$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa File: 250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa (raw, json) Hash identifier: d7+tbfPdWt6r/5I8l2VFJ8rFw47YcsBOef/xGedhim4= Subject key identifier: 41:22:47:88:CA:A4:4D:25:76:ED:B6:49:11:A3:4E:EB:70:E9:D9:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB6C50E732018234237000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.58.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:6c:50:e7:32:01:82:34:23:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=16baee70-c4c0-4c3d-9a02-fc865d23379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:02:7e:3a:04:b4:e8:9e:9c:f4:50:64:25: 74:8a:bd:f9:8c:43:94:29:7f:5c:d0:95:a7:d0:c8: 28:2c:eb:71:34:a9:8d:5d:8e:20:29:6d:a7:42:e6: 15:24:16:c7:ba:41:ce:ae:70:04:6a:41:57:d8:d3: df:a8:88:d8:de:aa:7b:b6:79:6f:9a:25:7f:e5:48: 04:d8:ac:13:ac:28:0f:63:2e:53:be:53:73:98:55: 7b:45:fc:1a:78:df:28:91:85:c2:ab:dc:b5:c5:0f: bb:37:c8:4b:00:ac:5e:aa:36:f9:68:08:49:65:f1: 91:e4:97:9c:c6:eb:d5:b2:32:96:7b:6c:81:7a:1d: a0:69:54:e4:3a:a9:00:a8:c0:b1:d4:03:e6:90:99: ad:df:76:08:3d:fa:6c:12:75:6d:d1:0c:ec:da:70: 17:99:fa:91:03:b9:23:4b:e6:36:88:5d:83:75:a3: c9:17:b3:8b:df:a8:19:05:79:4c:a0:b5:fb:79:34: a7:e9:bf:92:5f:a3:24:8b:b3:d3:11:89:6a:e9:1a: 2c:f3:d7:e6:6f:ca:91:b2:7a:4c:2d:1c:95:95:bf: 40:10:7a:d4:db:bb:c9:e5:31:e1:99:db:eb:69:f6: 35:51:11:9b:25:1b:e4:a5:5e:59:eb:48:a2:60:39: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:47:88:CA:A4:4D:25:76:ED:B6:49:11:A3:4E:EB:70:E9:D9:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/250b0d74-9e7a-3308-b2a4-4ae85e8e9ecb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:68:33:a9:21:e6:9f:25:71:b9:cd:89:d6:39:0c:ce:4d:d4: 42:b5:34:cd:65:ec:88:e8:2c:8e:e9:7e:9a:b3:d5:12:0c:0b: 1a:bb:cd:11:0e:bc:34:69:58:94:1a:94:5e:cd:7d:fa:99:12: 43:36:87:0c:9f:e1:ee:3e:bf:bc:29:60:43:20:f1:23:e9:78: 4a:f0:6c:87:29:30:47:f1:ab:09:5d:ca:83:08:eb:7a:69:38: 38:5a:49:25:c4:b0:0e:90:82:46:6a:42:8d:fb:03:89:d7:c6: b2:0f:e5:3b:63:f5:cc:ed:3f:bc:df:93:81:ee:4b:ae:31:e1: 65:e7:0a:cd:7c:ad:c3:c5:68:1d:ee:f7:b1:24:5f:8c:cd:4c: 8f:73:a7:ad:60:1f:de:d0:ab:ae:fb:e8:63:15:0f:f1:fa:31: e1:c0:fe:2b:66:51:fa:63:e2:34:0a:d8:6e:22:f9:3d:44:b4: 77:8c:c2:9d:b9:12:b2:c7:bb:72:af:fa:00:59:9e:14:b2:82: ba:68:e4:d3:29:1b:68:91:99:5c:ac:22:95:3e:57:4d:a0:be: cd:29:7f:02:13:eb:4a:82:16:13:e8:99:b2:48:92:58:73:32: b4:20:88:26:66:04:95:46:be:e4:05:a1:35:b1:91:ae:47:47: a9:59:67:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2xQ5zIBgjQjcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MTZiYWVlNzAtYzRjMC00YzNkLTlhMDItZmM4NjVkMjMzNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV8CfjoEtOienPRQZCV0ir35jEOUKX9c0JWn 0MgoLOtxNKmNXY4gKW2nQuYVJBbHukHOrnAEakFX2NPfqIjY3qp7tnlvmiV/5UgE 2KwTrCgPYy5TvlNzmFV7RfwaeN8okYXCq9y1xQ+7N8hLAKxeqjb5aAhJZfGR5Jec xuvVsjKWe2yBeh2gaVTkOqkAqMCx1APmkJmt33YIPfpsEnVt0Qzs2nAXmfqRA7kj S+Y2iF2DdaPJF7OL36gZBXlMoLX7eTSn6b+SX6Mki7PTEYlq6Ros89fmb8qRsnpM LRyVlb9AEHrU27vJ5THhmdvrafY1URGbJRvkpV5Z60iiYDlORwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEiR4jKpE0ldu22SRGjTutw6dl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjUwYjBkNzQtOWU3YS0z MzA4LWIyYTQtNGFlODVlOGU5ZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzp0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNoM6kh5p8lcbnNidY5DM5N1EK1NM1l7IjoLI7pfpqz1RIMCxq7zREO vDRpWJQalF7NffqZEkM2hwyf4e4+v7wpYEMg8SPpeErwbIcpMEfxqwldyoMI63pp ODhaSSXEsA6QgkZqQo37A4nXxrIP5Ttj9cztP7zfk4HuS64x4WXnCs18rcPFaB3u 97EkX4zNTI9zp61gH97Qq6776GMVD/H6MeHA/itmUfpj4jQK2G4i+T1EtHeMwp25 ErLHu3Kv+gBZnhSygrpo5NMpG2iRmVysIpU+V02gvs0pfwIT60qCFhPombJIklhz MrQgiCZmBJVGvuQFoTWxka5HR6lZZ5U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:50 2025 by rpki-client