$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dece6732-0afb-3bb5-a2d7-2c4362575610.roa File: dece6732-0afb-3bb5-a2d7-2c4362575610.roa (raw, json) Hash identifier: qtRRuEVUHDaIk09yWplAVAPcj4rIHGA7Ay/LroLguJg= Subject key identifier: 47:64:5D:6B:B3:22:75:F2:5B:20:5A:26:E1:60:A1:9F:7A:C0:5A:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99668AB3BFCDA34F93A2A22 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dece6732-0afb-3bb5-a2d7-2c4362575610.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.202.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:68:ab:3b:fc:da:34:f9:3a:2a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=5be051c0-8498-40de-b6ba-56194ea07331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:be:e0:b2:e7:91:3d:93:ee:d5:66:8c:9a: 24:1c:fa:f4:bb:42:e0:aa:24:63:99:c8:a3:b4:c6: f6:e7:55:dd:84:0b:40:02:6d:a9:bf:3e:5c:97:2b: 57:f9:a0:00:7f:17:09:9f:31:22:76:e7:58:35:96: a4:cd:9c:1f:2e:fd:85:01:79:bf:69:da:61:54:6b: 25:62:e8:4a:18:8e:0c:96:e1:9d:9d:81:02:e8:24: f3:d5:50:7e:f2:1d:79:61:b4:ac:40:ca:c1:db:6d: 14:ee:c2:8d:3b:55:00:38:8c:43:85:eb:26:fe:90: e2:fa:bb:80:32:50:a9:5e:d7:58:36:84:c3:93:1f: 14:1d:4c:ef:0f:73:49:5c:3b:75:ee:b2:29:b7:fd: 08:79:6a:e6:14:eb:a8:a8:56:dd:99:a5:80:2b:7d: 6b:15:f0:66:0e:73:66:d2:fd:b7:5a:52:29:45:50: d9:09:95:26:70:6d:07:96:da:f7:6f:3b:11:17:82: 22:1a:b1:d2:95:2c:af:22:00:5f:72:97:40:7d:e1: 6d:16:96:53:a1:18:96:b2:35:8a:cc:a3:1a:48:7c: e4:d7:3d:24:68:a5:3f:fb:d0:50:67:e2:5f:89:83: 7d:38:75:27:d5:d9:dc:46:94:23:7d:72:16:8f:b3: 95:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:5D:6B:B3:22:75:F2:5B:20:5A:26:E1:60:A1:9F:7A:C0:5A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dece6732-0afb-3bb5-a2d7-2c4362575610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:44:12:4e:c9:d6:46:2c:32:c1:4e:e5:cb:f0:12:5e:8f:75: 37:fe:2d:88:6c:f0:8c:a2:8d:88:9e:34:54:5e:af:c4:4c:bf: 7a:7c:12:56:9b:4c:10:f2:c8:6c:60:43:c3:2c:ee:2b:11:80: 35:c2:10:bd:ef:af:4c:d7:c3:cc:00:d0:90:0d:84:fe:15:6b: bd:5b:a5:b4:30:1f:95:15:bb:93:1b:62:84:fc:a1:1e:a1:a9: f7:a7:35:28:a9:30:07:58:0a:e9:dc:5d:4c:c7:84:4e:2b:66: dd:bb:2d:73:cd:fc:01:76:0a:fa:00:8d:de:39:3e:1b:aa:d0: e8:74:0f:16:e4:ab:73:27:c2:d4:8c:ab:92:aa:82:f5:39:69: 8a:40:ac:54:5f:b7:b8:fa:b8:0f:85:5a:b3:12:74:b6:2c:91: 34:41:20:f2:fc:d8:98:ae:47:41:e4:b5:41:43:27:a7:2f:79: 02:01:8b:11:fa:52:1a:5a:df:7f:98:72:b3:f1:b9:46:37:45: 27:c7:05:4d:2e:20:cc:49:31:9f:e3:10:69:47:05:9f:8c:56: 0f:20:c7:13:05:45:20:32:5f:05:51:b5:00:45:c8:6a:49:36: e0:65:59:b5:4c:c2:30:8c:ad:37:e0:93:36:44:2d:ab:49:b5: 52:a1:a6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplmirO/zaNPk6KiIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWJlMDUxYzAtODQ5OC00MGRlLWI2YmEtNTYxOTRlYTA3MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwG+4LLnkT2T7tVmjJokHPr0u0LgqiRjmcij tMb251XdhAtAAm2pvz5clytX+aAAfxcJnzEidudYNZakzZwfLv2FAXm/adphVGsl YuhKGI4MluGdnYEC6CTz1VB+8h15YbSsQMrB220U7sKNO1UAOIxDhesm/pDi+ruA MlCpXtdYNoTDkx8UHUzvD3NJXDt17rIpt/0IeWrmFOuoqFbdmaWAK31rFfBmDnNm 0v23WlIpRVDZCZUmcG0Hltr3bzsRF4IiGrHSlSyvIgBfcpdAfeFtFpZToRiWsjWK zKMaSHzk1z0kaKU/+9BQZ+JfiYN9OHUn1dncRpQjfXIWj7OVowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdkXWuzInXyWyBaJuFgoZ96wFpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGVjZTY3MzItMGFmYi0z YmI1LWEyZDctMmM0MzYyNTc1NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFEEk7J1kYsMsFO5cvwEl6PdTf+LYhs8IyijYieNFRer8RMv3p8Elab TBDyyGxgQ8Ms7isRgDXCEL3vr0zXw8wA0JANhP4Va71bpbQwH5UVu5MbYoT8oR6h qfenNSipMAdYCuncXUzHhE4rZt27LXPN/AF2CvoAjd45Phuq0Oh0Dxbkq3MnwtSM q5KqgvU5aYpArFRft7j6uA+FWrMSdLYskTRBIPL82JiuR0HktUFDJ6cveQIBixH6 Uhpa33+YcrPxuUY3RSfHBU0uIMxJMZ/jEGlHBZ+MVg8gxxMFRSAyXwVRtQBFyGpJ NuBlWbVMwjCMrTfgkzZELatJtVKhplE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:29 2025 by rpki-client