$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c2c486e-9ed9-323c-8a67-ef751b47145f.roa File: 6c2c486e-9ed9-323c-8a67-ef751b47145f.roa (raw, json) Hash identifier: EsRVlQS8HzWHlkoyyr7ZJDyGJjj1qKJLBc8Vy+iLSPs= Subject key identifier: 26:AF:4C:DB:0C:1F:87:A7:C9:C0:90:14:FA:8E:D1:E6:73:51:F8:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858487CEB4B75EEF9AF9E0D698300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c2c486e-9ed9-323c-8a67-ef751b47145f.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:4b:75:ee:f9:af:9e:0d:69:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=ed3d5d1a-84ee-4b0a-923d-a6a0f1c7bcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0f:35:95:9e:6b:28:2f:aa:08:7b:8a:07:70: 56:68:15:e0:fa:18:04:40:e6:39:23:2b:4f:5e:a4: 79:0b:e5:9f:95:d6:4e:45:e4:2f:32:8b:db:13:3d: 65:06:30:ed:73:76:4f:e7:bb:09:55:17:07:af:37: 78:e3:04:ed:30:ad:99:ab:a7:78:23:0e:1b:0b:07: 46:2e:8c:60:d7:60:c7:d5:d9:9a:25:c3:53:d3:94: 5e:e8:ce:2e:d9:4f:54:90:12:78:9d:31:cd:e3:44: 0f:2c:a2:3a:6f:5b:d0:b3:67:66:ab:53:a6:3b:96: a1:3b:6e:1c:87:f6:de:c8:5d:4e:5d:73:db:a0:1d: af:46:b7:57:02:11:96:1c:db:68:ab:62:fc:94:e8: 3b:19:b8:c5:45:95:3b:c1:99:3d:8a:d2:12:f5:84: 5d:91:42:8e:34:02:01:f0:8f:43:9d:41:b7:1b:2c: 7c:77:c1:50:7f:83:32:46:cf:20:e6:11:55:cd:9b: 8c:bf:94:15:13:2c:1c:fe:e6:a1:8e:16:7e:0a:fb: 0f:5f:f5:ec:bb:ec:3b:ec:ad:f9:13:17:ae:4a:48: 02:24:cc:00:2a:ce:3c:5f:3c:36:01:eb:7b:10:b3: 7b:66:7e:11:a3:a2:c5:b6:48:f8:a7:bb:8d:d7:cc: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AF:4C:DB:0C:1F:87:A7:C9:C0:90:14:FA:8E:D1:E6:73:51:F8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c2c486e-9ed9-323c-8a67-ef751b47145f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cd:19:3a:56:df:59:82:67:23:c1:a8:e4:24:13:ce:56:e4: 20:da:63:30:4c:e7:24:bd:ce:06:7e:97:db:74:18:04:bd:7c: 42:1e:8a:da:32:2e:da:03:8a:08:33:7a:37:34:fc:80:76:2d: 3a:ed:19:79:d4:c6:a0:de:84:f0:ce:20:2c:e0:39:d3:e7:63: 00:b2:ed:f1:3a:94:ea:96:48:8e:1f:af:a7:66:88:81:4b:8e: 72:19:fd:4c:0b:1b:13:0f:aa:fb:64:8c:dc:fd:c2:64:93:29: a7:33:04:0c:f8:23:52:70:67:83:4d:d4:a5:eb:03:ae:f2:a8: 92:26:47:bb:6a:0c:42:6e:fb:4d:99:41:ba:2b:1a:1f:00:72: 41:fb:10:5b:71:13:d4:0e:76:2a:e7:cc:67:e9:5d:28:35:39: a8:0d:aa:7b:2e:32:ae:e0:67:fe:02:5b:8e:55:73:15:e7:2d: 81:98:03:a8:62:5d:cb:3f:47:ac:e9:e3:ed:ce:a5:eb:50:b7: d2:b9:98:67:c3:c3:1a:2d:19:b7:85:c6:0f:15:35:44:4b:f3: 7e:f9:c2:49:4a:73:00:7b:ac:e7:b0:42:b3:12:d9:d4:ec:01: 1f:c2:3f:ce:7d:c2:f8:86:33:8c:83:ad:a8:71:53:1b:da:79: 85:50:65:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860t17vmvng1pgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWQzZDVkMWEtODRlZS00YjBhLTkyM2QtYTZhMGYxYzdiY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q81lZ5rKC+qCHuKB3BWaBXg+hgEQOY5IytP XqR5C+WfldZOReQvMovbEz1lBjDtc3ZP57sJVRcHrzd44wTtMK2Zq6d4Iw4bCwdG Loxg12DH1dmaJcNT05Re6M4u2U9UkBJ4nTHN40QPLKI6b1vQs2dmq1OmO5ahO24c h/beyF1OXXPboB2vRrdXAhGWHNtoq2L8lOg7GbjFRZU7wZk9itIS9YRdkUKONAIB 8I9DnUG3Gyx8d8FQf4MyRs8g5hFVzZuMv5QVEywc/uahjhZ+CvsPX/Xsu+w77K35 ExeuSkgCJMwAKs48Xzw2Aet7ELN7Zn4Ro6LFtkj4p7uN18yUHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCavTNsMH4enycCQFPqO0eZzUfiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmMyYzQ4NmUtOWVkOS0z MjNjLThhNjctZWY3NTFiNDcxNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXNGTpW31mCZyPBqOQkE85W5CDaYzBM5yS9zgZ+l9t0GAS9fEIeitoy LtoDiggzejc0/IB2LTrtGXnUxqDehPDOICzgOdPnYwCy7fE6lOqWSI4fr6dmiIFL jnIZ/UwLGxMPqvtkjNz9wmSTKaczBAz4I1JwZ4NN1KXrA67yqJImR7tqDEJu+02Z QborGh8AckH7EFtxE9QOdirnzGfpXSg1OagNqnsuMq7gZ/4CW45VcxXnLYGYA6hi Xcs/R6zp4+3OpetQt9K5mGfDwxotGbeFxg8VNURL8375wklKcwB7rOewQrMS2dTs AR/CP859wviGM4yDrahxUxvaeYVQZek= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:01 2025 by rpki-client