$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05679e12-40dd-3084-90c4-179db6afbbfc.roa File: 05679e12-40dd-3084-90c4-179db6afbbfc.roa (raw, json) Hash identifier: gLaGWNf9UbqLHVYT9DJ8Sn9SuVASZLRNhFgrwrr1CmU= Subject key identifier: 52:B4:A7:41:A8:21:79:2A:BB:E1:FE:AE:47:6E:B0:F3:FF:A3:32:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEDACD5FF927C2FDC6B800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05679e12-40dd-3084-90c4-179db6afbbfc.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.39.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:da:cd:5f:f9:27:c2:fd:c6:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=9822f347-27cf-4217-af11-2bb581fab053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:32:65:29:06:6f:a5:bb:22:cf:92:a2:1e: 01:aa:9e:00:9e:5a:69:4f:29:b3:02:60:d5:2f:69: fb:d6:1f:12:4e:9b:3c:80:5b:a7:2b:c1:a0:18:91: 27:e5:84:e6:62:56:62:0e:c0:2c:b8:17:3b:ab:68: fb:09:88:70:1c:ae:7e:2f:3b:a7:c8:26:46:78:f8: 16:9c:27:32:74:46:50:f2:de:33:dc:8e:b5:64:9e: 65:88:ff:09:c2:59:7a:54:de:1b:a4:7e:16:de:7c: a7:a3:e5:ac:ab:b3:f6:29:c0:ff:87:3f:f1:6e:67: 53:85:43:72:c4:b2:5f:2d:14:e7:84:92:5f:29:94: 93:69:10:b3:96:20:79:e5:34:66:28:f2:7f:06:be: 13:36:9a:33:8a:a1:e0:e6:37:04:cd:3e:48:d7:41: d0:76:db:e6:19:fb:e6:5e:21:4f:e0:16:1b:54:43: 96:0e:3f:5a:79:15:ba:78:a7:1f:b7:2d:b4:f1:f4: 82:a4:a6:29:d4:fe:06:8e:ab:c1:0f:3d:88:48:17: db:94:ff:d0:6d:47:a8:07:37:6a:6a:15:94:23:ef: 5a:a1:fc:42:05:42:03:7b:78:d2:87:8c:a2:3e:46: 92:94:37:81:f6:d8:39:76:c0:49:e0:bc:46:ff:c8: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:A7:41:A8:21:79:2A:BB:E1:FE:AE:47:6E:B0:F3:FF:A3:32:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05679e12-40dd-3084-90c4-179db6afbbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e8:89:4b:0c:60:86:60:64:ae:24:04:4c:c9:0c:25:9a:c4: 5d:39:a7:e0:e8:32:2f:54:51:bd:c9:70:97:0a:f0:ad:0e:b3: 20:a0:4c:e2:1b:b0:f7:94:8d:b0:f5:8a:28:b3:bf:2d:79:0f: 46:18:53:02:1a:6f:a6:68:a3:f7:30:51:8b:c8:da:e1:6a:22: 99:57:2a:4a:ae:e6:89:23:52:1e:f5:2f:3b:3d:66:fb:fa:69: b0:0d:0e:85:7b:59:a1:75:08:80:2f:af:12:de:f0:c4:20:db: 41:d2:fb:9c:8b:38:e7:4a:a3:97:0d:1e:3f:3c:b5:b6:75:79: be:e4:e0:9f:c9:e7:73:1c:aa:a6:5a:6b:64:2c:37:63:c6:ee: 96:99:27:11:13:20:00:cc:10:19:64:42:46:6f:6f:88:75:42: d8:cf:2a:60:66:b7:d9:d9:b9:2d:48:32:66:61:70:e7:16:94: ad:63:a2:72:53:b0:3a:ad:7d:87:49:e1:a5:f4:b6:9e:f2:a7: ec:10:ff:be:c2:9b:9c:62:dd:3d:16:20:ac:8b:4b:13:07:9b: 3b:01:57:fd:31:a4:d8:27:5e:20:6b:43:22:7f:a3:62:44:3b: f6:23:48:a8:e0:f9:47:b2:c2:a3:e9:79:f9:ed:fc:c8:1d:dd: ce:b6:ec:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtrNX/knwv3GuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk OTgyMmYzNDctMjdjZi00MjE3LWFmMTEtMmJiNTgxZmFiMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzgyZSkGb6W7Is+Soh4Bqp4AnlppTymzAmDV L2n71h8STps8gFunK8GgGJEn5YTmYlZiDsAsuBc7q2j7CYhwHK5+LzunyCZGePgW nCcydEZQ8t4z3I61ZJ5liP8Jwll6VN4bpH4W3nyno+Wsq7P2KcD/hz/xbmdThUNy xLJfLRTnhJJfKZSTaRCzliB55TRmKPJ/Br4TNpoziqHg5jcEzT5I10HQdtvmGfvm XiFP4BYbVEOWDj9aeRW6eKcfty208fSCpKYp1P4GjqvBDz2ISBfblP/QbUeoBzdq ahWUI+9aofxCBUIDe3jSh4yiPkaSlDeB9tg5dsBJ4LxG/8iJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK0p0GoIXkqu+H+rkdusPP/ozIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDU2NzllMTItNDBkZC0z MDg0LTkwYzQtMTc5ZGI2YWZiYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3oiUsMYIZgZK4kBEzJDCWaxF05p+DoMi9UUb3JcJcK8K0OsyCgTOIb sPeUjbD1iiizvy15D0YYUwIab6Zoo/cwUYvI2uFqIplXKkqu5okjUh71Lzs9Zvv6 abANDoV7WaF1CIAvrxLe8MQg20HS+5yLOOdKo5cNHj88tbZ1eb7k4J/J53McqqZa a2QsN2PG7paZJxETIADMEBlkQkZvb4h1QtjPKmBmt9nZuS1IMmZhcOcWlK1jonJT sDqtfYdJ4aX0tp7yp+wQ/77Cm5xi3T0WIKyLSxMHmzsBV/0xpNgnXiBrQyJ/o2JE O/YjSKjg+UeywqPpefnt/Mgd3c627IM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:02 2025 by rpki-client