$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa File: 493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa (raw, json) Hash identifier: myRCv7XIH+4mvkkT/qNMG7Sx5cjoOUGd/92DBaumeLM= Subject key identifier: DB:0A:84:B1:8C:1A:58:82:B1:5A:CC:1B:25:EE:6B:DB:F9:3C:CE:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6F092A8A9FFF3DDB94CD8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.77.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f0:92:a8:a9:ff:f3:dd:b9:4c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=beb43872-3038-4476-b1a0-6aa1cd991078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:76:f1:2f:97:54:a5:31:9b:67:88:0f:18:cb: be:a1:82:e2:2e:97:f1:33:c9:ff:ef:23:cd:6c:dd: 63:e0:bb:d5:e3:b4:db:d6:ff:31:dd:09:b8:39:23: 60:8c:3a:00:29:af:d0:22:dd:fb:38:74:62:8d:33: 68:b4:b8:47:05:f0:1e:e3:5a:ee:cb:bd:51:be:da: 39:ba:68:55:ae:83:4c:25:57:3b:69:53:fc:47:de: b1:66:f8:62:33:ff:75:b8:e0:01:5f:f0:f5:5b:aa: 28:35:14:c9:2c:07:8d:af:de:48:62:6f:c6:b7:5a: 47:11:89:08:26:f6:69:da:e7:f0:47:fd:52:1b:c1: 3d:17:b4:8e:32:5d:cb:1c:a1:10:1f:5d:e3:b3:38: 0e:c0:41:74:d7:cc:0d:37:40:76:da:ec:6a:34:4e: 52:a7:d4:09:10:16:25:0c:bd:74:7f:4e:b5:23:66: 1f:9e:a3:a7:bf:25:11:6a:64:17:a8:57:0c:5f:6a: 31:5a:58:6d:7d:6e:51:cc:7e:c2:c3:d5:fb:a1:9b: 64:69:ca:67:8a:f7:3f:c8:cc:7c:85:fd:8e:1d:55: 9c:5f:b5:6d:e6:03:2c:7e:70:f4:f1:ef:e9:f9:bf: 25:fc:b2:ea:88:c0:21:5a:fa:1d:ed:45:e9:73:96: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:84:B1:8C:1A:58:82:B1:5A:CC:1B:25:EE:6B:DB:F9:3C:CE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e2:15:ce:07:d8:ca:cf:2c:f3:5b:44:8f:e7:d2:50:75:0c: 9d:c0:30:03:99:1a:20:88:13:e7:e0:63:5b:43:91:74:44:83: 76:a0:08:bc:af:a7:41:4a:ed:2b:a0:b5:78:21:c8:0a:d7:8d: ad:2f:ea:f8:b5:2e:97:29:f1:48:e1:b2:af:75:b6:70:8c:32: 26:be:78:52:3a:54:01:4a:e5:6c:1a:ec:70:a0:c9:78:e7:aa: a7:4c:29:05:bc:3d:8e:30:de:17:2f:a0:68:2d:01:ec:54:32: 6c:11:e2:b4:a0:eb:a2:64:12:ed:c0:cc:20:b4:4b:8c:df:20: ca:04:7a:7b:59:31:d3:c5:27:a4:0c:c1:62:33:82:73:b3:98: 92:54:6f:c9:b5:ca:c3:2d:43:3c:a0:b3:a2:3a:c6:f6:8b:8c: fb:38:9f:2f:48:1a:80:04:7f:7d:78:cc:98:3f:48:5d:00:e9: d6:3b:bf:6b:13:76:d0:08:64:2d:9c:2b:01:8b:80:19:bc:14: be:d3:e3:2d:3a:e4:9f:bf:05:c5:83:a0:5e:bd:8c:58:3a:50: 4d:0f:91:ac:18:eb:68:a9:0a:c7:96:e1:b1:7d:86:f5:25:cf: 92:c0:5e:cd:88:0a:a9:42:f4:86:d3:ab:fb:6d:4a:91:d1:be: 33:72:03:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vCSqKn/8925TNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YmViNDM4NzItMzAzOC00NDc2LWIxYTAtNmFhMWNkOTkxMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HbxL5dUpTGbZ4gPGMu+oYLiLpfxM8n/7yPN bN1j4LvV47Tb1v8x3Qm4OSNgjDoAKa/QIt37OHRijTNotLhHBfAe41ruy71Rvto5 umhVroNMJVc7aVP8R96xZvhiM/91uOABX/D1W6ooNRTJLAeNr95IYm/Gt1pHEYkI JvZp2ufwR/1SG8E9F7SOMl3LHKEQH13jszgOwEF018wNN0B22uxqNE5Sp9QJEBYl DL10f061I2YfnqOnvyURamQXqFcMX2oxWlhtfW5RzH7Cw9X7oZtkacpnivc/yMx8 hf2OHVWcX7Vt5gMsfnD08e/p+b8l/LLqiMAhWvod7UXpc5YHjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsKhLGMGliCsVrMGyXua9v5PM6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDkzNjU5YjYtNjRlZS0z Y2VhLTlmODItZmZkMDA5ZDRiNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF03FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFziFc4H2MrPLPNbRI/n0lB1DJ3AMAOZGiCIE+fgY1tDkXREg3agCLyv p0FK7SugtXghyArXja0v6vi1Lpcp8Ujhsq91tnCMMia+eFI6VAFK5Wwa7HCgyXjn qqdMKQW8PY4w3hcvoGgtAexUMmwR4rSg66JkEu3AzCC0S4zfIMoEentZMdPFJ6QM wWIzgnOzmJJUb8m1ysMtQzygs6I6xvaLjPs4ny9IGoAEf314zJg/SF0A6dY7v2sT dtAIZC2cKwGLgBm8FL7T4y065J+/BcWDoF69jFg6UE0PkawY62ipCseW4bF9hvUl z5LAXs2ICqlC9IbTq/ttSpHRvjNyA7U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:16 2025 by rpki-client