$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/60395450-4a74-3660-821a-3f7121c2e161.roa File: 60395450-4a74-3660-821a-3f7121c2e161.roa (raw, json) Hash identifier: fEYo4Lk9G5ybV0nrKrtUbZbrcMLKwrmLjvyB8HC2lNE= Subject key identifier: A5:8A:2E:09:A7:0F:88:4D:4C:E1:24:7F:DA:CD:2E:BC:B2:A7:49:E0 Certificate issuer: /CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e Certificate serial: 010D0C9F432858489D05E82C58CF02B396A89640 Authority key identifier: 7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/60395450-4a74-3660-821a-3f7121c2e161.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 395886 IP address blocks: 23.186.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e8:2c:58:cf:02:b3:96:a8:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=6644c5c8-7427-4997-aefd-ed578bfa9b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:94:5b:38:73:d6:86:e3:84:d9:15:80:0a: 31:e9:cb:7f:40:4f:5a:b7:a5:0f:e6:3e:c2:14:8b: 03:54:e9:28:37:b0:17:64:fd:05:3e:66:5a:55:d0: eb:0b:1d:0c:89:32:c1:74:36:0f:40:6a:03:4f:80: 29:f9:b6:33:db:c8:2e:ae:bf:d9:a6:46:ef:4f:d8: 3d:d2:c4:e4:23:c2:80:32:9b:87:0b:83:9f:41:06: 41:b9:4e:69:44:41:62:aa:ef:df:be:18:10:3d:67: 79:fb:57:71:1e:17:62:07:ce:78:f0:80:d8:e9:e3: b5:e6:74:cb:ba:3e:b0:2e:a1:c1:00:c2:d2:09:9c: f7:0b:a8:d9:4d:74:2d:04:9d:85:c4:69:49:40:bb: 2a:09:80:8a:d9:a9:fe:c7:0d:34:0d:79:f3:49:05: a4:f7:23:2b:75:95:c2:98:be:92:cd:39:9a:5f:3e: 7a:fd:19:ec:78:14:7e:22:fc:12:81:83:08:39:e1: 55:0d:ac:7b:50:68:3b:e6:35:c4:1a:42:84:ff:47: 24:1b:89:50:4a:73:58:91:22:44:d6:5c:d0:93:29: 02:2a:94:64:b2:e1:77:59:17:62:2c:7e:a9:70:07: 69:e6:42:87:f5:6d:f8:3d:eb:c5:5b:09:5c:0d:3a: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:2E:09:A7:0F:88:4D:4C:E1:24:7F:DA:CD:2E:BC:B2:A7:49:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/60395450-4a74-3660-821a-3f7121c2e161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.crl X509v3 Authority Key Identifier: keyid:7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer sbgp-ipAddrBlock: critical IPv4: 23.186.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cd:9b:4d:73:e0:b2:b1:21:47:c7:ac:3f:e5:69:71:a7:6f: 4a:50:fd:65:2f:b5:9c:d0:8a:19:a8:6e:ec:59:94:0f:e2:14: 3c:d4:fe:4f:3b:01:9e:a1:69:18:3d:0e:f0:b2:15:8d:21:6e: e7:76:c1:e3:75:77:2d:a9:84:7f:0d:09:cd:80:7e:d3:a4:2b: 1a:b6:6a:25:74:b6:b3:84:42:61:52:3f:cb:a6:b5:36:54:47: 98:c4:d0:bd:d6:d8:d3:91:fb:26:c2:e7:a2:bc:3e:4e:48:36: 30:1a:13:1e:14:d7:df:c1:ac:a3:44:63:56:4b:4c:bd:ac:d5: d2:c6:47:ce:05:95:3a:7f:12:17:0a:79:93:d1:49:24:cc:8f: c1:1c:da:25:0c:a0:b9:64:69:37:33:c7:fb:c0:83:c4:a0:36: b2:3e:fe:56:52:ec:44:8e:ee:ee:97:f2:8e:0a:96:91:c1:64: b6:13:7e:0a:48:ef:a0:4e:08:c5:e6:4f:a7:cc:02:37:50:6d: 50:92:37:1e:ed:9d:28:8f:55:10:77:42:ce:8d:32:84:b2:f2: 48:b8:57:f2:61:fa:95:50:b7:8b:99:e9:19:ff:c1:14:29:92: 4f:39:e2:d3:1d:b5:f1:6c:66:c9:f3:4a:51:0e:73:f2:39:82: d3:9b:4b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBegsWM8Cs5aolkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTVhMWViODMtYTAwZi00YWQ3LTlmYzEtZDQ0YjkwZWY1 NDdlMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk NjY0NGM1YzgtNzQyNy00OTk3LWFlZmQtZWQ1NzhiZmE5YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEGUWzhz1objhNkVgAox6ct/QE9at6UP5j7C FIsDVOkoN7AXZP0FPmZaVdDrCx0MiTLBdDYPQGoDT4Ap+bYz28gurr/ZpkbvT9g9 0sTkI8KAMpuHC4OfQQZBuU5pREFiqu/fvhgQPWd5+1dxHhdiB8548IDY6eO15nTL uj6wLqHBAMLSCZz3C6jZTXQtBJ2FxGlJQLsqCYCK2an+xw00DXnzSQWk9yMrdZXC mL6SzTmaXz56/RnseBR+IvwSgYMIOeFVDax7UGg75jXEGkKE/0ckG4lQSnNYkSJE 1lzQkykCKpRksuF3WRdiLH6pcAdp5kKH9W34PevFWwlcDTpbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWKLgmnD4hNTOEkf9rNLryyp0ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NWEx ZWI4My1hMDBmLTRhZDctOWZjMS1kNDRiOTBlZjU0N2UvNjAzOTU0NTAtNGE3NC0z NjYwLTgyMWEtM2Y3MTIxYzJlMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTVhMWViODMtYTAwZi00YWQ3LTlm YzEtZDQ0YjkwZWY1NDdlLzU1YTFlYjgzLWEwMGYtNGFkNy05ZmMxLWQ0NGI5MGVm NTQ3ZS5jcmwwHwYDVR0jBBgwFoAUer9HZijSrGXcOUiG6K8mC0UVDSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NWExZWI4My1hMDBmLTRhZDctOWZjMS1kNDRi OTBlZjU0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDNm01z4LKxIUfHrD/laXGnb0pQ/WUvtZzQihmobuxZlA/iFDzU/k87 AZ6haRg9DvCyFY0hbud2weN1dy2phH8NCc2AftOkKxq2aiV0trOEQmFSP8umtTZU R5jE0L3W2NOR+ybC56K8Pk5INjAaEx4U19/BrKNEY1ZLTL2s1dLGR84FlTp/EhcK eZPRSSTMj8Ec2iUMoLlkaTczx/vAg8SgNrI+/lZS7ESO7u6X8o4KlpHBZLYTfgpI 76BOCMXmT6fMAjdQbVCSNx7tnSiPVRB3Qs6NMoSy8ki4V/Jh+pVQt4uZ6Rn/wRQp kk854tMdtfFsZsnzSlEOc/I5gtObS60= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:03 2025 by rpki-client