$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa File: 8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa (raw, json) Hash identifier: LkjZ0KDME5mR85hFzSaeYtjxlz75FxCVzf+w9lHhM6I= Subject key identifier: DE:AA:E5:FC:3E:14:EF:A6:53:DD:6B:F8:6F:64:55:0D:C0:AF:EA:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493ED3EC3845AF86D7AE9E4100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.53.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:ec:38:45:af:86:d7:ae:9e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=1b0d4cc6-de10-432b-861d-492d5892f05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:5f:16:bf:6f:f3:53:d8:00:5e:27:e4:e3: b0:5f:24:5a:04:f6:b7:f1:4e:b7:9d:a0:53:f7:d1: f2:8b:48:0f:38:07:f8:8c:f9:46:ae:5b:51:6c:44: 7d:de:63:4e:c1:26:16:31:83:ef:04:3f:a6:23:77: 63:8b:ab:1c:b7:ee:40:b9:d5:dd:d3:b9:ef:d8:b7: 3b:ed:8e:6b:35:d8:b8:90:dc:a2:b7:a3:f2:62:08: 61:7d:95:a1:f0:8b:af:b2:fc:50:53:f8:cd:52:e8: 04:65:b5:f6:dd:e2:5a:51:2b:0b:51:29:f3:f6:71: ed:36:ea:89:01:1f:d9:90:c3:12:28:b1:fe:8d:95: 5b:d6:e7:db:3e:07:0b:a0:32:67:f8:63:20:51:6d: 23:f7:5b:f9:8c:50:e2:16:56:21:46:38:8c:af:44: 4e:c8:9d:5e:b4:59:b6:6e:44:4d:f6:d8:b5:84:e6: 29:09:dc:69:b2:44:5c:b8:8a:57:01:df:96:7d:ab: 1e:10:f0:c4:55:31:e5:ad:1c:47:a5:83:fd:fe:f3: 13:7b:fa:42:c9:35:d9:9c:bd:7a:9f:bd:94:69:8e: 97:d4:71:2d:88:18:50:36:92:05:0b:a2:6d:ab:4c: 86:0f:a5:36:3c:64:39:ac:e8:e5:c5:2e:cf:8c:2d: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AA:E5:FC:3E:14:EF:A6:53:DD:6B:F8:6F:64:55:0D:C0:AF:EA:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:da:2b:c9:d7:1f:76:6f:c0:90:34:ef:a0:ed:8e:8e:f5:e0: 97:a0:b8:5f:9c:7e:60:ac:40:4f:6d:f5:59:fc:90:cc:14:9e: 89:25:9d:9a:53:13:b3:14:4c:6e:26:c9:c5:5c:21:d6:e6:bb: 09:01:77:25:38:10:53:e7:1d:51:c2:60:9f:7d:5b:3c:da:95: e2:2c:25:92:3c:9c:53:07:3d:f3:23:21:f1:30:08:5d:ed:c0: f6:03:78:35:2d:04:0d:e4:e4:70:9a:b1:5a:f9:24:e8:11:b1: 0b:0e:6f:c4:f0:a0:84:00:9c:ed:56:00:d3:ca:ea:18:e1:dc: 55:5c:8f:36:6b:3b:28:8e:3b:ae:0c:92:d1:a0:8a:78:77:7e: 9f:b8:43:0f:d1:77:92:01:74:ad:dc:01:a4:52:b0:d0:16:c5: af:0c:3f:14:03:a0:25:b9:e9:34:2e:c9:1f:55:11:9f:f6:21: 1b:95:23:ec:c5:7b:c0:57:3a:d3:b6:bc:dd:dc:c5:4d:d2:4c: 90:49:a6:e7:03:8e:0b:f5:15:9a:82:0e:1f:c8:a3:dc:4f:b9: ef:bd:95:92:d3:c2:1d:40:ca:e0:06:57:56:97:84:fe:34:a6: 32:da:15:85:73:a8:0b:60:7d:1b:37:5f:98:13:d2:4c:f6:ed: ff:26:1f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+w4Ra+G166eQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MWIwZDRjYzYtZGUxMC00MzJiLTg2MWQtNDkyZDU4OTJmMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicpfFr9v81PYAF4n5OOwXyRaBPa38U63naBT 99Hyi0gPOAf4jPlGrltRbER93mNOwSYWMYPvBD+mI3dji6sct+5AudXd07nv2Lc7 7Y5rNdi4kNyit6PyYghhfZWh8IuvsvxQU/jNUugEZbX23eJaUSsLUSnz9nHtNuqJ AR/ZkMMSKLH+jZVb1ufbPgcLoDJn+GMgUW0j91v5jFDiFlYhRjiMr0ROyJ1etFm2 bkRN9ti1hOYpCdxpskRcuIpXAd+WfaseEPDEVTHlrRxHpYP9/vMTe/pCyTXZnL16 n72UaY6X1HEtiBhQNpIFC6Jtq0yGD6U2PGQ5rOjlxS7PjC3QIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6q5fw+FO+mU91r+G9kVQ3Ar+qOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI5NWFmMzYtZDhlMy0z YzVjLWI2MDAtZTVjMDZhMDVmZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvaK8nXH3ZvwJA076Dtjo714JeguF+cfmCsQE9t9Vn8kMwUnoklnZpT E7MUTG4mycVcIdbmuwkBdyU4EFPnHVHCYJ99WzzaleIsJZI8nFMHPfMjIfEwCF3t wPYDeDUtBA3k5HCasVr5JOgRsQsOb8TwoIQAnO1WANPK6hjh3FVcjzZrOyiOO64M ktGginh3fp+4Qw/Rd5IBdK3cAaRSsNAWxa8MPxQDoCW56TQuyR9VEZ/2IRuVI+zF e8BXOtO2vN3cxU3STJBJpucDjgv1FZqCDh/Io9xPue+9lZLTwh1AyuAGV1aXhP40 pjLaFYVzqAtgfRs3X5gT0kz27f8mHzw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:17 2025 by rpki-client