$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74df6b2d-93d4-32ce-a266-296fc81ad8a5.roa File: 74df6b2d-93d4-32ce-a266-296fc81ad8a5.roa (raw, json) Hash identifier: pKF0y5Eo+V1xDheKMfemIj3Gf06RCkpKKtbpsjCdKtw= Subject key identifier: FA:1B:21:AC:5C:F3:D6:B8:E0:89:81:00:56:53:DC:16:63:17:22:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858486EF5C66D1F20E43E3F65B5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74df6b2d-93d4-32ce-a266-296fc81ad8a5.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.34.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:c6:6d:1f:20:e4:3e:3f:65:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=32d5931a-06ad-4250-a0f9-9f14465ff08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:91:e3:72:c7:15:c0:05:12:f4:4f:4a:3c: 95:c2:7e:14:87:7f:1f:09:c6:96:14:c0:0c:03:28: b9:be:72:90:2c:2c:4c:6d:62:d1:be:ee:ef:6b:39: 72:cb:8e:62:86:f4:83:e8:5d:e7:ff:bf:d2:22:44: a0:03:22:5d:6e:c8:1b:ea:03:3c:3d:7b:d6:df:ae: 01:95:f6:fe:67:4e:9a:56:72:c4:1b:45:23:39:bb: 7d:39:67:30:8d:e3:dd:b3:dd:db:9f:93:cc:0b:5a: 2e:18:d9:3b:d1:ed:52:bc:f7:6e:78:58:ed:b0:bb: bc:d6:54:75:51:e0:dd:11:85:a5:07:40:c6:fc:57: 65:de:16:b5:8b:0d:eb:08:44:5d:b2:18:fc:ae:23: aa:54:d2:15:94:7e:3d:eb:aa:55:c6:01:8c:94:82: a8:55:14:75:80:e3:19:6e:88:c2:28:77:fc:b5:7d: 49:72:25:93:27:c7:f8:5d:e1:6b:fc:10:f0:91:60: 78:1c:e6:2e:cc:d6:1e:cc:33:68:84:8b:ac:c6:67: 38:f2:d1:a1:d8:a3:2a:fe:5e:a2:62:90:54:c6:97: a2:b6:3b:ba:ad:25:c7:3b:12:03:79:a5:50:5f:00: 88:a4:e7:3c:c9:d9:f2:cc:48:e2:db:6c:7a:44:6b: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1B:21:AC:5C:F3:D6:B8:E0:89:81:00:56:53:DC:16:63:17:22:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74df6b2d-93d4-32ce-a266-296fc81ad8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:db:ea:60:09:60:ff:3d:71:e1:5e:ab:e2:b2:9f:d5:9e:8c: 50:fa:59:6b:5e:97:87:63:82:0a:e0:be:e5:fc:e9:78:55:e4: 51:7b:c3:77:f6:28:da:cc:81:9f:a2:a6:33:2e:c7:e7:1f:fe: c2:8e:db:7d:ae:83:07:52:1b:ac:b7:50:85:c1:34:15:90:68: 68:03:01:af:a4:ac:92:b6:3e:f8:03:32:54:4c:50:2e:27:d6: 4b:cf:fb:fb:6d:15:88:8e:7b:ec:42:38:1f:ff:38:f0:5b:80: a3:bd:52:d5:29:8f:ec:00:e2:8b:d9:9e:28:02:30:f2:91:13: 50:cc:09:94:8a:0b:00:4a:e7:66:0a:60:2e:a2:25:8a:87:05: 48:ea:50:26:84:06:e2:ea:67:50:38:83:6b:6e:78:90:31:98: 1e:88:8d:44:e4:d8:d4:02:22:34:cf:1a:6f:eb:7b:c7:d5:ab: 0c:3e:57:d1:53:b6:e7:d0:f5:4e:25:a5:1e:15:7f:2a:18:3d: 50:f3:68:dc:51:6e:11:81:30:62:ff:f6:07:7a:a9:07:4e:ed: fe:89:ef:49:4f:98:6b:4c:a5:91:a2:74:24:19:86:63:7c:9a: 50:d9:6b:6f:c4:9e:4e:41:ba:49:e5:66:00:50:bf:5b:5f:ec: 42:c2:db:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9cZtHyDkPj9ltcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk MzJkNTkzMWEtMDZhZC00MjUwLWEwZjktOWYxNDQ2NWZmMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF+R43LHFcAFEvRPSjyVwn4Uh38fCcaWFMAM Ayi5vnKQLCxMbWLRvu7vazlyy45ihvSD6F3n/7/SIkSgAyJdbsgb6gM8PXvW364B lfb+Z06aVnLEG0UjObt9OWcwjePds93bn5PMC1ouGNk70e1SvPdueFjtsLu81lR1 UeDdEYWlB0DG/Fdl3ha1iw3rCERdshj8riOqVNIVlH4966pVxgGMlIKoVRR1gOMZ bojCKHf8tX1JciWTJ8f4XeFr/BDwkWB4HOYuzNYezDNohIusxmc48tGh2KMq/l6i YpBUxpeitju6rSXHOxIDeaVQXwCIpOc8ydnyzEji22x6RGupfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPobIaxc89a44ImBAFZT3BZjFyJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRkZjZiMmQtOTNkNC0z MmNlLWEyNjYtMjk2ZmM4MWFkOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTb6mAJYP89ceFeq+Kyn9WejFD6WWtel4djggrgvuX86XhV5FF7w3f2 KNrMgZ+ipjMux+cf/sKO232ugwdSG6y3UIXBNBWQaGgDAa+krJK2PvgDMlRMUC4n 1kvP+/ttFYiOe+xCOB//OPBbgKO9UtUpj+wA4ovZnigCMPKRE1DMCZSKCwBK52YK YC6iJYqHBUjqUCaEBuLqZ1A4g2tueJAxmB6IjUTk2NQCIjTPGm/re8fVqww+V9FT tufQ9U4lpR4VfyoYPVDzaNxRbhGBMGL/9gd6qQdO7f6J70lPmGtMpZGidCQZhmN8 mlDZa2/Enk5BuknlZgBQv1tf7ELC27g= -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:59 2025 by rpki-client