$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa File: e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa (raw, json) Hash identifier: HGNeI+jQ2xubXvaG4kXjB4kxfRJpmrJub146rmw10ng= Subject key identifier: 1A:BA:51:B1:54:AE:8A:E6:2F:3D:16:E5:66:9B:83:CB:17:3A:D4:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858487A2099F5AB469199C7AA1380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.37.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:99:f5:ab:46:91:99:c7:aa:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=5fa583e1-763a-46a9-9540-79d028e0e47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:2b:ee:92:08:43:61:0e:72:04:b0:ab:18: b1:78:e5:0e:58:dd:b1:a5:d4:bf:c8:40:24:46:bd: 19:4f:8d:c8:bc:0e:02:a9:7c:ff:9a:a0:3f:fe:ff: 93:81:65:c1:57:b4:9d:d7:ea:f9:74:67:ba:fc:ee: dc:ba:f8:a1:45:ca:c7:81:19:ca:fe:fa:35:d0:25: fe:8a:e8:d7:b2:d9:55:5b:ea:15:b1:52:4b:c7:52: 04:72:ba:f3:9d:14:b4:e2:e0:81:73:06:00:10:ab: cb:33:34:ba:ac:6f:e4:44:5e:ab:57:08:44:37:af: 31:9b:e5:04:91:e8:8f:a1:24:ba:96:58:21:60:82: 52:1f:97:d5:db:fa:89:94:4a:bd:86:6e:b3:34:41: c4:82:61:bb:2d:1d:a5:90:f5:70:12:9b:d2:70:4c: df:93:e4:1e:72:8d:91:be:44:62:a0:54:14:84:9e: 0e:5d:11:75:d2:0f:1c:9e:72:4b:76:7c:5f:ca:28: 65:11:10:81:f3:09:3f:2d:47:6c:3d:27:74:4d:56: 9d:83:d2:3b:d3:b9:dd:23:c8:e3:bb:b8:8a:35:f9: 06:5b:3e:89:b0:75:74:97:7d:36:44:ca:bb:04:8c: 08:5b:a6:c4:c3:4c:40:23:bc:39:de:68:52:62:2b: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:51:B1:54:AE:8A:E6:2F:3D:16:E5:66:9B:83:CB:17:3A:D4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:62:cb:61:fa:b2:66:4b:94:be:9a:2d:34:9f:da:0d:96:cf: 22:e3:d2:ee:3b:a1:18:8e:26:c6:97:04:47:9e:67:a7:ce:25: f1:17:42:d7:37:bd:92:70:3e:db:5d:d5:9f:7e:15:29:17:cb: 66:6d:c8:e8:85:8b:2d:53:20:07:a8:a9:af:5f:d9:74:58:ef: 0f:c8:4c:f6:1d:87:60:b8:16:5f:c1:59:46:c3:fa:c9:eb:6f: 4b:29:21:68:31:e1:3f:10:aa:07:5c:42:9c:53:c2:94:9b:31: b5:94:01:50:82:c1:b5:99:d5:f1:4f:a3:83:b7:b4:9e:35:49: 46:ac:b1:07:dd:51:ee:bd:b4:29:96:f1:12:c3:8b:8d:9f:6c: 55:8f:c4:19:2b:16:c5:45:60:81:cc:3c:d5:41:8b:18:e9:45: 72:c9:18:ef:42:1f:4f:db:07:21:81:0e:b0:0c:33:28:66:5e: 2c:22:d5:b0:89:69:0b:d2:f4:ba:e9:33:73:81:15:62:39:e5: 7a:44:75:6e:52:e1:d8:aa:f3:f6:f9:90:07:82:4a:cb:da:6a: fc:75:a3:90:5b:88:a0:6d:17:ca:3c:f1:a9:34:5a:d4:ad:b5: 3d:31:fc:2b:1e:02:6d:35:96:06:92:7b:ec:a9:be:7d:ea:cb: e8:e2:5f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJn1q0aRmceqE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk NWZhNTgzZTEtNzYzYS00NmE5LTk1NDAtNzlkMDI4ZTBlNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55Er7pIIQ2EOcgSwqxixeOUOWN2xpdS/yEAk Rr0ZT43IvA4CqXz/mqA//v+TgWXBV7Sd1+r5dGe6/O7cuvihRcrHgRnK/vo10CX+ iujXstlVW+oVsVJLx1IEcrrznRS04uCBcwYAEKvLMzS6rG/kRF6rVwhEN68xm+UE keiPoSS6llghYIJSH5fV2/qJlEq9hm6zNEHEgmG7LR2lkPVwEpvScEzfk+Qeco2R vkRioFQUhJ4OXRF10g8cnnJLdnxfyihlERCB8wk/LUdsPSd0TVadg9I707ndI8jj u7iKNfkGWz6JsHV0l302RMq7BIwIW6bEw0xAI7w53mhSYiuUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq6UbFUrormLz0W5Wabg8sXOtTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFjMWEyYzYtNDg5OC0z NDNhLTlhY2ItNTM3MGFiYTM4YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZiy2H6smZLlL6aLTSf2g2WzyLj0u47oRiOJsaXBEeeZ6fOJfEXQtc3 vZJwPttd1Z9+FSkXy2ZtyOiFiy1TIAeoqa9f2XRY7w/ITPYdh2C4Fl/BWUbD+snr b0spIWgx4T8QqgdcQpxTwpSbMbWUAVCCwbWZ1fFPo4O3tJ41SUassQfdUe69tCmW 8RLDi42fbFWPxBkrFsVFYIHMPNVBixjpRXLJGO9CH0/bByGBDrAMMyhmXiwi1bCJ aQvS9LrpM3OBFWI55XpEdW5S4diq8/b5kAeCSsvaavx1o5BbiKBtF8o88ak0WtSt tT0x/CseAm01lgaSe+ypvn3qy+jiX9s= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:33 2025 by rpki-client