$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87016a5b-158e-3c19-9761-0a3885cf3a10.roa File: 87016a5b-158e-3c19-9761-0a3885cf3a10.roa (raw, json) Hash identifier: Nzl4GiLpdYOuDKyIYfNCLCSsFDLUWgR5dUAVzwnuRp4= Subject key identifier: 87:FA:2F:03:FD:E7:BD:6D:9C:87:68:98:DE:56:A4:92:65:6B:A1:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC40F203AEE010E5033AD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87016a5b-158e-3c19-9761-0a3885cf3a10.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.64.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:40:f2:03:ae:e0:10:e5:03:3a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=defe450e-c36c-4aab-a2ae-a4cf109740f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:c3:38:c3:5d:16:be:eb:66:b7:48:a2:0c: ff:d1:75:24:f5:eb:2c:c9:19:2e:93:9d:b5:c2:77: 46:e1:ae:31:7d:ed:be:f8:03:c3:90:fd:6d:19:90: 61:29:f0:8c:47:cf:e8:27:bb:7a:d6:37:f0:e4:d5: 77:c4:0f:91:28:4c:0d:b1:ad:ec:ad:c3:ec:da:1e: a7:ec:00:11:9b:72:32:0e:8d:60:04:0a:29:d2:d8: 80:d0:18:dc:21:a8:cd:0f:af:bd:09:02:81:07:b8: 9f:10:ab:20:06:16:94:09:f1:19:85:0c:d2:44:30: b5:8e:39:12:83:20:65:4f:3a:3e:3f:60:9a:30:16: fa:a8:2e:4a:a1:5b:96:07:bf:e2:9e:16:aa:c3:c8: be:74:68:60:4a:3a:60:9b:c2:7c:ea:ff:d5:6c:c4: 15:6a:0f:aa:13:8f:d0:34:57:3b:1d:20:6e:d0:61: 10:0a:4e:91:bf:be:0c:1e:23:72:9b:ac:82:17:a7: c0:c9:90:84:d4:5d:a2:5f:be:56:43:b0:27:b4:1b: c9:d3:55:a9:69:7e:73:b9:12:18:7c:27:93:eb:13: 10:26:12:5f:25:e6:24:ab:1a:29:dc:b8:a9:d4:76: af:10:81:72:92:5f:9e:87:21:07:7b:45:e8:b5:92: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FA:2F:03:FD:E7:BD:6D:9C:87:68:98:DE:56:A4:92:65:6B:A1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87016a5b-158e-3c19-9761-0a3885cf3a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d3:a1:6d:24:79:df:98:ec:a3:57:f2:68:54:b7:47:a6:d7: 18:8c:b9:ae:10:fe:d6:ec:81:fd:ae:3e:4d:8d:9a:0d:4c:4b: 66:fe:6e:23:2c:a1:c5:34:47:a9:aa:9e:70:fc:a7:45:ac:94: aa:1a:91:48:a5:1e:60:4c:41:e7:dd:bd:dd:94:b4:df:66:f4: 49:62:35:18:59:ec:5b:25:16:75:34:d7:e8:47:b9:ca:21:d1: 72:ba:f6:4d:db:8d:33:a5:ac:65:a7:32:18:b4:db:92:cd:54: 9f:31:2b:09:50:cd:ad:a3:d3:ac:82:31:c5:dd:71:82:a4:88: 9d:ba:c4:fc:fe:5a:46:28:03:a1:2e:02:ac:df:22:3c:e9:5d: 2a:93:5f:c7:a2:33:dc:e8:5c:54:2d:b4:c7:6d:54:69:b4:50: 97:b7:53:18:f0:00:ab:76:21:de:e1:16:4c:0a:3f:ec:0f:9f: 10:1d:71:0f:7f:c5:3a:83:cb:d2:6a:96:a7:09:3a:3d:7e:ca: 46:b5:87:d0:71:d7:81:d8:13:89:61:74:89:84:8c:a8:6a:2e: 21:f5:f2:65:87:c1:39:c4:3b:9e:a5:26:b5:40:9b:5b:62:f0: 92:da:f2:72:ce:84:75:fd:b2:31:9c:95:6f:c2:23:53:f6:a4: 42:38:4c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrEDyA67gEOUDOtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZGVmZTQ1MGUtYzM2Yy00YWFiLWEyYWUtYTRjZjEwOTc0MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5HDOMNdFr7rZrdIogz/0XUk9essyRkuk521 wndG4a4xfe2++APDkP1tGZBhKfCMR8/oJ7t61jfw5NV3xA+RKEwNsa3srcPs2h6n 7AARm3IyDo1gBAop0tiA0BjcIajND6+9CQKBB7ifEKsgBhaUCfEZhQzSRDC1jjkS gyBlTzo+P2CaMBb6qC5KoVuWB7/inhaqw8i+dGhgSjpgm8J86v/VbMQVag+qE4/Q NFc7HSBu0GEQCk6Rv74MHiNym6yCF6fAyZCE1F2iX75WQ7AntBvJ01WpaX5zuRIY fCeT6xMQJhJfJeYkqxop3Lip1HavEIFykl+ehyEHe0XotZLCNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf6LwP9571tnIdomN5WpJJla6FnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODcwMTZhNWItMTU4ZS0z YzE5LTk3NjEtMGEzODg1Y2YzYTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7ToW0ked+Y7KNX8mhUt0em1xiMua4Q/tbsgf2uPk2Nmg1MS2b+biMs ocU0R6mqnnD8p0WslKoakUilHmBMQefdvd2UtN9m9EliNRhZ7FslFnU01+hHucoh 0XK69k3bjTOlrGWnMhi025LNVJ8xKwlQza2j06yCMcXdcYKkiJ26xPz+WkYoA6Eu AqzfIjzpXSqTX8eiM9zoXFQttMdtVGm0UJe3UxjwAKt2Id7hFkwKP+wPnxAdcQ9/ xTqDy9JqlqcJOj1+yka1h9Bx14HYE4lhdImEjKhqLiH18mWHwTnEO56lJrVAm1ti 8JLa8nLOhHX9sjGclW/CI1P2pEI4TDM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:28 2025 by rpki-client