$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72e5193-8c81-3e7f-92eb-373bce408ed4.roa File: f72e5193-8c81-3e7f-92eb-373bce408ed4.roa (raw, json) Hash identifier: vPzhZJmxJNT8dOhCKs02mer+joG1Gpz0kVE3VztE8VA= Subject key identifier: 66:A9:A2:EB:C6:B7:E4:A0:E7:85:DF:41:40:88:74:10:0A:88:74:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D3765EAF7122A2C8E30F9300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72e5193-8c81-3e7f-92eb-373bce408ed4.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.45.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5e:af:71:22:a2:c8:e3:0f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=5100633e-6f31-4961-9ee3-18d768f499a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:e3:07:cc:d6:ee:98:1c:45:9f:78:6d:45: 09:c7:23:37:3a:d5:79:94:f9:bf:50:fc:f0:c6:a4: 49:47:a7:16:c0:ce:3d:b7:cd:e7:5c:4f:eb:73:19: 87:38:04:b8:d9:a0:46:08:c5:01:55:a3:eb:35:99: 1c:a5:bf:4a:6f:fc:83:61:f9:5a:2f:48:87:8f:c5: 78:a7:b9:47:e1:aa:99:3c:8f:73:fc:92:45:dc:6a: f5:3e:cd:c9:4f:07:65:9a:92:ff:a4:b5:e2:e5:67: 5c:20:ce:52:1d:b0:f5:08:99:c1:13:89:0e:c1:67: 5b:69:2d:30:55:f5:44:58:ce:3d:c6:07:42:a1:3a: eb:13:c6:be:50:e7:63:bd:c3:c3:eb:c0:a0:b7:79: 72:86:fe:6a:c7:66:da:77:f6:65:73:99:2a:c6:15: 0c:24:19:5a:6d:21:f3:fa:67:54:78:3a:45:11:55: 08:41:99:00:45:9a:ff:1a:04:08:85:5d:fc:4c:4a: 62:7f:88:4e:72:5b:fe:07:95:28:ef:91:d1:60:b8: f1:40:e0:34:2f:2e:69:15:61:fe:63:42:ff:a0:00: 5d:d1:dc:29:3d:30:28:18:38:3e:1f:e3:f7:ce:ea: 87:6e:51:4c:67:a3:5b:77:7c:c2:a1:dc:4e:c7:7b: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A9:A2:EB:C6:B7:E4:A0:E7:85:DF:41:40:88:74:10:0A:88:74:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72e5193-8c81-3e7f-92eb-373bce408ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f1:39:b9:95:22:12:7d:08:68:c4:f4:64:f3:c2:0e:6e:7a: 92:ab:25:68:08:22:3e:cc:a0:62:26:b2:4f:33:ae:0d:46:6a: 8b:cb:2b:36:6c:d0:52:1e:f8:8d:55:9b:35:da:4c:92:b0:2a: c8:52:49:8c:7a:8c:ae:da:2b:90:55:c3:c7:2a:10:f0:c7:c2: 22:4e:0c:4a:1c:b5:77:b3:fe:83:f1:b3:68:57:d0:16:58:84: 09:97:01:34:08:ab:80:2f:3d:51:25:4a:89:6c:be:9f:c6:ac: ad:4a:22:8a:6d:ea:42:f1:87:70:b0:a3:aa:07:8a:ae:d4:9f: 10:ba:90:a6:37:28:de:41:7a:17:3e:d6:a5:3c:cc:7b:3d:da: bc:34:02:83:09:e0:5f:54:e8:33:f4:c4:2a:40:44:c9:c4:5e: da:ed:f7:86:3a:b3:e8:52:ec:e1:8b:b3:53:22:cd:ac:55:40: bf:fe:02:37:26:01:e4:b7:5e:b1:8d:83:81:bc:2a:75:9a:cc: a8:42:ea:ec:09:41:60:56:ac:59:c3:85:48:60:61:cc:56:89: 95:29:8a:3f:39:e5:5c:63:3d:0f:56:f2:f6:51:40:4c:46:cb: f7:a8:33:6d:38:2f:76:0c:77:cf:95:ca:45:e3:86:79:97:5f: 2a:e8:02:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdl6vcSKiyOMPkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk NTEwMDYzM2UtNmYzMS00OTYxLTllZTMtMThkNzY4ZjQ5OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHjB8zW7pgcRZ94bUUJxyM3OtV5lPm/UPzw xqRJR6cWwM49t83nXE/rcxmHOAS42aBGCMUBVaPrNZkcpb9Kb/yDYflaL0iHj8V4 p7lH4aqZPI9z/JJF3Gr1Ps3JTwdlmpL/pLXi5WdcIM5SHbD1CJnBE4kOwWdbaS0w VfVEWM49xgdCoTrrE8a+UOdjvcPD68Cgt3lyhv5qx2bad/Zlc5kqxhUMJBlabSHz +mdUeDpFEVUIQZkARZr/GgQIhV38TEpif4hOclv+B5Uo75HRYLjxQOA0Ly5pFWH+ Y0L/oABd0dwpPTAoGDg+H+P3zuqHblFMZ6Nbd3zCodxOx3uVbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGapouvGt+Sg54XfQUCIdBAKiHSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcyZTUxOTMtOGM4MS0z ZTdmLTkyZWItMzczYmNlNDA4ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLxObmVIhJ9CGjE9GTzwg5uepKrJWgIIj7MoGImsk8zrg1GaovLKzZs 0FIe+I1VmzXaTJKwKshSSYx6jK7aK5BVw8cqEPDHwiJODEoctXez/oPxs2hX0BZY hAmXATQIq4AvPVElSolsvp/GrK1KIopt6kLxh3Cwo6oHiq7UnxC6kKY3KN5Behc+ 1qU8zHs92rw0AoMJ4F9U6DP0xCpARMnEXtrt94Y6s+hS7OGLs1MizaxVQL/+Ajcm AeS3XrGNg4G8KnWazKhC6uwJQWBWrFnDhUhgYcxWiZUpij855VxjPQ9W8vZRQExG y/eoM204L3YMd8+VykXjhnmXXyroAoM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:45 2025 by rpki-client