$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9bd2606-92c7-355b-a2a0-ff53b383c1e1.roa File: e9bd2606-92c7-355b-a2a0-ff53b383c1e1.roa (raw, json) Hash identifier: LE9XP6Wxbm0F+G8plNZXgtGfGeVnGvV/NBFECMn+0i0= Subject key identifier: 40:38:AC:FF:A7:BE:AD:CC:53:69:8B:A6:94:83:F9:CA:DE:4C:4E:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA1285B61A2EA3124089278 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9bd2606-92c7-355b-a2a0-ff53b383c1e1.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 16625 IP address blocks: 23.194.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:28:5b:61:a2:ea:31:24:08:92:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=773eaa7e-d110-4508-853c-d393617abef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:b9:64:d3:12:e5:6d:a0:fe:60:66:da:a3: 58:e1:c8:6c:ef:0d:01:6c:79:a8:c1:c7:74:97:2b: a0:0a:c8:48:dc:fb:ca:6d:da:7c:df:90:c9:d4:44: 72:0e:b3:78:30:09:bb:1c:71:26:d7:5b:84:bb:1e: 8a:85:3a:e9:10:1c:d4:05:07:0f:9e:bf:a7:aa:36: 7a:9b:a1:78:c3:8c:1b:e5:4d:de:8c:95:2a:9a:79: 0f:a5:7d:f5:8b:7a:35:20:03:7a:ab:4e:ff:8c:a0: dd:94:85:f5:3f:48:3d:5f:f3:67:d5:5a:61:0d:41: 92:76:a9:5e:8f:91:19:7d:e1:c8:74:77:49:ca:f3: 94:45:bb:1a:8b:8c:65:7b:52:1b:2f:64:27:a5:04: 3a:c7:ab:9c:99:89:65:3a:90:e1:fe:cf:43:a2:6a: 21:5e:72:84:8e:b3:2b:a8:45:0c:ef:bc:5e:ad:86: 64:62:7d:c1:ee:3c:b1:61:16:78:60:41:e0:60:35: a8:50:c5:24:e8:56:56:ae:51:41:33:93:af:8e:81: 68:69:3a:15:9f:cc:62:e7:d8:ea:23:a3:cf:78:a6: f8:0a:2b:41:1a:9e:9c:37:10:8a:da:a9:f3:8b:10: 12:8c:80:ce:2c:ac:e7:71:9d:df:71:a7:ab:b7:fa: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:AC:FF:A7:BE:AD:CC:53:69:8B:A6:94:83:F9:CA:DE:4C:4E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9bd2606-92c7-355b-a2a0-ff53b383c1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:75:1a:91:35:eb:ca:90:9f:df:ef:3a:86:63:08:40:1e:ed: 99:6e:fa:c5:1d:23:a9:89:5c:35:5a:fb:ea:7c:11:ed:88:72: 4c:ff:18:41:7e:ba:a3:b4:6c:3e:fe:9c:20:4c:e3:05:a2:8a: 73:9e:26:19:b6:54:e8:82:21:2e:6d:11:c4:49:7d:57:f8:be: 9e:a3:94:b3:30:ad:dc:b9:43:4d:f4:b6:c8:af:0d:8f:e0:c8: 3e:d5:2e:7a:e9:f6:e2:d9:c1:08:95:91:00:28:a8:a6:89:24: a1:f5:02:80:22:10:5a:a9:f5:10:31:6d:62:1c:dd:27:4d:db: b5:db:74:b9:1c:25:21:bc:9b:b5:c2:ac:b7:11:19:d0:f5:fb: ed:d3:25:9b:23:b6:83:3f:0a:55:e1:94:ee:52:68:ce:42:98: 34:12:05:dc:6e:ae:58:e0:44:47:e2:d2:2a:c2:2a:99:49:da: 32:a3:07:4b:b5:e1:1b:d0:6c:88:03:13:4b:9a:d2:e3:5d:b3: 67:72:7d:b4:19:42:73:e4:fe:a0:22:c5:6b:62:80:55:9e:f8: 52:e9:a6:22:34:0f:12:17:d2:a8:67:44:4f:01:69:67:70:7b: 56:4e:0d:ef:79:8f:1d:cc:35:55:21:e9:50:21:0f:6e:dd:c0: e5:d1:2c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoShbYaLqMSQIkngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NzczZWFhN2UtZDExMC00NTA4LTg1M2MtZDM5MzYxN2FiZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX+5ZNMS5W2g/mBm2qNY4chs7w0BbHmowcd0 lyugCshI3PvKbdp835DJ1ERyDrN4MAm7HHEm11uEux6KhTrpEBzUBQcPnr+nqjZ6 m6F4w4wb5U3ejJUqmnkPpX31i3o1IAN6q07/jKDdlIX1P0g9X/Nn1VphDUGSdqle j5EZfeHIdHdJyvOURbsai4xle1IbL2QnpQQ6x6ucmYllOpDh/s9DomohXnKEjrMr qEUM77xerYZkYn3B7jyxYRZ4YEHgYDWoUMUk6FZWrlFBM5OvjoFoaToVn8xi59jq I6PPeKb4CitBGp6cNxCK2qnzixASjIDOLKzncZ3fcaert/ql/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA4rP+nvq3MU2mLppSD+creTE6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTliZDI2MDYtOTJjNy0z NTViLWEyYTAtZmY1M2IzODNjMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8LeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd1GpE168qQn9/vOoZjCEAe7Zlu+sUdI6mJXDVa++p8Ee2Ickz/GEF+ uqO0bD7+nCBM4wWiinOeJhm2VOiCIS5tEcRJfVf4vp6jlLMwrdy5Q030tsivDY/g yD7VLnrp9uLZwQiVkQAoqKaJJKH1AoAiEFqp9RAxbWIc3SdN27XbdLkcJSG8m7XC rLcRGdD1++3TJZsjtoM/ClXhlO5SaM5CmDQSBdxurljgREfi0irCKplJ2jKjB0u1 4RvQbIgDE0ua0uNds2dyfbQZQnPk/qAixWtigFWe+FLppiI0DxIX0qhnRE8BaWdw e1ZODe95jx3MNVUh6VAhD27dwOXRLKA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:39:15 2025 by rpki-client