$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa File: f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa (raw, json) Hash identifier: fWcv+8DZ6FZQQIOK1U5x/I3EvsHXtuY3NR9JSkmwoo8= Subject key identifier: 03:9D:9F:F9:46:80:2B:CD:CA:0A:CE:85:8F:6A:47:B1:C1:88:1F:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8ED094E2AA833BD0DB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.212.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8e:d0:94:e2:aa:83:3b:d0:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=53b8c366-b41e-40ff-aa64-08b5fbaa5a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:55:95:e9:19:b8:5f:87:83:1d:f5:72:cd: 00:fa:5f:57:38:cd:64:c8:d0:47:48:39:08:24:4c: 1d:16:09:05:f9:07:81:d1:0e:89:a5:b4:06:39:9b: 93:24:bb:29:d5:25:84:23:62:cd:fb:89:cf:be:a6: db:e0:c9:21:1c:2a:c9:f7:b0:3e:94:bd:8e:f5:7e: 23:d4:74:ab:84:aa:f1:c4:63:39:37:1c:87:61:04: 4f:21:07:f7:a3:68:b6:ff:88:6a:47:61:22:8d:3f: f3:27:78:3b:bf:68:76:bf:51:78:f8:dc:7c:59:44: b4:91:a2:39:94:14:49:00:2a:19:a9:33:fe:39:99: d0:cc:24:59:84:ce:8c:d1:92:a9:6b:55:61:25:c4: f3:e8:bd:ae:f0:e4:37:a5:4e:93:a7:be:87:8c:48: 50:18:9f:4c:a8:a5:56:70:de:3d:44:c8:31:ac:0f: e4:5e:2d:24:f7:fb:79:b6:a2:e6:62:9c:7b:4a:90: 45:1e:cf:2f:22:6b:9b:d9:af:bb:32:bb:b7:82:fd: 53:85:fa:da:bd:62:1b:23:53:a4:2f:f6:84:5e:d4: 93:6f:8c:f9:30:97:df:57:53:a1:14:34:5c:2f:d8: a9:72:62:bf:eb:e8:70:73:0d:a6:60:4b:57:88:b8: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9D:9F:F9:46:80:2B:CD:CA:0A:CE:85:8F:6A:47:B1:C1:88:1F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:22:f5:e8:bb:85:dd:97:24:3b:9f:85:01:c2:8d:aa:35:51: 76:d7:13:fa:87:e3:e7:f6:6e:e0:7f:ab:b5:de:a8:01:c9:e7: 4a:d0:84:49:a9:0a:a8:89:55:bf:82:78:24:da:5d:3b:94:47: b4:38:fa:41:b2:0b:41:a8:f5:9a:38:59:4f:3c:cc:07:9b:dd: 3c:ee:ed:41:a3:e1:71:de:f2:a0:cb:cd:9d:33:ed:ea:b7:14: 4a:32:a6:bd:b0:17:3b:82:c8:16:94:07:18:7a:e8:d2:b7:f4: 57:d7:b2:5e:11:2a:8b:0b:14:f9:d3:ae:14:dc:f8:f2:b7:13: 72:09:e7:96:95:46:b3:b2:8c:48:f6:79:37:c6:aa:32:d5:54: 3d:dc:04:34:9d:d5:1a:00:ea:72:05:a9:46:fc:cc:f0:c7:06: 87:e8:4f:e0:4c:e0:bb:cc:06:4e:50:c7:43:4d:b2:4b:1f:c2: 07:37:5a:45:55:06:e2:c0:15:f3:e3:30:ce:55:63:09:75:21: 82:7d:8c:6e:40:3b:1a:ea:3b:d2:3d:b6:17:0d:2a:97:49:e6: 16:29:c6:03:bb:39:a7:95:a0:b8:f7:77:77:b9:b7:71:96:5e: 57:55:73:1c:b2:f7:58:82:6e:4a:73:83:07:d6:71:7d:32:c6: b0:19:d7:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u47QlOKqgzvQ24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NTNiOGMzNjYtYjQxZS00MGZmLWFhNjQtMDhiNWZiYWE1YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXpVlekZuF+Hgx31cs0A+l9XOM1kyNBHSDkI JEwdFgkF+QeB0Q6JpbQGOZuTJLsp1SWEI2LN+4nPvqbb4MkhHCrJ97A+lL2O9X4j 1HSrhKrxxGM5NxyHYQRPIQf3o2i2/4hqR2EijT/zJ3g7v2h2v1F4+Nx8WUS0kaI5 lBRJACoZqTP+OZnQzCRZhM6M0ZKpa1VhJcTz6L2u8OQ3pU6Tp76HjEhQGJ9MqKVW cN49RMgxrA/kXi0k9/t5tqLmYpx7SpBFHs8vImub2a+7Mru3gv1ThfravWIbI1Ok L/aEXtSTb4z5MJffV1OhFDRcL9ipcmK/6+hwcw2mYEtXiLjXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOdn/lGgCvNygrOhY9qR7HBiB/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkZjIwMjMtZGE2Yy0z ZTYxLWJmZDEtNWIzM2M0YjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEi9ei7hd2XJDufhQHCjao1UXbXE/qH4+f2buB/q7XeqAHJ50rQhEmp CqiJVb+CeCTaXTuUR7Q4+kGyC0Go9Zo4WU88zAeb3Tzu7UGj4XHe8qDLzZ0z7eq3 FEoypr2wFzuCyBaUBxh66NK39FfXsl4RKosLFPnTrhTc+PK3E3IJ55aVRrOyjEj2 eTfGqjLVVD3cBDSd1RoA6nIFqUb8zPDHBofoT+BM4LvMBk5Qx0NNsksfwgc3WkVV BuLAFfPjMM5VYwl1IYJ9jG5AOxrqO9I9thcNKpdJ5hYpxgO7OaeVoLj3d3e5t3GW XldVcxyy91iCbkpzgwfWcX0yxrAZ1x4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:54 2025 by rpki-client