$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58982f8e-7e25-3acd-ba82-64a0aceb152a.roa File: 58982f8e-7e25-3acd-ba82-64a0aceb152a.roa (raw, json) Hash identifier: Jwj1TynJszN3Kockl1yEgTPlfZErFLXRLDJ2rgmQV80= Subject key identifier: 83:D9:75:B8:66:5E:38:33:EC:98:84:5B:C6:E2:5B:A6:9F:0B:E7:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E72ECB5EFCA7AE9C13940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58982f8e-7e25-3acd-ba82-64a0aceb152a.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.14.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:72:ec:b5:ef:ca:7a:e9:c1:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=e8e66592-ca02-4593-bdc6-34137e4df446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:96:76:89:78:84:b0:98:f9:e1:a2:52:bb: 51:ce:06:c0:cd:30:3e:f3:c5:00:61:2e:6a:56:b1: c1:3c:2b:2e:41:7f:dc:aa:3e:3d:7c:19:4c:e5:db: 59:94:bb:c0:c9:2e:c7:01:19:d4:96:53:09:b1:dc: 67:0a:fe:5a:06:10:67:88:23:bd:c5:a9:03:e1:9d: eb:f6:22:1f:e3:c4:ad:eb:99:fa:3c:7a:04:9e:04: cb:00:bd:61:02:48:07:e2:f9:c0:2f:24:04:aa:2b: f9:b1:8b:35:9a:30:1d:85:b9:52:6f:4c:a6:c5:80: 63:a3:a7:1d:d2:94:41:25:2e:e2:be:aa:70:1c:29: d3:e5:6b:3c:c7:f6:01:88:1a:82:d3:2d:15:d7:83: 35:d9:98:8c:d9:8f:ef:08:5d:e1:0f:93:7b:0d:96: 42:9c:3f:c1:f1:8f:86:36:f4:75:f6:ec:08:f0:c1: 33:1a:2d:b0:09:85:26:84:55:27:45:78:9e:f4:f5: 5f:e2:d8:2a:0f:55:8d:d3:ad:a5:78:b3:7d:f6:75: 8a:8e:1a:dd:f1:de:1e:ab:86:d9:67:50:05:df:55: 0e:05:3b:07:f8:9e:9c:44:97:b5:6a:f7:24:8b:f0: 5c:84:63:67:72:32:26:7d:e7:2e:12:45:bf:7b:37: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D9:75:B8:66:5E:38:33:EC:98:84:5B:C6:E2:5B:A6:9F:0B:E7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58982f8e-7e25-3acd-ba82-64a0aceb152a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3b:3b:66:08:44:e1:02:2f:e6:55:4f:74:35:76:59:d2:e2: 85:63:c5:92:27:6e:8d:4c:c3:f8:71:49:81:97:58:0e:0e:66: 0e:9e:56:8e:64:da:3f:3c:93:10:e4:71:64:82:c6:3d:75:d8: a0:30:c0:21:47:0d:2d:84:33:93:55:e8:a6:a4:ad:9f:04:24: 7c:46:71:df:c0:6e:d5:03:72:35:f3:78:8f:31:91:4a:21:1d: d2:1b:86:34:d6:52:49:b4:a1:5d:f0:0d:c5:35:da:37:97:c7: bf:45:7b:4a:bb:98:94:19:ad:7e:ac:6b:b5:1d:45:28:e5:66: 7e:96:79:37:48:40:1e:54:e1:a1:d9:2b:c1:0d:c0:db:1b:1e: c4:be:d4:22:1e:8c:34:ab:6d:22:a2:f1:dc:f9:a4:4a:0a:4f: 88:5d:f0:6f:94:76:32:1d:ec:41:2c:5f:96:b5:4a:23:b6:65: 9c:86:1e:0f:aa:ec:86:b7:b4:d2:e9:57:90:63:31:c9:3d:f4: a1:d4:ec:46:90:75:c0:b7:b6:37:8a:1c:ac:64:23:47:dc:09: 89:5c:be:99:f6:f1:44:de:3e:32:69:1d:45:4f:1c:64:44:3b: f6:75:e6:a2:0c:d8:24:be:4a:03:64:04:41:7b:0c:7e:7e:5e: 7a:82:73:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnLste/KeunBOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZThlNjY1OTItY2EwMi00NTkzLWJkYzYtMzQxMzdlNGRmNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFqWdol4hLCY+eGiUrtRzgbAzTA+88UAYS5q VrHBPCsuQX/cqj49fBlM5dtZlLvAyS7HARnUllMJsdxnCv5aBhBniCO9xakD4Z3r 9iIf48St65n6PHoEngTLAL1hAkgH4vnALyQEqiv5sYs1mjAdhblSb0ymxYBjo6cd 0pRBJS7ivqpwHCnT5Ws8x/YBiBqC0y0V14M12ZiM2Y/vCF3hD5N7DZZCnD/B8Y+G NvR19uwI8MEzGi2wCYUmhFUnRXie9PVf4tgqD1WN062leLN99nWKjhrd8d4eq4bZ Z1AF31UOBTsH+J6cRJe1avcki/BchGNncjImfecuEkW/ezfmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPZdbhmXjgz7JiEW8biW6afC+dSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTg5ODJmOGUtN2UyNS0z YWNkLWJhODItNjRhMGFjZWIxNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFw4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB47O2YIROECL+ZVT3Q1dlnS4oVjxZInbo1Mw/hxSYGXWA4OZg6eVo5k 2j88kxDkcWSCxj112KAwwCFHDS2EM5NV6KakrZ8EJHxGcd/AbtUDcjXzeI8xkUoh HdIbhjTWUkm0oV3wDcU12jeXx79Fe0q7mJQZrX6sa7UdRSjlZn6WeTdIQB5U4aHZ K8ENwNsbHsS+1CIejDSrbSKi8dz5pEoKT4hd8G+UdjId7EEsX5a1SiO2ZZyGHg+q 7Ia3tNLpV5BjMck99KHU7EaQdcC3tjeKHKxkI0fcCYlcvpn28UTePjJpHUVPHGRE O/Z15qIM2CS+SgNkBEF7DH5+XnqCc+I= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:58 2025 by rpki-client