$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757e6339-8ba5-3cae-8214-3ba3d43be73e.roa File: 757e6339-8ba5-3cae-8214-3ba3d43be73e.roa (raw, json) Hash identifier: LNhF1hmha39yZH6dBQCe4XzDlX2p7azBKLCWT8wMGGI= Subject key identifier: 65:43:4B:0E:93:F8:B0:E4:4D:AF:0E:48:B1:6D:3C:F8:C7:66:18:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849001DE1B6D976D358AC0EAA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757e6339-8ba5-3cae-8214-3ba3d43be73e.roa Signing time: Tue 25 Feb 2025 13:54:02 +0000 ROA not before: Tue 25 Feb 2025 13:54:02 +0000 ROA not after: Mon 26 May 2025 12:54:02 +0000 asID: 20940 IP address blocks: 23.1.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:1d:e1:b6:d9:76:d3:58:ac:0e:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 13:54:02 2025 GMT Not After : May 26 12:54:02 2025 GMT Subject: CN=de158489-4366-4bbb-9e92-85a6da54c154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:19:aa:6a:13:d1:00:55:5f:3c:c9:ae:56: 16:57:93:1d:85:78:37:d9:8d:70:33:e8:cc:e3:5d: 8c:67:4f:4a:96:98:2f:5e:c4:4c:e2:3c:40:67:0d: c8:dd:30:64:dc:be:e3:5a:7c:ef:a1:80:48:1b:b2: cf:c6:12:a9:c8:a7:07:da:04:9c:1b:1b:fd:b3:42: 33:7d:7c:c2:50:dc:50:8d:ac:bd:2a:8e:1d:09:0c: e2:1f:44:dd:5a:d0:f8:b1:91:f6:5b:8e:f0:36:27: 9b:94:20:42:52:41:35:24:4b:a4:21:3d:f7:14:11: f4:56:0c:40:1a:8d:8f:b9:96:62:82:d6:10:55:28: 70:26:5c:31:eb:69:bc:d8:a9:9b:09:38:5b:fd:db: 73:d2:39:2d:97:3c:a3:e9:87:94:02:0e:f0:a6:10: 84:f6:2a:7d:f1:b1:9f:9b:29:8f:38:e5:1b:d2:eb: 06:6d:ba:59:3d:bf:5a:c0:d5:82:86:b4:85:55:57: d8:2d:4e:59:0a:c8:52:a7:fe:24:fb:82:8c:5e:d2: 85:ee:7e:9b:1a:67:2e:ee:44:ce:c7:a8:fb:46:6f: 12:fd:b5:79:8c:f3:1a:dd:28:4a:38:b6:ae:5b:cb: 6d:e8:7a:16:8b:85:71:7d:53:45:50:69:33:8e:0d: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:4B:0E:93:F8:B0:E4:4D:AF:0E:48:B1:6D:3C:F8:C7:66:18:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757e6339-8ba5-3cae-8214-3ba3d43be73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f2:75:4a:55:d2:88:97:30:e2:9a:6e:89:6d:76:f5:02:45: 56:af:5c:72:27:84:7d:95:2a:21:95:79:67:7f:3a:31:3d:91: 4c:ba:13:75:40:e8:3b:d4:60:10:6e:97:9a:76:73:a7:63:d3: f9:4b:24:a0:3b:74:04:10:e5:6e:14:3d:86:c2:5b:06:7c:b7: a6:51:be:39:2f:bb:8a:3c:32:ec:b5:e6:f3:d1:2d:b2:b0:6b: be:34:52:bb:ac:24:d2:79:d3:36:57:4b:22:6b:0c:4d:d2:8d: b0:92:79:3d:db:bf:bc:55:ba:09:4c:7a:19:b7:cd:96:17:83: 53:d9:00:a7:cc:40:21:54:08:03:2f:aa:08:56:9d:d2:00:52: 50:04:24:1d:d9:61:2d:01:92:c0:fb:90:65:85:20:32:cf:1e: 78:c2:8f:6d:56:dd:76:38:93:66:16:ca:78:a2:0f:0c:bc:1b: 1b:b9:d1:1f:c9:4c:d6:87:0f:e2:b3:e1:97:03:da:65:22:2f: 72:61:24:d7:1f:09:a9:1d:f2:f0:03:f2:b7:ce:60:2e:8d:1d: ce:1f:64:6e:2b:30:25:97:8f:11:3d:68:b3:a5:19:0f:20:00: 87:d3:3e:3b:33:fb:9b:cf:83:3a:1e:3c:4f:55:ca:f8:ac:0b: e0:c1:6c:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAHeG22XbTWKwOqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTEzNTQwMloXDTI1MDUyNjEyNTQwMlowLzEtMCsGA1UEAxMk ZGUxNTg0ODktNDM2Ni00YmJiLTllOTItODVhNmRhNTRjMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTsZqmoT0QBVXzzJrlYWV5MdhXg32Y1wM+jM 412MZ09KlpgvXsRM4jxAZw3I3TBk3L7jWnzvoYBIG7LPxhKpyKcH2gScGxv9s0Iz fXzCUNxQjay9Ko4dCQziH0TdWtD4sZH2W47wNieblCBCUkE1JEukIT33FBH0VgxA Go2PuZZigtYQVShwJlwx62m82KmbCThb/dtz0jktlzyj6YeUAg7wphCE9ip98bGf mymPOOUb0usGbbpZPb9awNWChrSFVVfYLU5ZCshSp/4k+4KMXtKF7n6bGmcu7kTO x6j7Rm8S/bV5jPMa3ShKOLauW8tt6HoWi4VxfVNFUGkzjg1NhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVDSw6T+LDkTa8OSLFtPPjHZhhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzU3ZTYzMzktOGJhNS0z Y2FlLTgyMTQtM2JhM2Q0M2JlNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfydUpV0oiXMOKaboltdvUCRVavXHInhH2VKiGVeWd/OjE9kUy6E3VA 6DvUYBBul5p2c6dj0/lLJKA7dAQQ5W4UPYbCWwZ8t6ZRvjkvu4o8Muy15vPRLbKw a740UrusJNJ50zZXSyJrDE3SjbCSeT3bv7xVuglMehm3zZYXg1PZAKfMQCFUCAMv qghWndIAUlAEJB3ZYS0BksD7kGWFIDLPHnjCj21W3XY4k2YWyniiDwy8Gxu50R/J TNaHD+Kz4ZcD2mUiL3JhJNcfCakd8vAD8rfOYC6NHc4fZG4rMCWXjxE9aLOlGQ8g AIfTPjsz+5vPgzoePE9VyvisC+DBbNw= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:13 2025 by rpki-client