1a4p3 0tb4QIIkbb+Iifgq23UzyxkJgGkjvHy67UQ5/sHXJD8h2hXBq1Y8ocULiLrHCoVL Ij3b+0Gs3Y0inI/fFmu++ujgXCCpuZ6mA1Vea6Czln526U3Sdzygf0wXJmfdqjYw DToDFvgVTa8MmSDf3Yzq+uOFHCQE1DDOR4EFvgON1S/pVnDUaoWxCijlSODGx96E p3Wgr9nETDUNHNOQIToH93uhZueOc1vOwLuUyPFYYWaAkA1qIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFhorcf00WfrR4njcw/zc5TqXtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU1YWQwMDYtMWNhYi0z N2YyLWIwMWMtY2FkOWNlY2RjMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzMVl8cBL+tsd+eqzOHkXbDuHkihwFuG0cgHzktLRJ0ByDOyzuIBgMv JNHjIOUKjqOMFnd3BjCpSzNahWWpOeu8zYr8e145tQ2OV5LuiJk+5CNn6KI/t5Qt cZJxekntj/ZAWu4fp4a8xbiGX9eAqgnWDD/DaW/tIC0M7BF4uqBJWQnAgh4kdfTL WTstge2wZUxpiNs7fMwwkB75L/19lTHDSqK/uOAvbxSqCC7Pb7OiyfCtrQQAKU38 vQJR9/Z813a2WIbJbHZbOo+B3mE/yTuzzHLwNnw8rcdqlnX619JXqG2iooxK3V3n Pfd2Es52W/sMLqFTjSfHvPtkBxvej/g= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:43 2025 by rpki-client