$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc072e03-804b-3b96-b245-c97ffc82c28c.roa File: fc072e03-804b-3b96-b245-c97ffc82c28c.roa (raw, json) Hash identifier: EH2n1s02qP5feiWwWr/IAkLEvxqnEIyiLGW+TQOCNCQ= Subject key identifier: 69:4D:8B:D8:C6:15:06:C8:AD:56:52:C3:04:F5:2C:61:B3:D2:16:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BFEB9019B614792C9766DE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc072e03-804b-3b96-b245-c97ffc82c28c.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 16625 IP address blocks: 23.211.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:90:19:b6:14:79:2c:97:66:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=d61edcaf-fd72-4807-abc5-cd0c6eaa0e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:36:c8:92:9e:49:f3:29:5e:c7:ed:05:23: 43:d2:30:74:cc:df:df:fe:19:c9:6b:42:d7:ee:78: 68:f9:d4:54:45:87:ad:7b:4b:79:fa:b1:a5:e3:d6: 86:80:b2:b9:a9:60:0f:6e:9d:f4:06:4d:41:93:48: 86:64:c8:df:8e:9a:1c:b1:61:20:95:42:7a:76:98: 43:c3:8e:2e:56:de:84:de:3d:33:9b:8e:32:3d:66: 39:89:d2:92:1f:31:75:89:67:4f:7a:0a:0b:b5:0c: 03:52:35:b7:17:aa:39:d5:11:ae:1c:58:b1:32:87: e8:48:39:5a:79:61:f2:1a:3f:be:8b:60:d9:b4:68: 14:30:f6:70:72:19:30:59:b5:98:d1:d5:3f:8b:7f: f7:c6:09:e5:cf:60:05:2b:fd:08:1d:90:68:f5:99: 72:04:5e:9b:f3:5b:56:13:3e:3c:42:dd:56:f9:33: a8:60:31:c5:e9:ec:cf:7d:23:63:01:d6:30:25:64: bb:bb:f1:7d:de:d7:7b:ac:20:bb:2e:06:a5:97:fd: 77:49:36:6b:95:c2:38:02:73:21:6f:e1:52:c5:61: 52:f6:77:20:53:da:b5:3d:18:e4:12:41:bc:af:38: 7b:91:bd:ba:b0:03:5f:2c:da:3f:63:dc:70:88:52: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:8B:D8:C6:15:06:C8:AD:56:52:C3:04:F5:2C:61:B3:D2:16:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc072e03-804b-3b96-b245-c97ffc82c28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:94:82:94:f9:a4:8b:9b:b6:df:d0:1e:f2:fe:a4:b5:a0:37: 34:df:ae:66:9b:22:6a:28:c6:67:42:d3:09:bd:97:f1:d4:f7: 8c:d7:fe:4f:bd:ef:a4:b2:58:ff:04:45:6d:c3:83:07:5f:03: 86:54:0f:1c:4d:8f:71:9d:7f:0a:01:4b:06:9c:f9:5b:6d:44: d0:f9:0c:88:98:00:67:3a:ac:32:62:ca:59:d5:13:15:8f:d4: e8:9e:6d:03:5c:9d:ae:69:bf:ad:90:df:0c:1b:90:38:e3:f8: e6:b5:93:23:c1:38:f1:30:89:0a:2e:1f:14:2c:e6:d5:5d:35: 5f:2b:5e:63:25:fc:d6:9c:e6:bc:be:40:e6:17:d3:d9:ef:70: ac:36:43:f1:41:9f:5a:32:e4:23:58:e2:19:1f:28:0e:48:e7: ea:97:ef:5a:11:a2:85:49:32:89:01:2b:55:96:48:f9:f0:a0: 86:65:fa:85:47:7b:4f:b8:88:4e:8c:d5:77:77:09:e7:6e:23: 9d:02:9d:6e:ae:41:30:e5:21:39:ff:b2:cb:00:e1:fa:10:6b: 4f:c6:f5:d9:af:62:fa:45:08:e4:ed:50:8e:a0:1d:aa:47:38: 88:13:ea:c0:d8:5d:50:e0:2c:c2:b5:c4:6e:a1:16:6c:e4:da: b9:bf:0b:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65AZthR5LJdm3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZDYxZWRjYWYtZmQ3Mi00ODA3LWFiYzUtY2QwYzZlYWEwZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3s2yJKeSfMpXsftBSND0jB0zN/f/hnJa0LX 7nho+dRURYete0t5+rGl49aGgLK5qWAPbp30Bk1Bk0iGZMjfjpocsWEglUJ6dphD w44uVt6E3j0zm44yPWY5idKSHzF1iWdPegoLtQwDUjW3F6o51RGuHFixMofoSDla eWHyGj++i2DZtGgUMPZwchkwWbWY0dU/i3/3xgnlz2AFK/0IHZBo9ZlyBF6b81tW Ez48Qt1W+TOoYDHF6ezPfSNjAdYwJWS7u/F93td7rCC7Lgall/13STZrlcI4AnMh b+FSxWFS9ncgU9q1PRjkEkG8rzh7kb26sANfLNo/Y9xwiFJZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlNi9jGFQbIrVZSwwT1LGGz0hbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmMwNzJlMDMtODA0Yi0z Yjk2LWIyNDUtYzk3ZmZjODJjMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKUgpT5pIubtt/QHvL+pLWgNzTfrmabImooxmdC0wm9l/HU94zX/k+9 76SyWP8ERW3DgwdfA4ZUDxxNj3GdfwoBSwac+VttRND5DIiYAGc6rDJiylnVExWP 1OiebQNcna5pv62Q3wwbkDjj+Oa1kyPBOPEwiQouHxQs5tVdNV8rXmMl/Nac5ry+ QOYX09nvcKw2Q/FBn1oy5CNY4hkfKA5I5+qX71oRooVJMokBK1WWSPnwoIZl+oVH e0+4iE6M1Xd3CeduI50CnW6uQTDlITn/sssA4foQa0/G9dmvYvpFCOTtUI6gHapH OIgT6sDYXVDgLMK1xG6hFmzk2rm/C/I= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:49 2025 by rpki-client