$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcff72e5-0bb0-3f72-b183-e02c79ae3ea4.roa File: fcff72e5-0bb0-3f72-b183-e02c79ae3ea4.roa (raw, json) Hash identifier: aPWNliCKj8S5RMKhHxS4R3Xvt1niLoG0bTSMPBG6qxw= Subject key identifier: 56:BE:BB:F6:4C:DE:22:4E:8D:E7:4A:91:BF:CD:4F:C1:ED:9B:FF:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DB289AA8F6A42EBBC140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcff72e5-0bb0-3f72-b183-e02c79ae3ea4.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.193.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:db:28:9a:a8:f6:a4:2e:bb:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=55bb82b4-5c0e-45ec-af6f-4c24fd9fdeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:08:0b:4c:3f:61:05:7f:0e:aa:b9:be:6d: 4e:f1:47:5a:56:bf:d8:a4:66:f3:d0:ca:c2:af:4f: 33:eb:2e:3e:00:c8:bd:7d:7d:d9:8f:2c:36:a6:71: 0e:26:2d:e3:60:3f:2c:8a:45:aa:1f:9f:79:63:24: 8c:de:bf:5d:73:88:ca:fc:bf:06:0a:2d:29:59:02: 3f:5b:35:5d:75:ea:ee:2f:c3:13:b0:b3:1a:b5:cb: a1:13:24:80:94:07:92:50:dd:54:8d:80:73:c9:09: 3b:a1:90:e9:26:f1:aa:a2:fc:33:b0:0f:80:bd:2e: e8:51:62:50:12:1e:b7:3c:62:59:a6:6e:40:04:70: d0:06:a2:51:b9:d3:cb:02:44:40:23:66:66:f4:97: a2:14:a4:65:3c:2e:da:10:73:67:40:93:b5:34:3f: 6d:8f:ee:3f:d4:18:84:46:28:f1:7e:7f:45:57:83: 92:2b:e0:e2:86:28:78:74:3b:c0:6a:e6:58:db:4b: 7e:e3:1d:35:9d:d0:2e:44:3b:34:50:62:04:6e:69: a0:e1:77:ad:41:65:8a:9a:e0:bd:e0:53:c0:fb:63: e6:fc:8a:ae:af:e6:29:55:50:ae:3a:f5:57:a8:d9: 3a:5a:36:ed:1f:8d:cf:f0:39:bb:e4:91:ab:93:53: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BE:BB:F6:4C:DE:22:4E:8D:E7:4A:91:BF:CD:4F:C1:ED:9B:FF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcff72e5-0bb0-3f72-b183-e02c79ae3ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c4:0e:76:84:73:37:b7:ae:1d:b7:9c:da:a7:70:21:c6:8a: a4:cc:fa:3f:e8:f2:db:27:fe:c4:dc:74:1e:af:0d:65:b9:c4: f3:52:db:93:67:12:35:6e:42:61:ec:30:8c:29:6b:4b:e3:91: a5:0d:88:88:f1:7e:fb:fb:24:18:6c:d6:45:ad:cf:82:85:15: 9a:08:33:d4:eb:f0:31:de:aa:e6:bf:6a:57:c7:58:c5:08:97: fd:02:2d:99:74:6c:8a:6a:aa:ed:e2:ae:5b:e0:00:a2:ff:97: 90:3c:24:5e:45:eb:42:fc:f2:f7:6c:e2:f9:8f:07:57:50:f6: d9:a6:4a:76:29:b2:e8:a1:e7:02:fe:e3:d4:bb:1e:3f:0d:c1: 68:99:57:df:bb:d9:8f:e2:ea:9c:28:40:94:bc:f9:df:da:da: 54:69:32:d0:2c:7f:e8:d4:ae:81:d6:1b:02:55:d7:f8:3a:53: 66:d7:74:27:9a:64:42:c9:2c:f0:74:31:70:df:15:4d:84:7b: 71:9c:b6:0b:3a:39:aa:62:e7:31:7f:69:98:ea:79:db:9a:c7: f4:9b:ec:fc:0e:69:85:af:35:33:e5:0b:65:e9:b3:f6:27:88: f0:98:b2:3c:7e:06:1b:1c:9e:57:9b:14:de:49:a5:76:05:b9: 76:88:1e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANsomqj2pC67wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NTViYjgyYjQtNWMwZS00NWVjLWFmNmYtNGMyNGZkOWZkZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs28IC0w/YQV/Dqq5vm1O8UdaVr/YpGbz0MrC r08z6y4+AMi9fX3Zjyw2pnEOJi3jYD8sikWqH595YySM3r9dc4jK/L8GCi0pWQI/ WzVdderuL8MTsLMatcuhEySAlAeSUN1UjYBzyQk7oZDpJvGqovwzsA+AvS7oUWJQ Eh63PGJZpm5ABHDQBqJRudPLAkRAI2Zm9JeiFKRlPC7aEHNnQJO1ND9tj+4/1BiE Rijxfn9FV4OSK+Dihih4dDvAauZY20t+4x01ndAuRDs0UGIEbmmg4XetQWWKmuC9 4FPA+2Pm/Iqur+YpVVCuOvVXqNk6WjbtH43P8Dm75JGrk1MekQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa+u/ZM3iJOjedKkb/NT8Htm/+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmNmZjcyZTUtMGJiMC0z ZjcyLWIxODMtZTAyYzc5YWUzZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8F8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPEDnaEcze3rh23nNqncCHGiqTM+j/o8tsn/sTcdB6vDWW5xPNS25Nn EjVuQmHsMIwpa0vjkaUNiIjxfvv7JBhs1kWtz4KFFZoIM9Tr8DHequa/alfHWMUI l/0CLZl0bIpqqu3irlvgAKL/l5A8JF5F60L88vds4vmPB1dQ9tmmSnYpsuih5wL+ 49S7Hj8NwWiZV9+72Y/i6pwoQJS8+d/a2lRpMtAsf+jUroHWGwJV1/g6U2bXdCea ZELJLPB0MXDfFU2Ee3Gctgs6Oapi5zF/aZjqeduax/Sb7PwOaYWvNTPlC2Xps/Yn iPCYsjx+BhscnlebFN5JpXYFuXaIHiE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:59 2025 by rpki-client