$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/437e5dff-4425-3344-bd39-31a2d1fa662e.roa File: 437e5dff-4425-3344-bd39-31a2d1fa662e.roa (raw, json) Hash identifier: kmfHT8wtuwa4Mk90I+8tArAdzz5nZ0jc6hVkFQfjpsM= Subject key identifier: AB:8E:65:90:AE:0D:24:63:26:E1:EC:A5:A7:CE:EB:DC:B2:2E:BD:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491D716473B388CDE2854397F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/437e5dff-4425-3344-bd39-31a2d1fa662e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 6762 IP address blocks: 23.50.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:64:73:b3:88:cd:e2:85:43:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=6efa2697-8962-4f10-8a8f-f5e2dbd16be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:23:31:19:df:54:64:9d:06:16:11:52:48: 76:d9:ec:f7:1b:e2:91:35:cb:bd:33:05:d9:d8:84: 06:3a:17:4d:e2:08:b0:16:c7:79:a7:78:ac:88:7e: e5:b7:6a:dd:5f:cc:b4:c9:f3:18:15:f5:a4:e5:5c: 45:3b:23:cf:bc:ed:68:c1:5d:c3:f7:c7:74:aa:68: 0a:dc:c9:6f:4c:4e:22:f7:cd:89:ed:73:f1:3a:4c: 3c:58:07:c2:c2:70:19:55:c3:08:e7:29:7a:81:13: c6:31:3f:9d:8a:fe:01:15:bf:89:ba:20:e2:ca:eb: cf:d9:01:1a:a8:73:81:d8:4d:ed:40:9d:1f:d7:91: 0a:f4:6f:fe:8c:84:f0:cd:6c:f9:34:81:88:cd:68: cd:59:f9:31:b1:49:11:17:b5:f6:87:d3:3e:92:96: c9:ed:ba:18:d4:9c:ba:46:32:4b:20:e4:77:a1:c8: 79:28:1b:00:a9:c3:84:82:e9:2b:a6:7e:6a:08:65: 25:bd:55:8e:9c:6c:2c:93:8c:f1:ef:60:ca:85:f4: a8:a6:4b:16:94:87:9f:81:6a:3c:fa:d8:a1:e5:98: cd:7c:87:b3:fb:0d:89:bf:76:29:ab:7a:d3:83:61: 39:92:dc:a6:fd:c5:f4:cf:58:c5:9a:3a:5f:bd:17: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:65:90:AE:0D:24:63:26:E1:EC:A5:A7:CE:EB:DC:B2:2E:BD:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/437e5dff-4425-3344-bd39-31a2d1fa662e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:92:5b:ce:1e:d8:bb:9b:57:82:64:d2:c6:89:f4:6f:dd:4e: 1a:38:de:ba:a6:34:71:b0:78:c5:08:71:e9:c6:27:89:ed:da: f8:f3:f7:e3:ac:11:81:0a:2a:92:a1:50:70:89:4b:0c:ef:f6: 76:8d:76:3d:04:ad:ae:60:c8:ac:b6:eb:60:c8:60:ed:73:73: c6:b5:fb:47:50:92:40:5a:69:ec:1b:76:65:55:32:0e:ae:77: 71:3a:ea:6a:d0:17:c4:ed:e2:9f:3b:95:90:e4:4f:05:41:45: df:8f:d1:3d:f8:81:cc:fd:53:20:67:18:d8:df:a4:f2:80:25: e0:03:d7:98:12:4c:2d:07:e2:4b:04:df:bb:3b:b6:bf:f2:eb: ef:25:bf:93:77:7e:68:b1:49:00:fc:f3:3e:53:a2:c1:59:a1: a1:64:ed:c0:41:59:c4:da:24:52:82:f8:ca:71:4d:7a:93:a8: a9:a9:49:3a:46:4a:41:78:54:d4:b9:45:e5:18:9c:18:f2:01: 18:57:c7:e8:da:c2:8b:43:fb:4b:8a:15:f8:78:42:e9:af:78: b0:a5:3c:fd:98:3e:3e:b7:1e:7e:27:2d:3e:c7:39:06:3e:7d: 31:ed:6c:b1:83:7b:e7:49:15:e5:7d:60:44:57:a8:bf:8b:f6: 35:e5:d3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWRzs4jN4oVDl/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NmVmYTI2OTctODk2Mi00ZjEwLThhOGYtZjVlMmRiZDE2YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWUjMRnfVGSdBhYRUkh22ez3G+KRNcu9MwXZ 2IQGOhdN4giwFsd5p3isiH7lt2rdX8y0yfMYFfWk5VxFOyPPvO1owV3D98d0qmgK 3MlvTE4i982J7XPxOkw8WAfCwnAZVcMI5yl6gRPGMT+div4BFb+JuiDiyuvP2QEa qHOB2E3tQJ0f15EK9G/+jITwzWz5NIGIzWjNWfkxsUkRF7X2h9M+kpbJ7boY1Jy6 RjJLIOR3och5KBsAqcOEgukrpn5qCGUlvVWOnGwsk4zx72DKhfSopksWlIefgWo8 +tih5ZjNfIez+w2Jv3Ypq3rTg2E5ktym/cX0z1jFmjpfvRcNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuOZZCuDSRjJuHspafO69yyLr2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM3ZTVkZmYtNDQyNS0z MzQ0LWJkMzktMzFhMmQxZmE2NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuSW84e2LubV4Jk0saJ9G/dTho43rqmNHGweMUIcenGJ4nt2vjz9+Os EYEKKpKhUHCJSwzv9naNdj0Era5gyKy262DIYO1zc8a1+0dQkkBaaewbdmVVMg6u d3E66mrQF8Tt4p87lZDkTwVBRd+P0T34gcz9UyBnGNjfpPKAJeAD15gSTC0H4ksE 37s7tr/y6+8lv5N3fmixSQD88z5TosFZoaFk7cBBWcTaJFKC+MpxTXqTqKmpSTpG SkF4VNS5ReUYnBjyARhXx+jawotD+0uKFfh4QumveLClPP2YPj63Hn4nLT7HOQY+ fTHtbLGDe+dJFeV9YERXqL+L9jXl02g= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:02 2025 by rpki-client