$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4008f5a9-e939-352f-aff8-f83d2bf80d64.roa File: 4008f5a9-e939-352f-aff8-f83d2bf80d64.roa (raw, json) Hash identifier: zF34kFRThrl7q+W4LvAHQZY1lNDOTuMQ2NHxCkUtYSY= Subject key identifier: 63:E4:14:AE:B3:B5:92:04:5A:31:69:60:43:02:84:C7:A9:86:BD:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB66B9C148668FD77C3000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4008f5a9-e939-352f-aff8-f83d2bf80d64.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.54.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:66:b9:c1:48:66:8f:d7:7c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=5243bb29-d3e4-4294-8f9b-61c0c9a415fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:3f:62:8b:07:16:56:8f:6c:4b:f0:e2:ce: f9:03:53:09:ea:9b:9e:db:b4:d6:db:15:ea:d6:26: b0:d9:31:bf:b5:aa:a7:96:66:77:f5:9b:60:a9:60: 5d:d1:04:db:53:dd:0a:77:0e:83:6e:b9:f8:33:1c: 51:bc:e2:b4:ca:ae:c6:2a:d9:52:cd:5a:8c:f6:6b: 51:ed:6a:d3:7a:70:4a:0b:ee:b4:0c:c8:65:f3:8f: a8:72:76:cd:f8:4f:31:a3:96:f3:a5:a6:b2:7e:ed: 5a:1c:fe:c1:be:5b:bb:43:2e:86:6b:e0:fd:b6:3b: b5:8f:20:f7:6e:58:4b:de:ca:75:80:91:94:20:07: 67:ad:72:45:67:a1:77:d8:28:bc:6b:10:6a:cc:53: a4:ba:81:d6:df:f6:2b:5e:59:01:2d:8a:92:c5:9d: b3:74:59:23:6b:1b:5b:98:d4:58:10:e8:18:6d:ad: 77:19:05:97:21:ac:0a:19:17:7b:e6:bf:3e:3d:1c: 95:dc:49:42:3a:30:67:ef:6f:0c:f0:33:36:f9:18: 31:13:5d:bb:ea:c7:2c:f6:44:c6:6d:bf:ba:4c:1d: 18:df:ce:e7:96:90:46:56:f0:a4:c5:bc:81:d3:49: 8c:c1:72:e2:d5:fd:ec:b1:69:06:4e:d5:76:f7:a0: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E4:14:AE:B3:B5:92:04:5A:31:69:60:43:02:84:C7:A9:86:BD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4008f5a9-e939-352f-aff8-f83d2bf80d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:46:07:97:77:ed:90:42:ef:35:79:6b:a1:91:d0:ba:8f:bc: 00:58:bb:da:be:f3:ab:3f:d7:48:50:3d:75:4e:3a:0a:d6:2f: fd:d6:52:9d:70:b1:73:bb:97:03:de:9d:5b:18:37:43:24:9a: 35:6b:bb:9c:4f:3a:f5:b2:c7:4f:f8:e8:63:53:d3:3c:23:29: e6:53:cc:90:50:a5:7e:ad:25:ea:be:41:d4:ea:76:ca:c2:81: 39:f1:32:82:4c:80:82:7d:0d:4b:d5:c2:3f:4d:31:01:73:12: d9:00:98:5c:0f:87:e5:21:b5:76:6b:af:81:ba:42:c4:6a:a7: 45:8a:c5:c7:f7:d3:77:62:e3:1b:e3:aa:2d:62:88:d8:12:1b: cb:96:0e:86:52:72:64:05:9a:62:0a:6f:9e:57:8e:19:9a:82: 8b:a6:13:f3:d1:b6:a3:e8:6f:df:32:7c:46:eb:da:8a:7e:d7: c3:3e:33:b7:ee:d1:e7:af:66:80:88:d8:9d:82:00:be:b0:af: ac:47:27:ef:97:88:76:64:c8:9e:97:32:3a:19:a3:ea:22:29: 6d:21:87:0a:a1:cd:e4:75:9a:ef:6f:e3:9e:76:f1:da:74:cd: af:26:5b:05:b5:f7:6c:ab:96:1d:60:59:d3:03:b3:94:00:13: c0:7b:d4:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2a5wUhmj9d8MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk NTI0M2JiMjktZDNlNC00Mjk0LThmOWItNjFjMGM5YTQxNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3g/YosHFlaPbEvw4s75A1MJ6pue27TW2xXq 1iaw2TG/taqnlmZ39ZtgqWBd0QTbU90Kdw6Dbrn4MxxRvOK0yq7GKtlSzVqM9mtR 7WrTenBKC+60DMhl84+ocnbN+E8xo5bzpaayfu1aHP7Bvlu7Qy6Ga+D9tju1jyD3 blhL3sp1gJGUIAdnrXJFZ6F32Ci8axBqzFOkuoHW3/YrXlkBLYqSxZ2zdFkjaxtb mNRYEOgYba13GQWXIawKGRd75r8+PRyV3ElCOjBn728M8DM2+RgxE1276scs9kTG bb+6TB0Y387nlpBGVvCkxbyB00mMwXLi1f3ssWkGTtV296Bi6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPkFK6ztZIEWjFpYEMChMephr0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDAwOGY1YTktZTkzOS0z NTJmLWFmZjgtZjgzZDJiZjgwZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNGB5d37ZBC7zV5a6GR0LqPvABYu9q+86s/10hQPXVOOgrWL/3WUp1w sXO7lwPenVsYN0MkmjVru5xPOvWyx0/46GNT0zwjKeZTzJBQpX6tJeq+QdTqdsrC gTnxMoJMgIJ9DUvVwj9NMQFzEtkAmFwPh+UhtXZrr4G6QsRqp0WKxcf303di4xvj qi1iiNgSG8uWDoZScmQFmmIKb55XjhmagoumE/PRtqPob98yfEbr2op+18M+M7fu 0eevZoCI2J2CAL6wr6xHJ++XiHZkyJ6XMjoZo+oiKW0hhwqhzeR1mu9v45528dp0 za8mWwW192yrlh1gWdMDs5QAE8B71Dw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:43 2025 by rpki-client