$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bdb2ea-9ac2-377f-84b3-992dd3b65d5e.roa File: 40bdb2ea-9ac2-377f-84b3-992dd3b65d5e.roa (raw, json) Hash identifier: UyDnmCWKhT52ch0AF4RPwjubWpLVAfszBji2OvMbgEc= Subject key identifier: B8:3B:5A:2D:28:4B:AE:66:EF:0F:BB:74:A2:82:08:0D:12:06:DB:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED0868DE8C25910170600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bdb2ea-9ac2-377f-84b3-992dd3b65d5e.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.37.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d0:86:8d:e8:c2:59:10:17:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=fce81d3d-d9f6-48c6-85db-39c8dda4dc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:6a:06:e1:d0:1a:d4:cd:d3:f7:e9:6e:50: 87:7e:50:64:8c:27:59:4b:66:2a:12:ce:a4:2a:e8: 70:dd:f5:f0:b4:34:da:23:15:25:c0:d5:df:c6:1d: e4:df:3e:8d:aa:f5:43:80:bd:12:9a:00:20:df:49: bc:d7:33:66:fe:03:c5:d2:ea:7a:24:93:2a:20:2d: 72:2f:f7:25:68:9c:b8:f9:ef:6a:c4:03:ac:d2:0a: fc:d9:90:8d:9c:49:a1:b8:63:27:d1:4c:81:5c:c0: 5d:b8:b4:56:b2:f3:5e:93:73:10:33:ce:2c:35:7a: 87:06:88:89:e4:68:db:9e:31:e6:96:67:ba:5c:db: c4:ae:b2:0c:b0:43:42:be:91:8a:2e:c3:f1:0b:7d: 75:17:ea:0f:00:d7:c0:6a:91:8d:20:79:33:ba:25: a2:3e:78:f6:59:0f:23:cb:29:19:50:a5:ec:3d:4d: 3a:f7:96:b4:a1:f3:de:f0:17:ef:92:59:4a:8c:eb: 29:d5:78:b7:1d:7c:50:72:1b:08:af:85:ad:ac:ba: 7a:d5:e2:17:e6:f3:5a:31:94:f6:92:d8:10:be:c5: fc:72:5a:4c:b0:6e:19:a4:52:0a:b9:ad:70:a1:31: bf:bd:f5:cf:b7:11:0b:b0:e5:b3:78:40:14:ef:0b: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:5A:2D:28:4B:AE:66:EF:0F:BB:74:A2:82:08:0D:12:06:DB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bdb2ea-9ac2-377f-84b3-992dd3b65d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:37:a8:a4:c2:3d:53:39:7b:9c:e7:42:61:26:31:b6:1c:b1: e9:5f:36:3f:1d:d2:20:bf:08:f1:3b:db:b5:ce:d5:84:97:70: 06:5e:67:b2:89:1b:c8:aa:f3:4b:d3:0e:71:d0:65:f0:bf:50: 8e:c0:fa:77:26:b5:e0:f8:7c:ec:88:3f:52:77:5c:6f:49:78: 23:e2:66:76:d7:6a:01:9c:52:69:b8:ce:84:f5:1f:dc:a4:bc: e9:5e:8c:e0:26:70:da:74:bd:76:bd:72:e1:d0:75:e3:2a:e6: 47:6c:d1:c7:b6:34:73:13:49:6d:19:04:e3:2f:9a:71:b5:b8: 9f:3f:56:37:96:e3:7f:7e:d2:ba:99:19:5b:57:d2:c6:d1:bd: 99:6f:02:64:e6:24:24:d6:9c:a6:48:ce:31:0f:0a:24:00:5e: 81:00:a4:db:ea:e5:32:41:fe:01:f3:03:d4:b0:98:33:ce:6f: 50:49:45:9e:b9:ce:77:46:6e:3d:25:ee:eb:db:34:98:51:c4: fb:c6:89:fe:b2:26:d7:b7:00:e4:56:05:52:e4:b0:36:23:53: a7:47:8d:1f:fc:0d:af:ab:e3:2a:29:3a:b0:b8:58:31:4a:b6: 13:ff:08:66:e1:b2:91:0c:e5:bd:77:0a:fd:12:8c:d3:8f:6e: ce:d7:4d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtCGjejCWRAXBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZmNlODFkM2QtZDlmNi00OGM2LTg1ZGItMzljOGRkYTRkYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZxqBuHQGtTN0/fpblCHflBkjCdZS2YqEs6k Kuhw3fXwtDTaIxUlwNXfxh3k3z6NqvVDgL0SmgAg30m81zNm/gPF0up6JJMqIC1y L/claJy4+e9qxAOs0gr82ZCNnEmhuGMn0UyBXMBduLRWsvNek3MQM84sNXqHBoiJ 5GjbnjHmlme6XNvErrIMsENCvpGKLsPxC311F+oPANfAapGNIHkzuiWiPnj2WQ8j yykZUKXsPU0695a0ofPe8BfvkllKjOsp1Xi3HXxQchsIr4WtrLp61eIX5vNaMZT2 ktgQvsX8clpMsG4ZpFIKua1woTG/vfXPtxELsOWzeEAU7wvz+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg7Wi0oS65m7w+7dKKCCA0SBtvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBiZGIyZWEtOWFjMi0z NzdmLTg0YjMtOTkyZGQzYjY1ZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY3qKTCPVM5e5znQmEmMbYcselfNj8d0iC/CPE727XO1YSXcAZeZ7KJ G8iq80vTDnHQZfC/UI7A+ncmteD4fOyIP1J3XG9JeCPiZnbXagGcUmm4zoT1H9yk vOlejOAmcNp0vXa9cuHQdeMq5kds0ce2NHMTSW0ZBOMvmnG1uJ8/VjeW439+0rqZ GVtX0sbRvZlvAmTmJCTWnKZIzjEPCiQAXoEApNvq5TJB/gHzA9SwmDPOb1BJRZ65 zndGbj0l7uvbNJhRxPvGif6yJte3AORWBVLksDYjU6dHjR/8Da+r4yopOrC4WDFK thP/CGbhspEM5b13Cv0SjNOPbs7XTQs= -----END CERTIFICATE-----Generated at Wed Apr 9 01:47:10 2025 by rpki-client