$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa File: f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa (raw, json) Hash identifier: LhBmdH006XhVwffC0RVemZyc/Uyf8lpPj3mz1L7t0z8= Subject key identifier: 30:9C:EE:45:9A:8B:7A:DC:A9:B1:75:31:29:E0:6A:9E:AA:FB:0E:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DC5AE6CDCCA06EF64D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.194.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dc:5a:e6:cd:cc:a0:6e:f6:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=4def9b3b-21b5-4ff5-a656-0b279722684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:52:0c:51:d4:6a:e1:11:40:9c:93:0f:70:a3: e5:1a:5f:8b:09:98:b0:71:6a:5f:83:df:37:9f:dd: 1c:bc:0f:bd:7c:e4:88:74:a6:3f:79:78:0a:3c:4d: 0c:7c:68:34:52:b2:b9:a2:29:57:43:35:8d:1f:24: e6:bf:c4:7f:0e:b5:27:f4:f4:02:09:0a:4b:74:10: 4d:64:9c:26:aa:c9:60:dd:47:55:13:e4:40:19:8b: 9d:1c:b5:16:75:fa:f4:b2:5e:c1:46:fe:09:27:79: 56:8b:22:f0:4a:19:b8:58:08:d0:cf:7f:ef:fb:dc: a6:21:0b:76:d7:73:cf:4d:ae:b8:b4:60:a1:4e:2a: 47:f2:17:34:4c:c8:00:06:b0:6f:54:e6:8e:54:d4: 08:28:30:dd:82:99:ed:99:2c:69:66:c9:db:5f:76: 74:eb:bb:08:3b:0b:52:d8:ad:3b:91:5c:4c:19:dc: 15:49:8f:af:61:ad:66:82:58:cf:23:e9:91:80:56: c8:3c:43:62:22:c4:4e:ae:36:0c:7e:99:c2:d6:c3: 28:06:c4:51:4d:6b:95:3b:17:d6:2d:07:8d:14:c3: d1:68:0f:71:9b:cc:58:40:69:77:56:6a:02:95:c2: ac:87:02:f1:0a:af:6d:fe:12:4c:5a:34:dd:42:b1: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:EE:45:9A:8B:7A:DC:A9:B1:75:31:29:E0:6A:9E:AA:FB:0E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:36:02:1b:bc:2a:0a:31:11:9c:cb:f5:cb:31:7d:af:c3:b8: b8:77:65:5a:60:2e:a1:71:ab:b3:d1:7f:fe:e4:bc:c8:89:4e: 18:fe:e0:8a:93:17:aa:e6:88:24:c0:9b:9c:9b:23:ac:37:46: 5f:04:25:f6:71:c9:af:a4:a7:58:9a:54:a6:3f:9a:e6:66:61: 8b:e6:68:66:6f:1a:88:fb:34:97:6b:25:ae:c9:87:de:f6:df: 91:f8:44:d1:19:1a:f3:74:9d:65:53:a0:84:59:20:ad:51:71: b0:19:70:37:c3:05:68:27:e9:6a:67:62:c3:5a:e9:a3:f0:29: 71:af:ae:44:cf:41:87:ef:11:f7:05:08:7a:34:68:33:84:ea: 0b:46:09:34:d6:28:4d:b5:6c:be:73:1b:1e:10:63:8f:cf:34: 24:44:c0:2d:7d:ae:ef:1f:4b:b0:66:cc:80:b4:a8:f5:27:f8: fc:e7:64:16:77:ea:8a:53:1b:16:f6:c0:4b:ff:db:e3:9b:da: fd:b0:b5:00:1a:dc:5f:10:08:3f:b6:5c:5e:b0:fe:ea:6a:bd: 21:a8:42:02:74:14:05:4b:ed:4b:fc:20:e6:8d:b7:3f:79:3b: 66:a1:a3:68:c4:43:d9:69:c7:88:43:ca:bd:86:1f:a8:94:cd: 59:33:cd:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANxa5s3MoG72TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NGRlZjliM2ItMjFiNS00ZmY1LWE2NTYtMGIyNzk3MjI2ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1IMUdRq4RFAnJMPcKPlGl+LCZiwcWpfg983 n90cvA+9fOSIdKY/eXgKPE0MfGg0UrK5oilXQzWNHyTmv8R/DrUn9PQCCQpLdBBN ZJwmqslg3UdVE+RAGYudHLUWdfr0sl7BRv4JJ3lWiyLwShm4WAjQz3/v+9ymIQt2 13PPTa64tGChTipH8hc0TMgABrBvVOaOVNQIKDDdgpntmSxpZsnbX3Z067sIOwtS 2K07kVxMGdwVSY+vYa1mgljPI+mRgFbIPENiIsROrjYMfpnC1sMoBsRRTWuVOxfW LQeNFMPRaA9xm8xYQGl3VmoClcKshwLxCq9t/hJMWjTdQrE1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCc7kWai3rcqbF1MSngap6q+w7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVjNmJhN2YtZThhZS0z ODE0LTk4NTAtMzY3MWFiMWMzMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8IYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE2Ahu8KgoxEZzL9csxfa/DuLh3ZVpgLqFxq7PRf/7kvMiJThj+4IqT F6rmiCTAm5ybI6w3Rl8EJfZxya+kp1iaVKY/muZmYYvmaGZvGoj7NJdrJa7Jh972 35H4RNEZGvN0nWVToIRZIK1RcbAZcDfDBWgn6WpnYsNa6aPwKXGvrkTPQYfvEfcF CHo0aDOE6gtGCTTWKE21bL5zGx4QY4/PNCREwC19ru8fS7BmzIC0qPUn+PznZBZ3 6opTGxb2wEv/2+Ob2v2wtQAa3F8QCD+2XF6w/upqvSGoQgJ0FAVL7Uv8IOaNtz95 O2aho2jEQ9lpx4hDyr2GH6iUzVkzzb4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:51:38 2025 by rpki-client