$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c374225-4c4b-3c33-92e3-f4bf0b5597e7.roa File: 1c374225-4c4b-3c33-92e3-f4bf0b5597e7.roa (raw, json) Hash identifier: AEwgE+dtGuQgRCKn/DDb3wxJOtsb0/DBdxK3qfZ8APs= Subject key identifier: 6B:6B:69:7A:3D:41:1B:2E:26:19:3A:FB:AE:9F:01:CE:F5:C5:96:E7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F4F697DB246CABE6DFF28260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c374225-4c4b-3c33-92e3-f4bf0b5597e7.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 9299 IP address blocks: 23.7.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:97:db:24:6c:ab:e6:df:f2:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fbe3618d-f5f9-4f4b-979c-b61de4c0261c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:9b:ae:43:99:fb:e0:49:91:68:ee:3a:84: 3c:4d:eb:89:01:27:bd:ac:95:07:4b:7c:b3:ef:f3: 13:46:f6:11:c9:20:70:c8:4c:5d:9e:e7:74:8a:7a: d3:1e:26:de:6f:ea:07:5a:19:9e:8b:45:bd:7d:8c: 47:c6:2a:5c:4a:5c:91:21:bf:8c:92:dd:3d:04:a0: da:b1:88:a8:24:58:1a:c2:bb:7e:58:e2:ef:99:a8: b4:77:2e:f8:c0:62:a7:e2:7d:98:13:28:f9:2f:2d: 0a:2b:e8:21:cf:38:08:2f:0b:21:fb:22:b6:92:94: ce:98:cd:04:c1:44:85:a6:cf:6b:11:aa:91:23:7d: c3:6a:32:00:45:4b:17:df:ed:b0:ab:5d:a2:f8:4b: 1e:42:14:28:09:9c:66:9a:28:e8:03:c9:8f:11:ff: be:d9:ed:16:f9:5d:44:46:d4:c8:07:d1:7e:83:c2: 15:70:49:20:d4:1b:40:a7:35:21:0b:78:72:e1:e6: 82:fa:f6:8f:9c:07:ff:6a:a6:8f:69:37:84:34:02: 45:9b:01:96:8a:d1:eb:89:49:59:4d:c5:81:61:ce: 50:57:e9:5a:6e:de:00:8f:d3:9d:5a:8a:d5:b4:3c: ed:b7:84:ce:a3:b9:7e:50:84:2a:43:4d:11:18:c1: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6B:69:7A:3D:41:1B:2E:26:19:3A:FB:AE:9F:01:CE:F5:C5:96:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c374225-4c4b-3c33-92e3-f4bf0b5597e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:27:1d:6e:86:ab:5f:84:83:7a:4b:05:ee:59:2a:51:c6:ed: 69:64:09:74:0a:c4:6f:18:c9:dc:83:83:0f:02:74:d1:f1:6a: c2:ef:a1:5a:fb:6a:0f:be:03:98:1b:63:07:78:4b:13:6e:c5: 9f:60:f2:b5:31:8f:33:4c:97:d8:05:ae:dc:14:c8:07:3f:52: 53:e5:c5:83:1f:5a:19:2f:91:6e:25:32:5a:19:a4:69:45:64: bb:a7:12:6b:2e:bf:71:57:9a:60:6f:3c:f7:56:5a:8e:5a:37: a1:94:fb:a1:92:28:f8:44:c0:84:9a:91:f4:53:b8:38:da:11: 6c:0e:eb:ac:b6:60:68:5e:df:70:39:da:43:85:f3:2d:60:5b: 8c:2d:eb:61:18:fe:e5:a5:02:99:31:80:28:b1:fa:bd:39:b5: 4a:73:43:46:ec:73:38:ce:d3:6a:1c:e5:dd:08:66:38:36:55: 45:26:e6:8a:bd:45:24:07:01:ae:ef:96:6d:1f:8f:a2:ce:0b: 7a:bb:d2:1a:15:3f:01:5a:ae:70:81:35:16:03:cc:9d:ba:c6: 83:c2:c4:f0:cc:2d:1a:c3:de:b6:31:11:86:19:5d:32:a8:01: c7:1f:2e:d1:da:6d:3c:43:0a:a8:6b:b9:fd:c8:82:a2:7b:a0: 16:bf:71:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pfbJGyr5t/ygmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmJlMzYxOGQtZjVmOS00ZjRiLTk3OWMtYjYxZGU0YzAyNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HObrkOZ++BJkWjuOoQ8TeuJASe9rJUHS3yz 7/MTRvYRySBwyExdnud0inrTHibeb+oHWhmei0W9fYxHxipcSlyRIb+Mkt09BKDa sYioJFgawrt+WOLvmai0dy74wGKn4n2YEyj5Ly0KK+ghzzgILwsh+yK2kpTOmM0E wUSFps9rEaqRI33DajIARUsX3+2wq12i+EseQhQoCZxmmijoA8mPEf++2e0W+V1E RtTIB9F+g8IVcEkg1BtApzUhC3hy4eaC+vaPnAf/aqaPaTeENAJFmwGWitHriUlZ TcWBYc5QV+labt4Aj9OdWorVtDztt4TOo7l+UIQqQ00RGME0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtraXo9QRsuJhk6+66fAc71xZbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWMzNzQyMjUtNGM0Yi0z YzMzLTkyZTMtZjRiZjBiNTU5N2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0nHW6Gq1+Eg3pLBe5ZKlHG7WlkCXQKxG8YydyDgw8CdNHxasLvoVr7 ag++A5gbYwd4SxNuxZ9g8rUxjzNMl9gFrtwUyAc/UlPlxYMfWhkvkW4lMloZpGlF ZLunEmsuv3FXmmBvPPdWWo5aN6GU+6GSKPhEwISakfRTuDjaEWwO66y2YGhe33A5 2kOF8y1gW4wt62EY/uWlApkxgCix+r05tUpzQ0bsczjO02oc5d0IZjg2VUUm5oq9 RSQHAa7vlm0fj6LOC3q70hoVPwFarnCBNRYDzJ26xoPCxPDMLRrD3rYxEYYZXTKo AccfLtHabTxDCqhruf3IgqJ7oBa/cRY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:54 2025 by rpki-client