$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa File: f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa (raw, json) Hash identifier: Yl3onl3ZVi9ih8YvBzyPzPSV1R8nUGCTfnYHFeX2Lbo= Subject key identifier: 88:04:5A:8A:D8:DB:DF:34:8A:EA:12:EA:88:96:53:04:F2:44:AD:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830CB2327EBF015CFD73000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.200.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:cb:23:27:eb:f0:15:cf:d7:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=fc95e3d1-c868-44b7-9978-7c8eab2a8d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:83:44:25:6b:96:24:2d:98:3e:ea:d0:df: 48:51:db:14:00:eb:3d:cc:ae:a9:d2:88:bb:68:e1: 39:f1:e6:fe:de:1b:b9:00:6c:39:44:d9:54:fa:fd: 2f:de:38:5a:42:cb:94:00:95:ba:1f:76:e5:60:e8: 31:b9:5a:14:46:67:6c:33:58:17:ad:46:23:ac:ca: c4:d3:7e:40:2d:2f:57:da:e4:ce:3d:6b:bc:92:73: 12:a6:53:39:e3:11:e4:bf:a3:f9:2e:c2:09:c0:f9: 51:82:4a:b3:91:7d:14:bc:83:b2:cd:50:6b:07:48: d6:af:af:ba:ed:47:f1:03:fc:b0:22:31:dc:f4:52: 89:86:03:05:60:03:e6:9f:ab:ff:ba:a0:41:84:72: b2:41:d4:67:16:bb:b7:eb:df:9c:08:67:d3:68:15: 4a:66:32:23:d5:99:d0:7b:f7:19:81:08:39:1f:41: 9e:a0:68:6f:73:14:4c:49:83:63:15:17:e7:76:cb: 46:20:b5:5b:fd:37:95:48:a3:d3:e8:99:3e:19:5f: 30:17:64:78:7a:f5:1a:25:73:ab:2a:63:36:f5:46: 3a:57:13:36:a7:9a:61:77:ed:6c:2d:d4:8c:bc:3d: e0:dc:5e:aa:f8:de:d2:cf:1e:bc:db:96:3a:ae:4d: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:5A:8A:D8:DB:DF:34:8A:EA:12:EA:88:96:53:04:F2:44:AD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:54:53:fb:28:cc:71:06:80:95:77:34:b4:94:69:7f:6a:2e: 58:b9:d0:96:3b:08:76:1a:76:db:47:96:f3:ae:01:90:8a:6b: ff:a2:de:ee:5e:6d:80:08:86:56:eb:09:ed:7c:4b:4e:e2:4c: 91:b6:cb:25:da:3e:8c:d2:98:fd:82:54:62:b3:4c:c6:7f:69: b4:44:0b:47:c6:bc:d9:9c:35:fd:11:24:bd:d8:69:87:6a:26: 89:63:15:22:c5:0c:5e:36:ee:47:ab:4a:d5:2d:4e:50:89:2a: 0e:4a:04:1d:ea:00:40:17:bb:f5:fa:61:b9:14:2c:0b:1b:ec: 24:ef:4e:6d:9e:2c:ec:9d:24:5f:69:81:d1:ab:3e:9c:71:18: e0:2c:2f:1f:9b:87:6e:8c:2b:4c:ff:1a:24:a4:87:4d:7f:65: 57:65:e6:7f:16:87:3f:f3:0c:5c:40:02:b3:13:ed:78:3b:5e: 07:84:2d:93:bb:19:94:4b:ea:25:f1:8d:ba:d6:1f:e8:39:e2: 2f:fa:02:a4:6f:cb:7e:2b:f4:37:41:2a:3c:5f:20:0d:47:fe: 3d:db:a2:af:92:76:51:ef:ad:1f:3f:27:0c:1e:2b:9b:d6:c4: a2:ca:0b:cc:43:9e:8e:e6:00:94:f5:b3:a8:ef:23:db:85:a9: 4a:e9:3e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMsjJ+vwFc/XMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmM5NWUzZDEtYzg2OC00NGI3LTk5NzgtN2M4ZWFiMmE4ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BCDRCVrliQtmD7q0N9IUdsUAOs9zK6p0oi7 aOE58eb+3hu5AGw5RNlU+v0v3jhaQsuUAJW6H3blYOgxuVoURmdsM1gXrUYjrMrE 035ALS9X2uTOPWu8knMSplM54xHkv6P5LsIJwPlRgkqzkX0UvIOyzVBrB0jWr6+6 7UfxA/ywIjHc9FKJhgMFYAPmn6v/uqBBhHKyQdRnFru369+cCGfTaBVKZjIj1ZnQ e/cZgQg5H0GeoGhvcxRMSYNjFRfndstGILVb/TeVSKPT6Jk+GV8wF2R4evUaJXOr KmM29UY6VxM2p5phd+1sLdSMvD3g3F6q+N7Szx6825Y6rk3DFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgEWorY2980iuoS6oiWUwTyRK0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNhZDc2ZmEtNTAwZC0z OGNhLThlYzgtMjFkOGQwNGNiODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1UU/sozHEGgJV3NLSUaX9qLli50JY7CHYadttHlvOuAZCKa/+i3u5e bYAIhlbrCe18S07iTJG2yyXaPozSmP2CVGKzTMZ/abREC0fGvNmcNf0RJL3YaYdq JoljFSLFDF427kerStUtTlCJKg5KBB3qAEAXu/X6YbkULAsb7CTvTm2eLOydJF9p gdGrPpxxGOAsLx+bh26MK0z/GiSkh01/ZVdl5n8Whz/zDFxAArMT7Xg7XgeELZO7 GZRL6iXxjbrWH+g54i/6AqRvy34r9DdBKjxfIA1H/j3boq+SdlHvrR8/JwweK5vW xKLKC8xDno7mAJT1s6jvI9uFqUrpPiw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:52 2025 by rpki-client