$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa File: 122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa (raw, json) Hash identifier: 3uXMBo8sWi4quWORpOxBWn6LvqSC9owKFdQKUqj9PF8= Subject key identifier: 6A:31:2C:31:32:24:EF:A8:A8:84:21:4D:B5:FE:6D:55:2D:1C:89:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849056D499946525507DCD6BB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa Signing time: Thu 27 Feb 2025 11:33:04 +0000 ROA not before: Thu 27 Feb 2025 11:33:04 +0000 ROA not after: Wed 28 May 2025 10:33:04 +0000 asID: 20940 IP address blocks: 23.219.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:6d:49:99:46:52:55:07:dc:d6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 11:33:04 2025 GMT Not After : May 28 10:33:04 2025 GMT Subject: CN=093d8cae-6aba-474a-9ef7-3d468d8a235f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:98:02:14:74:55:3a:ba:23:ba:09:c6:5a: d3:75:53:45:a7:81:8d:54:74:e3:ec:1f:bb:ba:3f: c6:1d:3a:97:ed:66:fa:a4:4a:36:31:e8:99:6e:ad: 38:b1:a1:95:3c:25:23:2e:ef:65:1d:f4:04:02:72: d8:96:98:20:2e:3c:8c:4c:2e:9e:69:bf:ea:17:15: 40:10:bd:14:37:42:22:bd:7a:e1:4d:de:54:d3:27: f1:c0:27:7b:b1:f1:d1:03:d9:68:6b:1a:58:1f:b7: aa:a7:4c:c6:56:d6:4e:be:33:12:2b:12:4d:a5:48: 72:30:a2:0d:83:3a:b7:df:69:67:75:df:b2:a4:2a: 39:29:d7:02:72:61:91:4a:d5:c6:39:4b:18:16:51: e3:c2:60:b9:64:25:6f:be:b1:c4:ca:f3:c4:e0:a0: c7:62:ee:3f:4d:21:55:35:59:58:ba:69:55:7f:7b: c6:eb:ed:bf:ed:ef:76:6f:6c:01:a5:37:31:11:1b: 8a:b3:a1:03:6c:62:b2:41:0b:bc:44:35:59:27:27: ea:7d:9f:65:41:22:b0:5f:a0:65:1c:ce:71:1e:af: 6b:04:99:99:b7:d0:1a:a8:17:e7:50:8e:26:13:d3: c8:9b:cc:08:f6:fa:66:00:02:0d:d8:ee:0b:59:23: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:31:2C:31:32:24:EF:A8:A8:84:21:4D:B5:FE:6D:55:2D:1C:89:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a7:e5:fd:d5:ea:a2:13:10:95:48:cc:a4:bc:9a:85:7b:28: 59:08:a7:aa:76:96:b6:45:16:87:8e:19:10:60:35:05:8c:90: 9e:3e:d8:07:8b:24:c6:f1:3e:ac:49:b3:d3:ca:ae:2b:9e:55: f5:f8:6d:77:93:78:d4:b7:9e:f3:db:32:ad:f4:dc:1f:06:d8: 1a:76:fe:d7:bc:d1:e7:75:ac:21:a2:fa:ac:54:51:93:da:a5: 6c:e8:bc:3a:63:fb:07:ef:8c:c9:93:4f:69:00:47:0b:9c:41: dd:54:67:96:ff:2a:3d:9d:07:1e:e6:f4:52:81:e2:fe:98:f8: e3:cb:8b:84:95:fd:35:8b:64:f5:d1:ac:81:90:10:4f:9d:ec: 5d:6d:2d:42:b6:a6:b6:7e:f7:2b:fc:fd:4b:ad:89:03:f9:d6: c4:31:f9:33:42:3c:75:f5:1d:0d:c1:a1:bc:f7:fe:79:04:df: 2f:65:84:0f:e8:2b:4e:8c:f5:a8:a9:95:a4:6e:85:79:a6:37: 90:03:fa:29:6e:01:b2:ea:11:50:43:08:95:7a:79:f0:99:bd: 1e:8c:eb:6d:a2:36:02:9f:c2:66:ad:9d:32:15:05:3f:03:44: df:40:dc:9d:c0:95:a9:13:e4:da:6c:84:28:93:b1:87:1e:a6: 6f:f2:ca:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFbUmZRlJVB9zWuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNzExMzMwNFoXDTI1MDUyODEwMzMwNFowLzEtMCsGA1UEAxMk MDkzZDhjYWUtNmFiYS00NzRhLTllZjctM2Q0NjhkOGEyMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6+YAhR0VTq6I7oJxlrTdVNFp4GNVHTj7B+7 uj/GHTqX7Wb6pEo2MeiZbq04saGVPCUjLu9lHfQEAnLYlpggLjyMTC6eab/qFxVA EL0UN0IivXrhTd5U0yfxwCd7sfHRA9loaxpYH7eqp0zGVtZOvjMSKxJNpUhyMKIN gzq332lndd+ypCo5KdcCcmGRStXGOUsYFlHjwmC5ZCVvvrHEyvPE4KDHYu4/TSFV NVlYumlVf3vG6+2/7e92b2wBpTcxERuKs6EDbGKyQQu8RDVZJyfqfZ9lQSKwX6Bl HM5xHq9rBJmZt9AaqBfnUI4mE9PIm8wI9vpmAAIN2O4LWSPmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoxLDEyJO+oqIQhTbX+bVUtHImsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIyZjdiMGYtMzg5Ny0z Y2M4LTkyMjQtNWY2YTc1YjNhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSn5f3V6qITEJVIzKS8moV7KFkIp6p2lrZFFoeOGRBgNQWMkJ4+2AeL JMbxPqxJs9PKriueVfX4bXeTeNS3nvPbMq303B8G2Bp2/te80ed1rCGi+qxUUZPa pWzovDpj+wfvjMmTT2kARwucQd1UZ5b/Kj2dBx7m9FKB4v6Y+OPLi4SV/TWLZPXR rIGQEE+d7F1tLUK2prZ+9yv8/UutiQP51sQx+TNCPHX1HQ3Bobz3/nkE3y9lhA/o K06M9aiplaRuhXmmN5AD+iluAbLqEVBDCJV6efCZvR6M622iNgKfwmatnTIVBT8D RN9A3J3AlakT5NpshCiTsYcepm/yyhE= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:42 2025 by rpki-client