$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa File: f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa (raw, json) Hash identifier: rZzZbfgci+2S3iU1WhyCw9s+UnKdNQd+BWZIEjK2C/w= Subject key identifier: AF:BB:41:D0:E1:4A:C2:26:CF:D5:45:27:94:1A:31:E0:4E:DC:71:90 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F432858486D905187F5CF1B55F708A000 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 13445 IP address blocks: 23.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:51:87:f5:cf:1b:55:f7:08:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=03999230-be2e-4c1d-987c-8520bcd09bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9d:9a:d1:bf:ef:71:01:56:7e:27:4a:7d:ff: 8b:c2:f1:95:6c:ad:a8:71:93:1d:f6:ea:33:f3:f2: 7b:8d:0a:44:4e:26:2b:95:c0:d2:42:30:16:99:6c: 24:89:9d:98:e8:33:94:3b:6b:f5:86:78:eb:c7:03: 0f:09:c1:84:eb:fc:a7:a9:44:f3:2d:f6:6b:e4:62: 8a:0f:ce:26:e8:08:19:e4:9b:dc:27:25:8d:9c:d7: 22:40:37:0d:99:43:51:87:03:c1:16:f0:e4:7d:a0: 74:ea:d8:0b:db:5c:f3:79:21:df:d0:1f:4f:b3:a0: 96:13:47:62:1d:3d:f9:f9:06:3c:a1:e7:8a:e1:85: dd:d8:19:f5:d3:06:6a:d2:a1:55:21:fb:ee:10:01: 4e:91:99:61:6e:03:90:bb:8f:51:83:30:e3:5f:60: f2:b3:b9:9d:00:4b:70:27:cf:6d:72:32:8f:9a:8a: bb:c3:2b:e4:f0:ed:31:e4:2a:bf:37:31:93:c1:93: fd:b0:a1:cc:7c:58:4f:a4:9d:ac:6d:65:c4:ec:ce: fa:e6:61:ee:8e:88:3c:7a:ed:21:db:41:5b:dd:6f: f9:3a:5f:10:a9:1e:a6:86:49:10:84:07:27:1d:93: 29:f3:cb:0b:8e:a4:34:bd:96:c8:96:86:3a:87:d6: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BB:41:D0:E1:4A:C2:26:CF:D5:45:27:94:1A:31:E0:4E:DC:71:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ff:a7:3c:6c:50:e6:e6:65:50:4f:46:9c:4a:7e:34:4d:19: e5:a7:72:d6:b7:82:5a:88:f0:74:a9:da:b2:de:43:ea:7f:29: be:34:96:08:76:2c:b2:80:d0:1c:70:1b:41:0d:a7:ea:0e:b0: bd:44:cd:1e:c0:ed:8d:c3:52:29:7d:11:f2:22:aa:75:06:d2: 54:bd:a1:4b:17:cf:1b:6d:6f:f0:47:7b:79:5a:4e:b8:b8:e4: 7c:ec:de:2d:c8:5e:01:a2:d9:3a:89:a3:85:07:35:f6:70:09: b1:9b:fa:88:32:39:06:6b:9c:97:2c:01:e3:79:77:0a:d2:4b: 5d:d2:1e:d9:51:e5:a0:ca:46:b9:da:88:a5:cb:72:9c:39:e4: 98:f1:2c:1f:68:71:52:47:00:61:e5:4e:51:f8:02:35:6a:29: 5a:10:16:14:01:40:d5:66:fa:16:64:07:bc:f3:b2:8b:99:05: 50:6f:4b:11:64:e1:bf:3c:0f:41:76:c7:62:89:1f:22:3c:33: ec:9c:e3:64:83:4d:ba:3a:9d:70:98:a8:78:4a:5f:f6:c0:50: 7e:9a:17:89:a6:85:20:72:30:c0:0e:a7:19:87:7d:80:bc:64: 42:72:fc:0f:95:1d:86:1a:20:51:33:ef:1b:ab:d1:b7:6f:27: 97:48:39:52 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhtkFGH9c8bVfcIoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDM5OTkyMzAtYmUyZS00YzFkLTk4N2MtODUyMGJjZDA5YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp2a0b/vcQFWfidKff+LwvGVbK2ocZMd9uoz 8/J7jQpETiYrlcDSQjAWmWwkiZ2Y6DOUO2v1hnjrxwMPCcGE6/ynqUTzLfZr5GKK D84m6AgZ5JvcJyWNnNciQDcNmUNRhwPBFvDkfaB06tgL21zzeSHf0B9Ps6CWE0di HT35+QY8oeeK4YXd2Bn10wZq0qFVIfvuEAFOkZlhbgOQu49RgzDjX2Dys7mdAEtw J89tcjKPmoq7wyvk8O0x5Cq/NzGTwZP9sKHMfFhPpJ2sbWXE7M765mHujog8eu0h 20Fb3W/5Ol8QqR6mhkkQhAcnHZMp88sLjqQ0vZbIloY6h9agewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK+7QdDhSsImz9VFJ5QaMeBO3HGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjg4ZmZiYjktZjg2YS0z NmMzLWFkMjAtMzMzZTdmYTg0MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAF1kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADv+nPGxQ5uZlUE9GnEp+NE0Z5ady1reCWojwdKnast5D6n8pvjSWCHYs soDQHHAbQQ2n6g6wvUTNHsDtjcNSKX0R8iKqdQbSVL2hSxfPG21v8Ed7eVpOuLjk fOzeLcheAaLZOomjhQc19nAJsZv6iDI5BmuclywB43l3CtJLXdIe2VHloMpGudqI pctynDnkmPEsH2hxUkcAYeVOUfgCNWopWhAWFAFA1Wb6FmQHvPOyi5kFUG9LEWTh vzwPQXbHYokfIjwz7JzjZINNujqdcJioeEpf9sBQfpoXiaaFIHIwwA6nGYd9gLxk QnL8D5UdhhogUTPvG6vRt28nl0g5Ug== -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:10 2025 by rpki-client