$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d919f7c-2002-3665-952f-49b8f89914a3.roa File: 6d919f7c-2002-3665-952f-49b8f89914a3.roa (raw, json) Hash identifier: IWzjm7Ne8jNeKMcx+mcnTup3zfT3wnfcVVwi7POjO4U= Subject key identifier: ED:EB:A9:78:5E:51:E4:DE:C0:91:23:FC:09:B4:B8:21:76:B0:A3:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D211449FAF3B00B427DE52C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d919f7c-2002-3665-952f-49b8f89914a3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 6762 IP address blocks: 23.39.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:44:9f:af:3b:00:b4:27:de:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=031faa9d-d811-426f-92ee-0683b3fdfee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:16:a6:65:ac:71:51:44:b2:de:66:75:74: f9:f9:5e:46:22:31:61:24:c2:e7:fc:5b:41:c7:2a: 92:b9:7d:7f:ff:be:b2:50:2c:7d:9d:8b:ce:ad:77: 63:e8:ef:c1:6f:47:79:c6:2f:d2:6a:1d:82:f8:c6: c2:82:e1:de:67:55:97:4d:8f:9e:07:1e:7f:f3:81: 1d:d0:40:a7:12:2a:a9:a4:ba:fc:1f:3b:bb:97:f5: 89:38:9d:dc:d8:3b:7c:66:dd:6b:2a:5e:c2:8a:88: 39:26:3e:79:15:7b:30:96:f8:ac:f3:e5:63:f8:45: ff:3e:47:00:e8:cc:42:7d:61:b0:ff:11:90:07:71: 17:f9:6f:00:31:ec:88:35:27:b6:ca:fc:c2:7f:bc: 3a:dd:ef:94:c3:39:57:c5:93:b3:e9:26:a8:0d:b6: c5:70:51:7e:f5:8c:a5:15:71:94:2a:1f:45:d7:77: 4b:bd:62:5b:34:84:d8:6d:f4:de:28:9d:3b:7e:9d: c4:e9:b8:c9:1b:21:41:a7:bc:31:1d:02:bf:72:ee: ec:24:13:18:da:5f:88:dd:96:81:b1:29:c1:35:6b: 03:c1:ac:15:de:e1:cd:4b:3f:cd:19:71:89:76:12: d4:c1:97:7c:60:cc:21:d3:05:6d:f2:51:18:71:25: 0d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EB:A9:78:5E:51:E4:DE:C0:91:23:FC:09:B4:B8:21:76:B0:A3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d919f7c-2002-3665-952f-49b8f89914a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9b:f5:9f:08:83:60:55:a1:ff:24:30:b8:88:27:42:de:68: 5d:a1:24:02:af:6d:b9:ff:a9:7e:dc:18:cc:a5:d0:68:95:ed: 90:d2:95:7d:d0:7d:e6:c2:05:77:7c:32:0b:47:7b:86:d9:54: 98:8e:73:96:07:ea:71:a1:c3:cf:67:80:a0:9e:87:f9:9a:57: 89:71:02:4c:ac:2b:6b:de:a2:5c:fb:80:9b:f0:25:04:1b:ee: 73:c0:76:8c:67:a4:91:5e:d0:5f:84:99:c9:1d:11:cd:17:63: 7b:d2:45:af:ea:89:1b:b5:a0:e5:68:0b:c3:4a:01:60:cf:bb: 31:b5:dc:46:2e:2d:8e:2e:3e:33:a9:56:8f:6b:11:7c:b7:e6: 6b:d1:0b:71:3e:79:c0:24:17:2f:3c:9a:d7:35:95:a9:d5:32: 2b:4f:bc:02:4d:ec:84:e8:e0:57:06:e5:7c:53:22:9a:97:1f: e4:76:b8:c6:a7:14:0c:53:a5:ec:1d:8b:a7:f6:07:ea:aa:e5: dc:94:10:54:c5:6f:ed:e9:8b:73:46:ba:a7:fb:21:01:e1:9b: 1d:af:a8:0c:23:27:81:31:b1:93:a4:50:c1:ee:a7:71:ca:28: ab:c5:b1:03:33:8d:ee:ba:df:ea:7d:b1:02:6a:d2:68:ff:e2: 64:9c:24:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUSfrzsAtCfeUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDMxZmFhOWQtZDgxMS00MjZmLTkyZWUtMDY4M2IzZmRmZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNEWpmWscVFEst5mdXT5+V5GIjFhJMLn/FtB xyqSuX1//76yUCx9nYvOrXdj6O/Bb0d5xi/Sah2C+MbCguHeZ1WXTY+eBx5/84Ed 0ECnEiqppLr8Hzu7l/WJOJ3c2Dt8Zt1rKl7Ciog5Jj55FXswlvis8+Vj+EX/PkcA 6MxCfWGw/xGQB3EX+W8AMeyINSe2yvzCf7w63e+UwzlXxZOz6SaoDbbFcFF+9Yyl FXGUKh9F13dLvWJbNITYbfTeKJ07fp3E6bjJGyFBp7wxHQK/cu7sJBMY2l+I3ZaB sSnBNWsDwawV3uHNSz/NGXGJdhLUwZd8YMwh0wVt8lEYcSUNiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3rqXheUeTewJEj/Am0uCF2sKOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmQ5MTlmN2MtMjAwMi0z NjY1LTk1MmYtNDliOGY4OTkxNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFydAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICb9Z8Ig2BVof8kMLiIJ0LeaF2hJAKvbbn/qX7cGMyl0GiV7ZDSlX3Q febCBXd8MgtHe4bZVJiOc5YH6nGhw89ngKCeh/maV4lxAkysK2veolz7gJvwJQQb 7nPAdoxnpJFe0F+EmckdEc0XY3vSRa/qiRu1oOVoC8NKAWDPuzG13EYuLY4uPjOp Vo9rEXy35mvRC3E+ecAkFy88mtc1lanVMitPvAJN7ITo4FcG5XxTIpqXH+R2uMan FAxTpewdi6f2B+qq5dyUEFTFb+3pi3NGuqf7IQHhmx2vqAwjJ4ExsZOkUMHup3HK KKvFsQMzje663+p9sQJq0mj/4mScJAo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:12 2025 by rpki-client