$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62981273-418d-3a4f-9c5d-4213bae9e1a6.roa File: 62981273-418d-3a4f-9c5d-4213bae9e1a6.roa (raw, json) Hash identifier: Mlj1SCT+9ilxNB3CLu7ulkqT0694rq6GDtAvHD27jtQ= Subject key identifier: 61:4E:85:8B:76:C4:B2:68:A2:67:AD:65:64:1A:DB:9F:CD:BE:94:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DDA5622895B2A94E5CD8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62981273-418d-3a4f-9c5d-4213bae9e1a6.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.205.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:dd:a5:62:28:95:b2:a9:4e:5c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=8aa4fb09-e950-4632-8d16-cd397f02d069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:65:65:9b:f7:6d:12:0d:5c:a1:61:11:66: 77:2c:f4:05:7b:9f:a9:2b:14:41:3b:81:b5:3f:99: 26:d8:f2:64:36:9b:e6:ca:fd:c9:c1:d1:55:5a:1a: 8d:12:15:c1:80:8a:cd:3f:03:d9:45:eb:37:d8:c5: 82:18:29:6a:a8:f9:fa:f7:b9:60:21:8d:bb:e6:f7: 33:15:94:97:cf:4e:f3:46:74:fa:d0:52:88:f5:5f: 33:c8:60:a7:aa:c3:1b:9b:61:5c:5d:a6:30:ff:51: b7:f8:c1:5d:1e:df:c7:6a:90:2f:95:8f:4a:8c:a0: bb:45:3c:49:ff:9d:7a:04:6d:96:20:81:25:e0:0e: 3a:16:14:9a:48:f2:36:db:e0:47:82:b5:37:7b:2b: 34:38:40:53:d9:e4:5a:da:9b:85:d9:76:5a:d7:67: 74:dd:dc:24:3f:73:b5:30:55:25:5c:e4:75:74:ef: ec:06:9c:63:b2:4b:bb:a5:b3:2f:e7:86:56:e1:c9: 45:95:e4:bd:1d:a7:91:c2:c9:1c:9b:32:29:0a:ea: 4d:fc:ac:61:fe:a4:70:80:e2:bb:ed:e8:3b:e6:8f: 4b:9e:33:27:21:40:a6:19:50:1f:1a:d6:a4:de:98: 63:f4:ff:a4:83:00:b3:b8:cf:6a:3d:87:a1:91:b6: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4E:85:8B:76:C4:B2:68:A2:67:AD:65:64:1A:DB:9F:CD:BE:94:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62981273-418d-3a4f-9c5d-4213bae9e1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:59:e6:bc:32:44:a3:0d:6f:11:0d:65:77:89:98:a6:dc:cb: a0:48:6c:3e:04:67:2e:ef:f6:82:2c:ac:83:6b:e5:05:e5:c4: 54:30:4d:a2:91:9d:2c:86:37:67:fc:d7:70:f0:57:a6:c2:bb: 01:88:1e:91:92:1c:5d:fc:8b:25:68:64:19:56:66:74:c6:cd: da:38:49:9f:fd:17:68:03:c6:af:0d:18:ba:b3:1c:04:b2:5c: d6:f0:9e:b9:d4:99:b5:4c:38:8c:fb:99:6d:bc:29:9b:82:0e: 35:f0:ce:7b:62:22:ae:56:c5:a4:29:2c:b0:2f:c0:a1:cd:70: 74:86:bc:a5:b8:e9:04:34:6c:1d:58:44:f6:7a:3d:40:3f:c9: f8:67:72:cc:d5:34:dc:fa:ab:53:cb:f3:2d:53:f0:6b:e6:d8: e5:f0:df:9b:8a:0e:cc:b6:53:f1:27:ca:14:6d:63:75:e2:4c: 9b:0a:af:c3:1f:2b:e5:d7:48:f1:02:34:9f:fe:37:95:26:5e: 11:39:cb:b8:08:bb:79:ab:e1:c1:27:99:27:7c:67:38:3a:95: da:fa:27:ef:7d:97:70:f9:0e:08:6b:35:f8:32:9a:54:de:0d: e0:d4:48:4d:c9:fd:5c:4a:cb:66:c3:33:94:d0:7d:11:92:a5: 0d:9b:7b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48N2lYiiVsqlOXNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OGFhNGZiMDktZTk1MC00NjMyLThkMTYtY2QzOTdmMDJkMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmllZZv3bRINXKFhEWZ3LPQFe5+pKxRBO4G1 P5km2PJkNpvmyv3JwdFVWhqNEhXBgIrNPwPZRes32MWCGClqqPn697lgIY275vcz FZSXz07zRnT60FKI9V8zyGCnqsMbm2FcXaYw/1G3+MFdHt/HapAvlY9KjKC7RTxJ /516BG2WIIEl4A46FhSaSPI22+BHgrU3eys0OEBT2eRa2puF2XZa12d03dwkP3O1 MFUlXOR1dO/sBpxjsku7pbMv54ZW4clFleS9HaeRwskcmzIpCupN/Kxh/qRwgOK7 7eg75o9LnjMnIUCmGVAfGtak3phj9P+kgwCzuM9qPYehkbZkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFOhYt2xLJoometZWQa25/NvpTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjI5ODEyNzMtNDE4ZC0z YTRmLTljNWQtNDIxM2JhZTllMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF83oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZZ5rwyRKMNbxENZXeJmKbcy6BIbD4EZy7v9oIsrINr5QXlxFQwTaKR nSyGN2f813DwV6bCuwGIHpGSHF38iyVoZBlWZnTGzdo4SZ/9F2gDxq8NGLqzHASy XNbwnrnUmbVMOIz7mW28KZuCDjXwzntiIq5WxaQpLLAvwKHNcHSGvKW46QQ0bB1Y RPZ6PUA/yfhncszVNNz6q1PL8y1T8Gvm2OXw35uKDsy2U/EnyhRtY3XiTJsKr8Mf K+XXSPECNJ/+N5UmXhE5y7gIu3mr4cEnmSd8Zzg6ldr6J+99l3D5DghrNfgymlTe DeDUSE3J/VxKy2bDM5TQfRGSpQ2bezk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:36 2025 by rpki-client