$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa File: 5d90966f-a528-3b8b-8dc3-ede422faaf58.roa (raw, json) Hash identifier: UZZoWaeQcLCQ3QKCFzSoQN3bINYBs6CTX6Pk0mjUMSA= Subject key identifier: CE:FF:98:4F:0B:78:0F:98:7B:21:A5:99:7B:FC:7B:1E:E4:65:21:17 Certificate issuer: /CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe Certificate serial: 010D0C9F43285848E59BC1D626241CFCE3C5B780 Authority key identifier: C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397592 IP address blocks: 23.134.112.0/24 maxlen: 24 2620:13f:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c1:d6:26:24:1c:fc:e3:c5:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=0f55e807-1957-481c-a1fb-e880e2f67ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ad:06:bc:0f:05:7b:ee:0f:5f:23:e7:c3:e4: 78:fc:65:e7:d9:59:79:bf:68:eb:23:b1:ec:40:d2: 95:cb:0e:ea:c5:bb:d4:35:8a:6e:bf:b3:e7:14:12: c5:89:90:d5:c6:ac:cc:07:87:fb:c1:61:28:c3:33: b4:36:46:b4:00:2b:f4:e8:9c:58:6f:50:4f:a7:8d: 49:e1:53:7b:b6:8b:a7:76:ee:4f:00:3a:ad:3d:22: ee:96:67:a1:59:5d:35:56:6d:fb:67:56:63:f1:d7: 8b:0a:45:0d:c9:ed:5e:ea:42:69:6d:33:d0:3b:6f: 72:14:96:c7:0d:76:13:27:2f:c6:47:f1:7f:8c:56: df:d8:48:20:ea:3b:60:23:5f:56:c8:9d:3c:c6:a6: 01:32:05:06:ee:85:fc:37:84:d1:5c:40:bf:4f:66: d2:bc:33:f9:a4:af:39:fa:f0:34:41:1d:61:04:e8: ce:d0:89:69:e6:22:33:4e:f6:83:79:e3:07:84:5d: 59:04:4b:89:ef:50:51:dd:de:92:58:72:50:e3:75: 3b:f5:5f:e1:7b:5e:1f:4f:34:6b:08:99:7f:49:65: 62:59:ce:ba:94:6d:d4:a4:ac:ca:29:8d:3e:5a:cb: f5:1c:a4:49:c4:97:de:5c:d0:17:68:19:85:3b:d5: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:98:4F:0B:78:0F:98:7B:21:A5:99:7B:FC:7B:1E:E4:65:21:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl X509v3 Authority Key Identifier: keyid:C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer sbgp-ipAddrBlock: critical IPv4: 23.134.112.0/24 IPv6: 2620:13f:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:63:9d:d1:5e:3e:27:16:67:4d:65:34:6f:2c:71:51:c3:77: 4f:b0:78:35:59:93:7d:3e:63:dc:e8:63:b7:a2:44:e3:75:78: 7e:a7:ba:7c:e0:da:a8:58:e4:e4:54:de:66:95:ca:8d:6f:b6: 6c:de:be:43:1a:26:bb:b7:66:d9:77:94:2b:1e:b4:a3:36:fc: b6:97:44:e8:e3:ef:18:ee:10:dd:e6:ec:ab:51:7f:4c:8c:cb: 8b:b0:06:db:53:a0:85:f6:5f:c4:3b:0e:4a:05:21:d1:b7:e5: aa:f2:49:bc:5f:21:41:b4:f5:1d:dc:a3:df:d5:e9:17:30:15: ec:0e:8a:65:83:b3:02:41:ed:8c:c1:75:b5:b0:bf:cb:66:5d: 81:a3:9c:2b:aa:f6:bb:8e:20:bc:36:68:e9:2f:c2:d7:15:37: 75:96:73:83:65:77:f2:a2:39:c3:14:e3:89:bb:81:67:15:7f: eb:cd:f5:29:29:ee:61:a5:02:7c:40:fc:df:58:87:db:06:9d: 61:1b:e0:2c:81:00:6c:cf:bc:ef:2f:f9:46:0d:53:2f:84:de: 06:23:5c:69:ad:61:3e:fc:f0:f5:ad:75:c3:60:a5:f9:97:c2: 37:92:f8:c0:18:da:a8:73:cf:35:13:57:65:c0:19:1b:6e:77: fc:b0:71:21 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjlm8HWJiQc/OPFt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRhMWY3NzgtYWVjZC00YmI4LWE1NDUtYjhjYjRiMThi M2ZlMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MGY1NWU4MDctMTk1Ny00ODFjLWExZmItZTg4MGUyZjY3ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA660GvA8Fe+4PXyPnw+R4/GXn2Vl5v2jrI7Hs QNKVyw7qxbvUNYpuv7PnFBLFiZDVxqzMB4f7wWEowzO0Nka0ACv06JxYb1BPp41J 4VN7toundu5PADqtPSLulmehWV01Vm37Z1Zj8deLCkUNye1e6kJpbTPQO29yFJbH DXYTJy/GR/F/jFbf2Egg6jtgI19WyJ08xqYBMgUG7oX8N4TRXEC/T2bSvDP5pK85 +vA0QR1hBOjO0Ilp5iIzTvaDeeMHhF1ZBEuJ71BR3d6SWHJQ43U79V/he14fTzRr CJl/SWViWc66lG3UpKzKKY0+Wsv1HKRJxJfeXNAXaBmFO9W2yQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM7/mE8LeA+YeyGlmXv8ex7kZSEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGEx Zjc3OC1hZWNkLTRiYjgtYTU0NS1iOGNiNGIxOGIzZmUvNWQ5MDk2NmYtYTUyOC0z YjhiLThkYzMtZWRlNDIyZmFhZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRhMWY3NzgtYWVjZC00YmI4LWE1 NDUtYjhjYjRiMThiM2ZlLzhkYTFmNzc4LWFlY2QtNGJiOC1hNTQ1LWI4Y2I0YjE4 YjNmZS5jcmwwHwYDVR0jBBgwFoAUws5R985w6ZOvOqtng4XVfwJI6c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGExZjc3OC1hZWNkLTRiYjgtYTU0NS1iOGNi NGIxOGIzZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4ZwMA8E AgACMAkDBwQmIAE/UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg2Od0V4+JxZnTWU0byxxUcN3T7B4NVmT fT5j3Ohjt6JE43V4fqe6fODaqFjk5FTeZpXKjW+2bN6+Qxomu7dm2XeUKx60ozb8 tpdE6OPvGO4Q3ebsq1F/TIzLi7AG21OghfZfxDsOSgUh0bflqvJJvF8hQbT1Hdyj 39XpFzAV7A6KZYOzAkHtjMF1tbC/y2ZdgaOcK6r2u44gvDZo6S/C1xU3dZZzg2V3 8qI5wxTjibuBZxV/6831KSnuYaUCfED831iH2wadYRvgLIEAbM+87y/5Rg1TL4Te BiNcaa1hPvzw9a11w2Cl+ZfCN5L4wBjaqHPPNRNXZcAZG253/LBxIQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:31 2025 by rpki-client