$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa File: 5107cb12-7dcd-3137-83ab-78d947b463bc.roa (raw, json) Hash identifier: Dq8mFcEWE6Cvh/zEgcKVIkIQYldidoDAjgvid/n0gp0= Subject key identifier: 3C:FE:D3:1D:94:65:0C:3D:E8:EB:4C:3A:D1:21:E6:62:99:AB:76:C4 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD13F872455A425F39F18 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 23.90.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d1:3f:87:24:55:a4:25:f3:9f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d0d38f58-af36-45c3-a9ba-102962c3328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:ac:cc:34:e9:53:32:e2:c3:52:6b:49:89: dc:5f:1f:68:27:ac:19:98:23:f8:9e:59:fe:37:ef: fb:90:f3:e7:89:88:d2:c1:c4:05:13:e1:1e:30:b0: e9:3f:bb:59:7d:57:db:c8:dd:3c:93:9c:a1:89:7a: 09:23:45:0e:80:a6:4e:db:3f:ee:e5:1e:fd:7c:05: 19:15:2b:5e:6f:b1:e5:66:2f:41:f2:d0:7e:86:b5: 0a:76:5c:79:45:7c:db:af:61:77:72:25:f5:5f:5a: 40:9b:29:6e:8f:31:d3:22:5d:5a:47:ac:b2:4c:31: da:7d:2d:ce:3a:b9:f4:ef:48:83:23:be:39:fd:e2: 20:3d:03:3e:f7:2f:9a:c8:8a:7a:c4:7c:7b:6c:41: df:b3:6a:0d:66:83:98:d6:bc:a2:46:fe:7a:2e:4e: 78:e9:49:b2:1c:87:59:cb:81:18:a3:3b:40:bd:28: 98:f9:30:f3:2a:64:42:94:6a:38:f9:35:7c:ec:5c: 55:fe:5a:04:1d:ed:6d:f8:ce:e6:cb:09:db:bc:47: c6:0b:03:15:c5:51:0a:16:df:10:27:0a:52:1e:fc: ae:27:76:05:0e:1c:32:0f:0d:74:0a:77:46:56:2f: 3d:87:fb:7c:93:01:af:6e:42:3c:1f:82:6a:f9:54: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:D3:1D:94:65:0C:3D:E8:EB:4C:3A:D1:21:E6:62:99:AB:76:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:df:93:3a:ac:1a:ee:45:bf:88:98:db:b4:44:83:d8:54:a1: 7e:2d:7a:d0:0b:63:fe:8f:36:81:95:f0:64:bf:73:cf:4f:d3: 99:25:52:f2:03:2c:15:70:95:d9:52:7b:1e:07:4e:77:ae:f3: 6f:df:ce:fa:57:ee:76:f5:95:6d:2b:90:c4:26:02:b6:6d:c1: ed:9f:a9:ce:c4:cd:4e:61:db:36:a3:1b:5d:3e:cf:0a:8c:51: 6d:b3:4f:3e:bc:96:5b:b1:ea:8e:fd:20:28:9f:cc:4a:b8:1c: a2:ce:9a:d7:b2:2e:74:b7:f0:3f:d9:23:75:4b:29:42:71:0b: f7:a3:ac:f1:bd:85:ce:7e:16:00:6a:8a:1d:3f:05:fb:33:a2: 31:39:45:0e:6f:ae:3b:2b:e9:7c:8f:94:c2:9b:d4:21:f6:04: 0a:ca:6f:02:e7:8e:69:7e:a5:4c:e9:97:93:9d:67:4d:0d:4d: 8d:5e:42:7d:5f:6b:ee:bd:57:6b:da:57:30:1e:21:85:2b:e0: 63:f8:87:80:23:5f:68:fe:16:04:d1:87:b3:18:39:13:ed:bf: 77:a0:17:b8:08:aa:28:2e:da:8b:40:e4:1d:8f:10:00:7a:db: 5f:26:86:f8:aa:9c:c9:f5:81:3d:52:e8:24:d5:d2:21:36:cc: 1d:da:c1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9E/hyRVpCXznxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDBkMzhmNTgtYWYzNi00NWMzLWE5YmEtMTAyOTYyYzMzMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpyszDTpUzLiw1JrSYncXx9oJ6wZmCP4nln+ N+/7kPPniYjSwcQFE+EeMLDpP7tZfVfbyN08k5yhiXoJI0UOgKZO2z/u5R79fAUZ FSteb7HlZi9B8tB+hrUKdlx5RXzbr2F3ciX1X1pAmylujzHTIl1aR6yyTDHafS3O Orn070iDI745/eIgPQM+9y+ayIp6xHx7bEHfs2oNZoOY1ryiRv56Lk546UmyHIdZ y4EYoztAvSiY+TDzKmRClGo4+TV87FxV/loEHe1t+M7mywnbvEfGCwMVxVEKFt8Q JwpSHvyuJ3YFDhwyDw10CndGVi89h/t8kwGvbkI8H4Jq+VTg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz+0x2UZQw96OtMOtEh5mKZq3bEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTEwN2NiMTItN2RjZC0z MTM3LTgzYWItNzhkOTQ3YjQ2M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1piMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjfkzqsGu5Fv4iY27REg9hUoX4tetALY/6PNoGV8GS/c89P05klUvID LBVwldlSex4HTneu82/fzvpX7nb1lW0rkMQmArZtwe2fqc7EzU5h2zajG10+zwqM UW2zTz68llux6o79ICifzEq4HKLOmteyLnS38D/ZI3VLKUJxC/ejrPG9hc5+FgBq ih0/BfszojE5RQ5vrjsr6XyPlMKb1CH2BArKbwLnjml+pUzpl5OdZ00NTY1eQn1f a+69V2vaVzAeIYUr4GP4h4AjX2j+FgTRh7MYORPtv3egF7gIqigu2otA5B2PEAB6 218mhviqnMn1gT1S6CTV0iE2zB3awQ0= -----END CERTIFICATE-----Generated at Tue Apr 29 09:38:31 2025 by rpki-client