$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa File: 4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa (raw, json) Hash identifier: bB99ze7usrdB6bOKVaOZUDFZHkCRKHRpTo1n302OU8k= Subject key identifier: E7:EB:68:80:14:07:6F:D3:96:D8:FC:39:08:1A:A3:DC:D9:93:63:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C09366B992E84D320A08200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.35.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:36:6b:99:2e:84:d3:20:a0:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=df0d5ba1-8c9a-4ab0-88aa-492858f2f2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6f:01:dc:df:55:06:c5:25:96:18:11:6d:2e: 2b:79:1e:ef:ec:d6:5c:91:be:70:61:f6:a0:57:34: 42:53:15:c4:e0:f3:42:ae:e0:e0:6e:c8:41:f5:59: fe:f3:c8:0b:d6:7f:0f:b0:78:8c:37:06:78:f2:b6: 02:ce:ef:48:e3:56:4b:d7:7c:b1:f1:8c:5f:23:2a: 2a:d9:70:8c:30:83:33:94:89:45:38:b9:9f:71:fa: c7:a6:82:25:f1:7a:c7:c7:80:62:bf:0c:35:1c:9f: 40:c8:d8:21:da:64:40:0e:51:81:0b:3f:b3:e0:81: db:a5:21:9b:93:74:80:d4:82:7d:3b:a1:20:7e:4f: 83:60:47:38:a8:9a:8a:cf:e7:4f:0b:54:86:c3:b3: 67:b1:d3:e6:b7:d2:64:c4:00:59:ec:b9:68:fd:91: a1:ee:df:7a:4c:b5:96:5d:ef:f2:39:ba:ab:d5:15: 42:18:b9:c4:8c:a4:5a:54:cc:c3:1a:4a:03:f9:31: b8:fc:56:52:be:53:fb:90:30:22:10:7f:8e:e6:65: 40:be:9f:7e:53:49:c9:c5:e1:0b:78:a7:56:61:d7: cc:79:a2:fd:b3:c7:7a:72:ed:48:7e:2b:cc:79:9f: 61:c8:d6:d2:ef:c9:d2:51:0d:93:b6:9c:67:a1:01: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EB:68:80:14:07:6F:D3:96:D8:FC:39:08:1A:A3:DC:D9:93:63:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2e:b2:ee:5d:cd:5f:20:7f:51:32:84:04:68:78:18:b1:47: 4b:90:3a:da:13:ba:49:46:d8:9f:cd:d1:45:63:fd:30:e8:5b: d5:e9:17:e5:02:e6:c3:d4:29:21:66:9d:2d:2a:48:ba:7c:fa: 36:19:dd:1d:22:6e:98:b5:46:78:17:b1:5d:9a:3c:9c:aa:46: b2:d4:e8:5f:dd:0c:42:d8:6e:2f:7c:b5:bb:f5:3c:a7:26:c7: 0d:69:fc:de:1b:bf:42:fa:14:90:39:79:fd:81:5b:7d:f7:97: 41:38:da:1a:f4:97:bc:f4:38:7c:6d:a8:ae:df:db:2c:de:9f: 26:a5:f3:84:31:ca:16:0a:c4:83:8f:61:18:0b:94:54:34:bb: 4d:7f:0d:db:44:6b:fa:a4:9c:20:96:fb:a0:0e:da:29:93:08: 14:7e:e3:f5:ef:9f:d5:2d:0d:78:5e:96:78:d2:7c:a7:85:ca: 23:91:1f:ab:aa:f2:a1:5b:75:d7:a7:d7:7a:83:e4:a9:e6:d1: 2c:38:d9:ec:87:36:27:9f:ce:d3:3d:f6:c4:65:4e:4a:cc:b6: ff:e3:23:a1:c3:7e:73:50:20:8f:a8:25:3a:5f:4a:43:c4:f8: bc:1c:a5:c8:5e:08:ac:51:ff:ee:aa:a0:3d:6e:ff:54:21:7b: a8:00:1b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTZrmS6E0yCgggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZGYwZDViYTEtOGM5YS00YWIwLTg4YWEtNDkyODU4ZjJmMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm8B3N9VBsUllhgRbS4reR7v7NZckb5wYfag VzRCUxXE4PNCruDgbshB9Vn+88gL1n8PsHiMNwZ48rYCzu9I41ZL13yx8YxfIyoq 2XCMMIMzlIlFOLmfcfrHpoIl8XrHx4Bivww1HJ9AyNgh2mRADlGBCz+z4IHbpSGb k3SA1IJ9O6Egfk+DYEc4qJqKz+dPC1SGw7NnsdPmt9JkxABZ7Llo/ZGh7t96TLWW Xe/yObqr1RVCGLnEjKRaVMzDGkoD+TG4/FZSvlP7kDAiEH+O5mVAvp9+U0nJxeEL eKdWYdfMeaL9s8d6cu1IfivMeZ9hyNbS78nSUQ2TtpxnoQEd9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfraIAUB2/Tltj8OQgao9zZk2OSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRiNGY0MzktY2YzZS0z ZjhkLTg5YWUtOGU3N2UwOTgwZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0usu5dzV8gf1EyhARoeBixR0uQOtoTuklG2J/N0UVj/TDoW9XpF+UC 5sPUKSFmnS0qSLp8+jYZ3R0ibpi1RngXsV2aPJyqRrLU6F/dDELYbi98tbv1PKcm xw1p/N4bv0L6FJA5ef2BW333l0E42hr0l7z0OHxtqK7f2yzenyal84QxyhYKxIOP YRgLlFQ0u01/DdtEa/qknCCW+6AO2imTCBR+4/Xvn9UtDXhelnjSfKeFyiORH6uq 8qFbdden13qD5Knm0Sw42eyHNiefztM99sRlTkrMtv/jI6HDfnNQII+oJTpfSkPE +LwcpcheCKxR/+6qoD1u/1Qhe6gAGwA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:30 2025 by rpki-client