$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa File: 56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa (raw, json) Hash identifier: M4FCb/fVM3PXZcq+TaaE+cs69VaJYSdW96f5Y3EN2a4= Subject key identifier: 1E:9C:75:A6:7E:50:BE:0F:8E:49:93:34:C3:76:48:61:8E:42:B2:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D37658704701D7E227019E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.40.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:58:70:47:01:d7:e2:27:01:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=8d968746-69f1-4b2a-8ee7-744c99a47778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:49:92:17:37:53:a2:9d:cf:91:d7:62:91: 87:7b:0a:07:8c:00:60:9e:7c:f5:d4:47:32:21:b2: 48:05:48:c5:a3:48:b6:a8:f0:8a:7e:c1:a5:7d:c3: c2:fb:ae:43:19:cf:bb:4d:42:c3:13:f5:08:47:69: 70:97:92:c7:41:f0:f1:e6:41:8d:a7:64:fe:45:af: 5c:e0:3c:3c:d4:fa:a4:6b:fa:d0:41:0b:95:6e:b2: e3:23:a7:b3:4f:a0:ca:63:0a:8c:d9:1a:f2:83:42: 58:d5:c3:b8:23:97:54:0c:be:74:66:f3:b6:3a:ce: 5e:bc:7b:11:ab:d6:c4:d9:50:5f:ac:68:58:24:39: 30:48:18:b2:c3:85:76:5c:89:f2:f5:f7:78:1e:9e: a6:5f:af:91:96:2b:f2:89:34:8c:d0:f9:5e:81:9d: 3e:8e:d4:f7:63:f2:7d:8c:a3:ad:1c:ae:49:d8:10: e6:17:6c:56:15:5f:12:5f:6a:b1:98:44:80:87:93: 24:13:db:ab:0b:bd:c7:d7:f2:dd:24:ba:2d:b6:b7: 66:a7:3c:e7:19:79:91:07:35:7c:2a:93:11:00:54: e9:e0:35:81:df:8e:f4:b4:41:7e:ea:d7:ce:92:de: 75:cb:af:9a:c9:1c:f5:e7:f9:69:8d:d0:76:16:3f: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9C:75:A6:7E:50:BE:0F:8E:49:93:34:C3:76:48:61:8E:42:B2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:76:1a:c1:e0:d5:df:d6:52:ae:64:7f:63:51:ee:d0:8d:a6: 19:61:64:6f:48:b5:ef:a2:81:2c:77:cf:20:e2:48:47:b4:25: c4:81:f8:22:cf:7e:19:d0:68:4c:42:54:1e:5f:fa:cd:76:c1: 9f:ea:d5:ad:65:33:85:de:aa:1e:9d:c7:91:23:fc:9a:a6:32: a5:47:ae:d8:15:18:3e:2d:2b:8f:67:1c:a9:e7:e1:01:ea:3b: 0c:d2:a2:80:ed:5f:82:e0:ab:40:c9:57:3d:58:c8:58:68:af: cb:ff:c7:26:e1:31:2f:f8:ff:93:04:c5:cc:56:d7:9d:80:d2: a0:68:74:20:ab:18:13:50:45:be:64:b2:e2:51:4d:39:a5:b4: 30:5b:cc:83:73:e9:d2:91:08:35:c1:e7:1b:b3:e7:cd:90:54: e1:ea:7d:0f:a7:32:a0:60:e5:45:e0:53:53:2c:50:e2:aa:3e: 3d:0a:93:2d:4f:96:14:b8:eb:3b:07:08:78:85:8d:b9:7b:6f: 76:cf:47:43:98:23:78:28:5b:74:51:22:03:30:cc:e1:04:11: ea:e3:16:6b:44:bc:1e:ee:1a:88:ab:1f:2b:e1:70:bc:28:7b: 63:c8:f9:c5:60:17:76:09:12:11:3a:96:94:33:0f:13:f9:f7: 16:ee:43:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlhwRwHX4icBngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk OGQ5Njg3NDYtNjlmMS00YjJhLThlZTctNzQ0Yzk5YTQ3Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFtJkhc3U6Kdz5HXYpGHewoHjABgnnz11Ecy IbJIBUjFo0i2qPCKfsGlfcPC+65DGc+7TULDE/UIR2lwl5LHQfDx5kGNp2T+Ra9c 4Dw81Pqka/rQQQuVbrLjI6ezT6DKYwqM2Rryg0JY1cO4I5dUDL50ZvO2Os5evHsR q9bE2VBfrGhYJDkwSBiyw4V2XIny9fd4Hp6mX6+RlivyiTSM0PlegZ0+jtT3Y/J9 jKOtHK5J2BDmF2xWFV8SX2qxmESAh5MkE9urC73H1/LdJLottrdmpzznGXmRBzV8 KpMRAFTp4DWB3470tEF+6tfOkt51y6+ayRz15/lpjdB2Fj+dyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6cdaZ+UL4PjkmTNMN2SGGOQrLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZmYjI0MGQtN2RhNy0z YTRmLWI1YWQtZGU0ZmExZDI0OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI52GsHg1d/WUq5kf2NR7tCNphlhZG9Ite+igSx3zyDiSEe0JcSB+CLP fhnQaExCVB5f+s12wZ/q1a1lM4Xeqh6dx5Ej/JqmMqVHrtgVGD4tK49nHKnn4QHq OwzSooDtX4Lgq0DJVz1YyFhor8v/xybhMS/4/5MExcxW152A0qBodCCrGBNQRb5k suJRTTmltDBbzINz6dKRCDXB5xuz582QVOHqfQ+nMqBg5UXgU1MsUOKqPj0Kky1P lhS46zsHCHiFjbl7b3bPR0OYI3goW3RRIgMwzOEEEerjFmtEvB7uGoirHyvhcLwo e2PI+cVgF3YJEhE6lpQzDxP59xbuQ+8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:32 2025 by rpki-client