$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f7d10e4-0017-38ce-9cc6-95e23bcb6931.roa File: 6f7d10e4-0017-38ce-9cc6-95e23bcb6931.roa (raw, json) Hash identifier: fBvGEYYVpOGFRvsCQ4Ip/tmDm56Z5EZLz0kBxftlVwg= Subject key identifier: AC:A5:EC:44:CA:42:40:2B:F7:64:83:12:C8:FA:97:B5:67:AA:18:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E9AA00A7BE29806506B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f7d10e4-0017-38ce-9cc6-95e23bcb6931.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.1.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:9a:a0:0a:7b:e2:98:06:50:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=eb7e3eb9-109e-446e-afa7-0bd02f51011d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:6e:3a:70:7a:df:7d:b3:43:e3:29:68:1f: ef:34:5b:28:ff:6e:3d:10:d0:95:2a:a1:31:de:d9: 64:ad:02:05:74:74:12:ee:ec:7e:93:a4:a3:3a:f1: 6f:5b:cd:f5:5e:e8:23:d9:be:90:e4:4f:80:eb:7c: d6:ba:f6:1c:c7:5b:65:2b:ef:b5:ab:81:1f:a6:2e: 59:6c:da:09:3b:49:dc:51:54:58:5a:03:c7:c4:81: fd:38:a6:c5:f6:49:32:76:5b:ef:b2:90:1f:d6:87: 9d:91:40:41:fb:53:2b:41:13:c4:11:60:37:52:47: ce:e5:eb:6a:02:4a:c9:22:b1:93:e9:71:46:08:ac: 2b:6f:21:a8:1d:c7:e2:2c:57:76:b7:ce:47:6e:07: 61:37:d3:0c:94:d6:1f:8f:e7:c2:ea:b2:9f:6b:b2: 72:56:28:82:1c:8c:98:ba:52:0a:fe:30:04:18:51: c0:2f:08:e3:39:1f:4a:78:40:0e:d1:7b:66:da:f0: 44:35:3a:9c:57:ba:8a:85:aa:4f:6e:7e:08:1b:e8: 55:78:e4:be:3c:09:d2:26:29:c1:04:ad:05:20:8c: 1c:c0:fa:64:03:b5:5e:ae:e1:73:01:1d:6c:20:8a: 80:dd:c4:b4:80:a8:d4:f8:89:09:64:21:8f:a8:4d: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:EC:44:CA:42:40:2B:F7:64:83:12:C8:FA:97:B5:67:AA:18:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f7d10e4-0017-38ce-9cc6-95e23bcb6931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e8:f5:eb:26:58:fc:78:b3:d5:17:39:2f:a4:c7:21:2a:b5: 41:da:1c:35:ac:fb:50:47:54:41:6e:3d:7f:46:ab:d6:5a:cf: e7:2d:2c:c9:56:42:1c:d9:ea:65:25:59:f8:aa:c3:6b:63:56: 48:7f:b1:95:f1:dc:16:98:e9:da:3d:58:26:6a:73:b2:0a:e3: 00:0f:7b:81:a0:b9:77:41:b0:0e:f7:45:07:4a:18:6f:5a:d7: fa:e3:f8:6d:56:95:37:24:b7:c0:30:63:95:bf:57:b0:31:59: 0f:28:1f:6c:a6:86:b3:7d:8a:00:31:d3:86:dc:4e:ee:02:27: cd:8b:26:04:a7:7e:22:31:91:27:1c:d8:d4:2d:65:3e:85:61: 6a:29:a3:b9:15:a5:d0:b6:d2:5a:7c:64:58:70:16:e0:19:5a: f7:45:bd:c7:89:2d:a6:35:e6:1a:ce:ff:d0:8a:a7:5d:f6:64: 72:a0:dd:76:bb:c7:0f:af:1d:de:e5:8d:63:c8:22:8e:9b:48: b0:73:68:5a:60:45:bd:44:99:a2:14:6a:ef:97:cb:04:62:0e: 7b:b2:22:38:13:79:6b:ac:eb:3a:63:56:a4:89:6b:c7:de:79: 25:19:86:24:34:75:c9:64:0d:72:a0:03:ea:74:4f:fe:3e:4a: 09:83:f9:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTpqgCnvimAZQawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZWI3ZTNlYjktMTA5ZS00NDZlLWFmYTctMGJkMDJmNTEwMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvFuOnB6332zQ+MpaB/vNFso/249ENCVKqEx 3tlkrQIFdHQS7ux+k6SjOvFvW831Xugj2b6Q5E+A63zWuvYcx1tlK++1q4Efpi5Z bNoJO0ncUVRYWgPHxIH9OKbF9kkydlvvspAf1oedkUBB+1MrQRPEEWA3UkfO5etq AkrJIrGT6XFGCKwrbyGoHcfiLFd2t85HbgdhN9MMlNYfj+fC6rKfa7JyViiCHIyY ulIK/jAEGFHALwjjOR9KeEAO0Xtm2vBENTqcV7qKhapPbn4IG+hVeOS+PAnSJinB BK0FIIwcwPpkA7VeruFzAR1sIIqA3cS0gKjU+IkJZCGPqE0VrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyl7ETKQkAr92SDEsj6l7VnqhgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmY3ZDEwZTQtMDAxNy0z OGNlLTljYzYtOTVlMjNiY2I2OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDo9esmWPx4s9UXOS+kxyEqtUHaHDWs+1BHVEFuPX9Gq9Zaz+ctLMlW QhzZ6mUlWfiqw2tjVkh/sZXx3BaY6do9WCZqc7IK4wAPe4GguXdBsA73RQdKGG9a 1/rj+G1WlTckt8AwY5W/V7AxWQ8oH2ymhrN9igAx04bcTu4CJ82LJgSnfiIxkScc 2NQtZT6FYWopo7kVpdC20lp8ZFhwFuAZWvdFvceJLaY15hrO/9CKp132ZHKg3Xa7 xw+vHd7ljWPIIo6bSLBzaFpgRb1EmaIUau+XywRiDnuyIjgTeWus6zpjVqSJa8fe eSUZhiQ0dclkDXKgA+p0T/4+SgmD+Q0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:54 2025 by rpki-client