$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebbb7a5a-172c-32df-aa8f-ff0653f643a8.roa File: ebbb7a5a-172c-32df-aa8f-ff0653f643a8.roa (raw, json) Hash identifier: +N3wOE4TIm+tiCdr1kBClnOXr0IXNhwlv4o5G+Fq+Xk= Subject key identifier: 96:3D:73:44:3B:3E:FC:90:A7:4C:6A:53:7D:83:A7:C9:75:8E:10:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488F1089357AB9AC7996FD3B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebbb7a5a-172c-32df-aa8f-ff0653f643a8.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.63.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:89:35:7a:b9:ac:79:96:fd:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=a7f47759-e185-4313-bc42-57f02d2273d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:a5:ef:0d:f5:60:32:45:f2:24:d8:71:d8: 40:e0:fa:c1:b4:93:97:eb:89:71:0d:f1:43:06:1c: 51:5e:e6:ee:76:aa:11:f2:a7:6c:d5:10:1e:00:4d: b1:be:7b:39:51:e3:8c:62:3d:ba:cb:c4:57:4f:75: f6:89:44:c9:12:ac:37:55:40:75:04:f4:45:24:72: 7d:c0:1e:46:35:0c:0f:00:00:63:c7:f7:c0:40:a9: b2:39:77:d4:e7:5e:04:93:a5:c4:f5:35:d4:4e:e5: b3:6f:90:43:cd:78:cb:b2:c7:06:43:cb:81:b7:b6: 43:c5:01:1f:95:fa:2f:ed:2d:3f:5d:de:2d:22:c5: d0:70:42:18:a5:5f:d1:fa:e3:1f:fb:1e:80:ef:c7: 5b:ed:a9:ab:36:09:bd:f5:8a:bd:51:dc:f7:0d:04: 18:a5:1a:9c:f3:a6:8c:dd:a7:8e:5e:b5:08:9c:85: 6f:53:2d:1d:41:c9:5a:70:5b:3b:94:4a:b4:df:1e: 81:d9:bc:42:10:5d:5c:fc:85:d4:0b:d4:d6:c0:3e: e2:99:83:d0:5d:e7:02:c6:8e:ed:b2:a8:27:a6:41: 00:48:0a:15:0e:7f:21:5a:d4:98:00:4e:9b:ea:61: 80:05:7c:d2:ab:4a:00:84:a2:18:86:40:a8:66:54: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:73:44:3B:3E:FC:90:A7:4C:6A:53:7D:83:A7:C9:75:8E:10:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebbb7a5a-172c-32df-aa8f-ff0653f643a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:41:83:c9:a3:52:39:3d:73:a1:07:62:8f:2d:13:22:b4:c3: bf:44:bb:a5:a8:5e:30:7c:07:3d:f8:b9:70:a6:f6:f2:82:18: 96:24:3d:61:44:82:f9:84:ca:57:18:b4:c2:df:51:ef:d5:2a: 6e:f6:28:4e:53:35:8a:85:9a:28:b4:ac:c4:43:6d:24:d4:91: e3:f2:e2:50:f0:8a:0c:61:db:5e:a1:64:ba:d5:0a:91:de:61: 70:7c:87:9c:75:c2:da:7a:ff:c4:a0:f4:72:63:a4:b4:81:e7: 52:29:0b:12:48:96:c3:43:5b:36:af:1d:f9:08:c5:68:62:cd: 34:06:3f:38:a1:68:f2:62:ae:72:61:1e:d1:8e:36:0a:cc:92: ec:a4:16:f7:e1:d2:32:4b:53:b7:ba:6b:34:43:11:15:a3:6d: 07:11:06:f6:38:91:db:e5:42:72:ac:5b:6e:cd:4f:39:a2:f0: 68:51:a4:a0:fe:aa:73:ec:2a:57:1d:4d:00:36:91:2a:23:08: 68:7e:29:3b:86:18:70:96:c8:f2:e6:64:b8:fe:ed:55:aa:dc: 0f:94:d0:bd:55:0e:29:46:28:82:6c:0a:92:e1:54:ae:ca:49: 31:92:4c:88:50:92:84:84:0f:81:9e:b5:60:3d:0b:55:4e:28: a1:71:8b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIk1ermseZb9O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk YTdmNDc3NTktZTE4NS00MzEzLWJjNDItNTdmMDJkMjI3M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5il7w31YDJF8iTYcdhA4PrBtJOX64lxDfFD BhxRXubudqoR8qds1RAeAE2xvns5UeOMYj26y8RXT3X2iUTJEqw3VUB1BPRFJHJ9 wB5GNQwPAABjx/fAQKmyOXfU514Ek6XE9TXUTuWzb5BDzXjLsscGQ8uBt7ZDxQEf lfov7S0/Xd4tIsXQcEIYpV/R+uMf+x6A78db7amrNgm99Yq9Udz3DQQYpRqc86aM 3aeOXrUInIVvUy0dQclacFs7lEq03x6B2bxCEF1c/IXUC9TWwD7imYPQXecCxo7t sqgnpkEASAoVDn8hWtSYAE6b6mGABXzSq0oAhKIYhkCoZlTM3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY9c0Q7PvyQp0xqU32Dp8l1jhA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWJiYjdhNWEtMTcyYy0z MmRmLWFhOGYtZmYwNjUzZjY0M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Bg8mjUjk9c6EHYo8tEyK0w79Eu6WoXjB8Bz34uXCm9vKCGJYkPWFE gvmEylcYtMLfUe/VKm72KE5TNYqFmii0rMRDbSTUkePy4lDwigxh216hZLrVCpHe YXB8h5x1wtp6/8Sg9HJjpLSB51IpCxJIlsNDWzavHfkIxWhizTQGPzihaPJirnJh HtGONgrMkuykFvfh0jJLU7e6azRDERWjbQcRBvY4kdvlQnKsW27NTzmi8GhRpKD+ qnPsKlcdTQA2kSojCGh+KTuGGHCWyPLmZLj+7VWq3A+U0L1VDilGKIJsCpLhVK7K STGSTIhQkoSED4GetWA9C1VOKKFxi44= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:36 2025 by rpki-client