$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df6b514d-3c00-3e7f-a7cd-405e740b0e07.roa File: df6b514d-3c00-3e7f-a7cd-405e740b0e07.roa (raw, json) Hash identifier: 0VcWKbZYvcDKeeQFhU9XrWT7uzDSNUQwSJaC4fZAzk8= Subject key identifier: 11:4D:54:41:35:40:C2:91:29:0F:64:06:2A:C4:F7:A9:80:0F:65:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858487FAA429BDC988028A518DEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df6b514d-3c00-3e7f-a7cd-405e740b0e07.roa Signing time: Fri 10 Jan 2025 13:37:36 +0000 ROA not before: Fri 10 Jan 2025 13:37:36 +0000 ROA not after: Thu 10 Apr 2025 12:37:36 +0000 asID: 16625 IP address blocks: 23.220.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:aa:42:9b:dc:98:80:28:a5:18:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 10 13:37:36 2025 GMT Not After : Apr 10 12:37:36 2025 GMT Subject: CN=c448bb1e-57ba-422d-bab7-f9f3ae946338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:5d:f6:22:a6:b4:0d:b7:da:23:d2:68:56: ff:ec:9c:50:64:b3:91:be:49:75:c6:fd:cf:df:00: 86:70:eb:98:aa:ce:b6:86:c4:53:bc:74:69:63:fb: b0:15:4b:b9:82:86:c9:c2:48:13:dd:6f:8f:d5:8e: 36:3d:40:00:9c:2f:cd:6c:7f:85:8b:a1:94:a8:24: 5e:8e:2a:84:2f:94:b7:e6:e6:8d:30:81:14:1b:f0: 03:08:cc:de:2d:28:80:49:7b:6e:1e:a6:91:24:14: ea:03:7d:cf:c9:66:6b:d5:6d:c2:11:c8:e9:c6:d3: 0c:b6:8c:88:ca:2f:cb:5f:c9:00:45:6f:a6:a6:03: 69:d1:b3:1e:64:a9:86:f7:73:dd:6f:ab:c3:6f:00: d1:cb:c5:34:aa:ef:cf:71:ef:50:d2:d9:c0:82:8f: 09:d1:9d:8f:1c:02:ce:ba:83:f1:64:54:18:e5:a5: 87:0b:b3:66:dd:01:3a:47:57:c1:f9:ac:8c:41:84: f5:51:21:b7:c8:56:ff:b3:60:8d:ec:82:a0:d9:0f: 31:8f:cf:94:44:71:6c:3f:99:c3:ac:a7:82:d3:9d: 0e:26:12:76:84:60:3e:64:b7:d2:22:97:98:a9:55: 44:bb:0c:3a:0c:dc:40:8e:b6:09:55:5e:5b:6e:4a: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:54:41:35:40:C2:91:29:0F:64:06:2A:C4:F7:A9:80:0F:65:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df6b514d-3c00-3e7f-a7cd-405e740b0e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:71:71:ee:17:86:eb:f6:3b:89:52:2b:b8:bb:04:7d:37:23: 80:d7:74:85:ef:ad:18:a7:33:a3:77:fc:87:47:c0:1c:21:25: 8a:0f:51:cc:28:c3:87:f2:1c:f0:5d:40:97:8b:1c:07:b3:de: 3f:ff:15:fe:9f:a9:82:26:52:24:e3:90:f9:da:50:5c:93:df: 20:bb:71:6d:83:21:71:9e:15:ab:f8:15:09:26:77:68:2c:af: 04:0b:8f:a8:6b:19:f3:5c:57:db:d8:60:13:ee:b5:80:9a:a3: 41:87:af:55:bb:72:9a:a8:01:09:58:bb:62:04:0c:4c:5b:17: be:47:e5:4b:c9:e7:66:db:6a:e8:79:14:50:fa:50:75:3f:84: 4c:e4:ed:f5:03:98:c8:1e:a9:d6:e0:8f:59:b3:17:fa:96:20: cd:e5:c3:9c:6b:2d:f1:b6:2a:a1:4c:27:00:48:4d:e6:df:95: 66:d3:b6:89:e7:93:e5:b1:65:34:4e:17:d4:63:68:d4:8d:5b: e1:15:01:3d:4c:72:c0:0e:95:41:28:c5:19:76:bb:0f:f0:fb: eb:19:64:40:79:27:a1:d7:90:f6:3b:bd:92:8a:66:fb:5b:ec: 2c:24:ca:07:13:7c:91:d6:c5:28:8b:46:c8:cd:7d:15:a4:ff: fd:3f:58:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/qkKb3JiAKKUY3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExMDEzMzczNloXDTI1MDQxMDEyMzczNlowLzEtMCsGA1UEAxMk YzQ0OGJiMWUtNTdiYS00MjJkLWJhYjctZjlmM2FlOTQ2MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mld9iKmtA232iPSaFb/7JxQZLORvkl1xv3P 3wCGcOuYqs62hsRTvHRpY/uwFUu5gobJwkgT3W+P1Y42PUAAnC/NbH+Fi6GUqCRe jiqEL5S35uaNMIEUG/ADCMzeLSiASXtuHqaRJBTqA33PyWZr1W3CEcjpxtMMtoyI yi/LX8kARW+mpgNp0bMeZKmG93Pdb6vDbwDRy8U0qu/Pce9Q0tnAgo8J0Z2PHALO uoPxZFQY5aWHC7Nm3QE6R1fB+ayMQYT1USG3yFb/s2CN7IKg2Q8xj8+URHFsP5nD rKeC050OJhJ2hGA+ZLfSIpeYqVVEuww6DNxAjrYJVV5bbkpZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFNVEE1QMKRKQ9kBirE96mAD2XMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY2YjUxNGQtM2MwMC0z ZTdmLWE3Y2QtNDA1ZTc0MGIwZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5xce4Xhuv2O4lSK7i7BH03I4DXdIXvrRinM6N3/IdHwBwhJYoPUcwo w4fyHPBdQJeLHAez3j//Ff6fqYImUiTjkPnaUFyT3yC7cW2DIXGeFav4FQkmd2gs rwQLj6hrGfNcV9vYYBPutYCao0GHr1W7cpqoAQlYu2IEDExbF75H5UvJ52bbauh5 FFD6UHU/hEzk7fUDmMgeqdbgj1mzF/qWIM3lw5xrLfG2KqFMJwBITebflWbTtonn k+WxZTROF9RjaNSNW+EVAT1McsAOlUEoxRl2uw/w++sZZEB5J6HXkPY7vZKKZvtb 7CwkygcTfJHWxSiLRsjNfRWk//0/WK8= -----END CERTIFICATE-----Generated at Fri Mar 14 15:00:57 2025 by rpki-client