$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/270dea2a-b353-3909-8706-081b297126db.roa File: 270dea2a-b353-3909-8706-081b297126db.roa (raw, json) Hash identifier: rYHx+HULthbzs3GMaqedlFhx5abrg2VIvcsP3XHq9/U= Subject key identifier: 28:E0:21:DF:DC:1B:CE:D4:26:7C:53:DC:CD:2F:BB:52:92:F5:DE:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6D4B644F317F114293F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/270dea2a-b353-3909-8706-081b297126db.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.43.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d4:b6:44:f3:17:f1:14:29:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=70cc5d9f-6afe-49b0-8f75-00b7bebf4908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:eb:9d:ef:9f:77:0f:c7:ed:e9:85:e3:53: 5c:23:77:7a:db:22:69:86:c5:a3:cf:6d:fe:a5:11: cc:92:2e:5b:30:75:01:47:68:15:72:1d:ce:ce:76: 28:4f:64:37:8c:35:44:17:14:3a:9b:a5:ba:17:f3: fb:c0:da:0c:71:de:1d:6b:dc:f9:39:73:61:78:d7: 27:01:a4:02:28:f7:d5:91:0f:7d:42:09:f8:42:60: 8e:5a:d3:a1:fd:37:44:82:ad:6c:bc:36:e7:6d:55: b6:4c:ae:28:a9:45:fd:e5:f5:c4:6c:e6:0d:14:9d: 6a:76:12:75:0b:71:54:de:e9:3b:c7:08:4f:8c:df: 1a:1e:27:59:22:62:92:cc:19:d8:57:9d:8c:d9:8d: e9:74:50:bc:63:f6:32:3b:85:66:84:4b:ea:81:28: 06:e3:36:a0:f9:69:bc:bb:43:e8:26:2f:5d:5f:20: 29:87:ec:00:c8:e7:52:34:6d:33:43:63:8f:7d:bc: ef:fd:9d:86:40:8c:54:4d:2f:30:b0:a3:0e:fc:59: b7:68:33:a9:2c:af:e4:74:a1:50:43:22:8d:3d:ed: 13:20:a7:e3:37:f8:3e:ef:62:e4:f9:33:fd:42:c7: eb:00:95:2b:e5:8d:7b:a1:87:b5:73:b6:f1:8f:46: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:21:DF:DC:1B:CE:D4:26:7C:53:DC:CD:2F:BB:52:92:F5:DE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/270dea2a-b353-3909-8706-081b297126db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:78:7e:6e:06:5c:4c:f7:d7:fb:c9:ed:48:c4:15:86:5f:dc: 50:16:bf:8c:a9:9a:8b:f6:4c:d7:97:ed:6d:42:20:3a:1c:8c: 3d:7d:24:8b:40:a3:20:3b:b1:ca:c8:ae:5e:63:61:0f:30:e2: 00:55:74:31:70:2b:58:58:8f:c7:f9:78:ba:14:c2:d6:5a:c9: b4:f5:b6:94:e3:ac:c5:e5:ad:a4:41:56:da:93:b1:72:25:3b: 64:65:d2:d8:7c:b8:3a:f6:d7:85:45:84:9c:c4:b4:26:2f:4d: 3a:55:4a:b5:71:1b:0a:33:cf:c3:0b:b0:a5:6f:71:97:26:81: 4b:4f:e0:22:1f:67:1f:6e:83:c9:f0:d0:0d:0b:60:60:e0:97: 6c:88:04:73:62:37:88:3a:49:4d:62:7d:fc:92:69:89:2e:d5: d1:c0:fb:7b:15:89:7f:eb:9c:18:95:b0:e5:e1:d8:ee:82:13: eb:65:f2:0c:a7:29:6b:02:35:67:54:d8:ab:18:d3:1a:32:58: e9:de:1d:6e:31:a4:49:47:ce:45:3b:f6:e4:ed:05:21:4e:ce: 35:88:c0:a6:39:bd:af:60:d4:cc:10:fe:10:4b:72:f3:0c:61: ba:57:bc:57:5c:1a:98:4a:a1:e3:0c:f5:f9:ad:9f:3b:11:09: 89:b4:5d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tS2RPMX8RQpPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NzBjYzVkOWYtNmFmZS00OWIwLThmNzUtMDBiN2JlYmY0OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph7rne+fdw/H7emF41NcI3d62yJphsWjz23+ pRHMki5bMHUBR2gVch3OznYoT2Q3jDVEFxQ6m6W6F/P7wNoMcd4da9z5OXNheNcn AaQCKPfVkQ99Qgn4QmCOWtOh/TdEgq1svDbnbVW2TK4oqUX95fXEbOYNFJ1qdhJ1 C3FU3uk7xwhPjN8aHidZImKSzBnYV52M2Y3pdFC8Y/YyO4VmhEvqgSgG4zag+Wm8 u0PoJi9dXyAph+wAyOdSNG0zQ2OPfbzv/Z2GQIxUTS8wsKMO/Fm3aDOpLK/kdKFQ QyKNPe0TIKfjN/g+72Lk+TP9QsfrAJUr5Y17oYe1c7bxj0YGRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjgId/cG87UJnxT3M0vu1KS9d5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjcwZGVhMmEtYjM1My0z OTA5LTg3MDYtMDgxYjI5NzEyNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyupMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd4fm4GXEz31/vJ7UjEFYZf3FAWv4ypmov2TNeX7W1CIDocjD19JItA oyA7scrIrl5jYQ8w4gBVdDFwK1hYj8f5eLoUwtZaybT1tpTjrMXlraRBVtqTsXIl O2Rl0th8uDr214VFhJzEtCYvTTpVSrVxGwozz8MLsKVvcZcmgUtP4CIfZx9ug8nw 0A0LYGDgl2yIBHNiN4g6SU1iffySaYku1dHA+3sViX/rnBiVsOXh2O6CE+tl8gyn KWsCNWdU2KsY0xoyWOneHW4xpElHzkU79uTtBSFOzjWIwKY5va9g1MwQ/hBLcvMM YbpXvFdcGphKoeMM9fmtnzsRCYm0XYA= -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:58 2025 by rpki-client