$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7aa7ac1-873e-3196-961b-0c787c0f110d.roa File: f7aa7ac1-873e-3196-961b-0c787c0f110d.roa (raw, json) Hash identifier: 45D2SzI2cUcC6qkgeX2ce0A5h2bfwuN1scz9eH17XCw= Subject key identifier: F5:6F:22:AC:65:AC:A7:1C:0B:94:56:2B:33:E1:1C:F8:F1:4A:AE:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400C6302E142302366A9340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7aa7ac1-873e-3196-961b-0c787c0f110d.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.194.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c6:30:2e:14:23:02:36:6a:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=4001172e-907e-4314-922b-5e0ff65e4572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:6a:04:a6:05:50:5d:3a:e8:85:c9:ed:08: 11:9d:37:8b:8a:10:62:cf:19:bc:6c:74:f3:30:a3: e8:a8:6b:b8:d3:cd:45:0e:15:ca:59:bc:94:aa:30: 7c:f8:93:56:23:72:78:ec:ce:b2:83:2b:ee:ed:51: 2f:d7:4d:c6:2c:78:21:22:86:e2:d1:96:e6:3a:0e: 13:b0:1b:f2:ab:c0:6a:0e:ea:95:65:c7:70:10:07: fb:2a:65:0c:e1:2d:41:e3:c3:90:ff:aa:ab:84:9b: 75:92:5d:85:65:f1:7c:fd:45:87:c9:a4:e0:5f:46: ab:a3:8a:b6:56:25:c5:99:61:f3:23:6c:b4:68:96: 45:24:a3:af:d8:76:db:aa:6d:67:cf:59:29:95:19: b9:0f:8e:08:1f:03:4c:8d:4a:de:15:db:f1:52:90: 14:0b:f1:22:48:dd:17:a1:19:9e:be:8d:95:00:a9: 66:3b:71:c3:95:4c:f8:bc:f1:0f:07:e6:66:61:5b: 53:25:f4:41:1e:d8:cd:c9:79:b5:26:40:75:d4:a4: 8b:d6:b4:11:8d:f3:8d:1d:87:58:f4:97:0b:d3:ae: ca:53:57:3b:46:8b:5a:b7:83:9d:27:71:dd:5e:87: 79:ab:5a:0c:6b:1f:49:93:04:b9:31:fa:f4:5c:8f: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6F:22:AC:65:AC:A7:1C:0B:94:56:2B:33:E1:1C:F8:F1:4A:AE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7aa7ac1-873e-3196-961b-0c787c0f110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e3:82:5a:77:f6:a9:7d:51:fe:54:6f:d9:36:07:b4:5a:0e: 60:b0:c0:11:c2:11:d8:1d:76:cd:50:51:9a:a3:13:d0:d1:0d: 17:12:f9:b9:76:cd:89:f0:a8:63:4d:45:9c:8e:6e:dc:b3:b2: 08:1e:c4:1e:14:bb:81:42:9d:37:55:57:f3:ef:56:0d:20:94: 3b:25:02:89:d3:42:17:f8:f4:f7:dc:1b:70:59:37:18:fe:dc: 1b:51:c3:b7:e6:68:f9:17:65:c3:92:4e:d7:96:74:85:72:f2: 96:25:07:49:12:e8:98:e4:2d:ee:68:62:b2:50:f8:d2:c6:e3: 80:83:70:1c:d4:c7:a9:b4:61:5c:07:fa:3d:29:cd:da:73:23: 6a:81:70:c0:e6:c9:2b:f9:07:d6:c2:1f:93:dd:1c:0e:77:a0: 33:7b:05:2d:46:6d:9f:d1:35:2e:09:ae:2e:6c:1a:93:34:0f: a4:66:2d:b3:f3:30:e8:99:09:43:cf:ea:65:ec:88:a8:b5:50: 2e:a6:1c:04:a7:76:95:d4:47:75:b7:cc:87:4f:6d:36:64:04: b1:fc:ea:97:6f:02:63:d6:ba:e3:7b:76:4a:d4:82:b4:6b:5a: 3b:e5:96:9b:16:75:fc:0f:3c:30:d1:3e:da:0f:6f:ce:40:c7: 02:94:60:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMYwLhQjAjZqk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NDAwMTE3MmUtOTA3ZS00MzE0LTkyMmItNWUwZmY2NWU0NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ1qBKYFUF066IXJ7QgRnTeLihBizxm8bHTz MKPoqGu4081FDhXKWbyUqjB8+JNWI3J47M6ygyvu7VEv103GLHghIobi0ZbmOg4T sBvyq8BqDuqVZcdwEAf7KmUM4S1B48OQ/6qrhJt1kl2FZfF8/UWHyaTgX0aro4q2 ViXFmWHzI2y0aJZFJKOv2Hbbqm1nz1kplRm5D44IHwNMjUreFdvxUpAUC/EiSN0X oRmevo2VAKlmO3HDlUz4vPEPB+ZmYVtTJfRBHtjNyXm1JkB11KSL1rQRjfONHYdY 9JcL067KU1c7Rotat4OdJ3HdXod5q1oMax9JkwS5Mfr0XI/mtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVvIqxlrKccC5RWKzPhHPjxSq6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjdhYTdhYzEtODczZS0z MTk2LTk2MWItMGM3ODdjMGYxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8KQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3jglp39ql9Uf5Ub9k2B7RaDmCwwBHCEdgdds1QUZqjE9DRDRcS+bl2 zYnwqGNNRZyObtyzsggexB4Uu4FCnTdVV/PvVg0glDslAonTQhf49PfcG3BZNxj+ 3BtRw7fmaPkXZcOSTteWdIVy8pYlB0kS6JjkLe5oYrJQ+NLG44CDcBzUx6m0YVwH +j0pzdpzI2qBcMDmySv5B9bCH5PdHA53oDN7BS1GbZ/RNS4Jri5sGpM0D6RmLbPz MOiZCUPP6mXsiKi1UC6mHASndpXUR3W3zIdPbTZkBLH86pdvAmPWuuN7dkrUgrRr WjvllpsWdfwPPDDRPtoPb85AxwKUYIg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:44 2025 by rpki-client