$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1828ecab-23de-3bda-859b-56854c16fd66.roa File: 1828ecab-23de-3bda-859b-56854c16fd66.roa (raw, json) Hash identifier: b8VAezLx6qFIg2U0a6U2DtG4pCxhA/+3IVlOExJlNSA= Subject key identifier: 33:8D:73:E9:B2:52:E6:D2:E0:ED:FD:EB:78:5C:58:82:20:39:2A:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5CEB471D4DB1EB3EBA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1828ecab-23de-3bda-859b-56854c16fd66.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.57.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5c:eb:47:1d:4d:b1:eb:3e:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=685ad0de-c122-4e0b-ba88-a3da1d935d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:bc:68:cd:d7:e9:d9:96:89:48:90:4a:9d: bb:9b:f3:20:b2:a8:ec:d6:58:6f:9e:8d:96:ae:ff: 78:eb:2c:a2:b3:4c:31:aa:84:c9:8e:9c:78:72:19: 66:3a:c3:b4:88:34:b8:9d:76:b9:ae:3c:4c:57:55: 5a:a0:5a:df:55:d6:87:02:4e:4f:30:80:44:19:c2: 86:a2:14:14:9b:71:f8:65:e8:dd:3d:5d:ce:b3:1f: af:aa:b7:ba:3c:82:f9:30:f9:c7:11:bf:cc:93:f5: 63:e0:37:0a:bf:fc:37:b5:96:a8:87:d6:9f:82:31: 80:f0:91:70:c5:04:41:43:4f:d0:f9:2a:5a:78:06: 9d:14:55:cd:39:e1:e3:65:86:19:75:e8:7b:4e:13: 78:79:10:90:79:91:00:58:94:ae:95:b0:36:fd:6f: 88:42:0f:f7:f9:59:de:86:88:d3:58:7b:fb:91:d3: a7:5f:00:c9:06:3b:4b:65:cb:02:03:9f:51:89:71: 71:61:64:a6:e0:dd:a7:c7:3e:d5:0d:02:35:b2:8a: 47:1b:8a:41:6f:58:f6:34:55:42:e4:28:7f:31:25: dc:a1:c0:52:fa:82:60:2f:8e:4d:ff:39:5c:97:d7: c8:20:8c:73:0d:ed:8a:7d:7e:10:28:1d:ca:de:d6: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:73:E9:B2:52:E6:D2:E0:ED:FD:EB:78:5C:58:82:20:39:2A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1828ecab-23de-3bda-859b-56854c16fd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:23:c2:88:ad:80:4d:49:46:d2:9a:e9:23:fc:24:11:5b:10: a7:04:0b:0b:b0:55:02:21:fb:1f:1c:82:48:d8:71:76:7f:21: 38:a8:d4:65:bb:06:85:34:28:b9:09:64:8a:73:95:38:ab:0f: 47:66:36:7c:d1:6b:c3:79:4b:49:d6:c6:b5:66:a0:3b:40:9c: de:f7:7e:6c:93:d1:25:7c:c4:3d:56:6c:02:85:20:1b:5f:1a: 31:57:ab:95:d6:ab:4a:ae:f1:05:96:2c:b2:d1:67:4f:73:16: 75:40:bc:36:b5:d9:08:29:16:b7:02:77:0b:0b:79:30:8a:be: 65:e1:b4:a1:05:b8:3b:5f:de:59:72:a7:f5:65:d8:29:9b:d7: b3:21:bf:e7:52:37:1b:90:97:a2:82:7e:cb:98:2a:94:79:f7: 7f:ce:fe:14:cc:d4:07:f0:e4:fe:fe:66:3d:80:64:ad:32:4f: e4:91:16:c6:a0:dc:d7:db:43:4b:92:45:61:52:9b:35:86:bd: d3:98:9f:19:2d:03:0b:eb:b4:df:2e:c3:88:24:4a:f6:c1:4c: 84:60:ed:ba:f2:e9:1e:45:7c:8d:1e:fe:5c:c3:c5:c7:4f:75: 4b:28:48:65:8a:9c:b6:4a:1b:29:3d:cf:7f:c5:82:86:82:40: dd:1d:56:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1zrRx1Nses+ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk Njg1YWQwZGUtYzEyMi00ZTBiLWJhODgtYTNkYTFkOTM1ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBe8aM3X6dmWiUiQSp27m/Mgsqjs1lhvno2W rv946yyis0wxqoTJjpx4chlmOsO0iDS4nXa5rjxMV1VaoFrfVdaHAk5PMIBEGcKG ohQUm3H4ZejdPV3Osx+vqre6PIL5MPnHEb/Mk/Vj4DcKv/w3tZaoh9afgjGA8JFw xQRBQ0/Q+SpaeAadFFXNOeHjZYYZdeh7ThN4eRCQeZEAWJSulbA2/W+IQg/3+Vne hojTWHv7kdOnXwDJBjtLZcsCA59RiXFxYWSm4N2nxz7VDQI1sopHG4pBb1j2NFVC 5Ch/MSXcocBS+oJgL45N/zlcl9fIIIxzDe2KfX4QKB3K3tZIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDONc+myUubS4O3963hcWIIgOSoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTgyOGVjYWItMjNkZS0z YmRhLTg1OWItNTY4NTRjMTZmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYjwoitgE1JRtKa6SP8JBFbEKcECwuwVQIh+x8cgkjYcXZ/ITio1GW7 BoU0KLkJZIpzlTirD0dmNnzRa8N5S0nWxrVmoDtAnN73fmyT0SV8xD1WbAKFIBtf GjFXq5XWq0qu8QWWLLLRZ09zFnVAvDa12QgpFrcCdwsLeTCKvmXhtKEFuDtf3lly p/Vl2Cmb17Mhv+dSNxuQl6KCfsuYKpR593/O/hTM1Afw5P7+Zj2AZK0yT+SRFsag 3NfbQ0uSRWFSmzWGvdOYnxktAwvrtN8uw4gkSvbBTIRg7bry6R5FfI0e/lzDxcdP dUsoSGWKnLZKGyk9z3/FgoaCQN0dVm0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:39:30 2025 by rpki-client