$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa File: 87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa (raw, json) Hash identifier: HaEr2joL/j+uqBzcZxtYLrP+3XSzV/Oc6fcSe7Jg6m8= Subject key identifier: 28:EF:F1:F5:64:4C:FE:07:B0:4D:40:A9:D5:D4:A3:A2:BC:4B:A9:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488F1085EB9A2D08CEB34E1800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa Signing time: Thu 16 Jan 2025 02:00:39 +0000 ROA not before: Thu 16 Jan 2025 02:00:39 +0000 ROA not after: Wed 16 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.62.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:10:85:eb:9a:2d:08:ce:b3:4e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 02:00:39 2025 GMT Not After : Apr 16 01:00:39 2025 GMT Subject: CN=c86f05bf-20d6-4d68-bd80-79bd848270a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:1e:f8:54:0b:9d:18:10:3e:49:16:83:ea: 2c:45:59:ae:52:40:e8:6b:98:a0:cf:e7:91:7a:15: f3:df:0c:9c:12:99:4e:3d:0d:cf:21:b1:a9:a4:86: 60:e1:7c:d4:dc:a2:5d:d3:d3:a3:5a:3c:82:e5:7a: 37:86:2e:cf:80:b1:26:2a:bb:a7:9c:41:37:95:03: 00:89:16:b8:28:bd:4b:f6:9d:79:57:a2:8f:bd:80: 30:57:12:f0:08:8b:16:2c:b6:f5:da:d2:96:0f:b6: 39:f3:60:3d:dd:e7:8c:06:1d:f9:ab:89:6a:9b:d1: b2:e5:14:fd:40:91:0d:8c:00:0b:1a:23:a6:d8:2f: 45:a9:ec:58:46:4d:ec:fa:ce:02:c4:c0:49:b4:7a: 43:cf:08:1a:8d:d1:0c:a2:c9:53:df:89:02:db:a6: 0f:f9:82:a4:52:5f:34:e0:07:bd:a0:26:fd:8f:51: 53:b4:fa:64:0a:0d:cd:2b:5f:f0:26:b2:98:37:46: cd:f3:1f:5d:29:54:c6:2f:1b:b4:20:ff:58:71:3a: 82:30:ec:66:59:43:c3:3e:d0:a9:2e:3d:30:cf:3a: 77:fb:70:69:70:7b:89:09:1a:61:cc:62:48:c7:52: 34:97:61:3d:ad:cb:4d:84:2a:e0:95:a9:ba:4b:cf: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EF:F1:F5:64:4C:FE:07:B0:4D:40:A9:D5:D4:A3:A2:BC:4B:A9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f5:cd:bf:e9:e4:ab:f4:54:bb:8a:1c:81:72:4d:7c:5b:75: bc:0b:33:8a:ec:6b:f2:32:d1:4b:98:9d:8e:2f:e5:db:3c:37: cf:3b:52:9d:e5:d2:fe:c1:2e:4e:44:0d:d1:eb:15:f9:fd:ef: fe:c4:1e:c0:47:5e:d2:10:f8:4a:bc:a6:4b:17:06:d7:df:85: 6f:99:d7:8c:be:50:7b:06:8c:30:c5:76:c3:3d:19:b2:c7:f8: 4e:b6:36:ba:8b:d4:01:e1:9c:67:c7:49:c7:81:0a:38:b7:30: 59:f6:b1:2a:d5:9e:a6:1b:da:f6:e6:f3:27:6a:c1:ee:cb:0d: ba:91:ad:10:c2:d7:02:48:ab:38:7b:64:ca:80:ea:d0:c0:16: e0:e4:f6:26:f7:0f:9b:33:8a:e7:61:3d:51:c4:ce:b9:53:d5: d4:75:0c:e5:a7:7c:8d:92:19:80:d3:e9:8a:a3:7a:b6:89:30: 3f:3d:e5:1b:63:be:95:e0:26:4e:90:0c:e9:1d:0b:61:92:f8: a7:df:fb:ae:e6:70:d1:7f:ee:bc:f9:b7:c6:98:18:19:0e:86: 92:81:96:e4:1d:cd:b5:de:cc:81:7d:7a:9a:c8:af:36:8a:90: b3:68:d6:f9:73:76:86:90:f7:b9:98:af:32:69:81:f0:7a:c4: 72:df:b8:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIXrmi0IzrNOGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk Yzg2ZjA1YmYtMjBkNi00ZDY4LWJkODAtNzliZDg0ODI3MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEoe+FQLnRgQPkkWg+osRVmuUkDoa5igz+eR ehXz3wycEplOPQ3PIbGppIZg4XzU3KJd09OjWjyC5Xo3hi7PgLEmKrunnEE3lQMA iRa4KL1L9p15V6KPvYAwVxLwCIsWLLb12tKWD7Y582A93eeMBh35q4lqm9Gy5RT9 QJENjAALGiOm2C9FqexYRk3s+s4CxMBJtHpDzwgajdEMoslT34kC26YP+YKkUl80 4Ae9oCb9j1FTtPpkCg3NK1/wJrKYN0bN8x9dKVTGLxu0IP9YcTqCMOxmWUPDPtCp Lj0wzzp3+3BpcHuJCRphzGJIx1I0l2E9rctNhCrglam6S8/8mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjv8fVkTP4HsE1AqdXUo6K8S6mSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdiNmNmYTYtNTBhOS0z MTk1LWE1NjYtMTJjNmI1YzhmM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn1zb/p5Kv0VLuKHIFyTXxbdbwLM4rsa/Iy0UuYnY4v5ds8N887Up3l 0v7BLk5EDdHrFfn97/7EHsBHXtIQ+Eq8pksXBtffhW+Z14y+UHsGjDDFdsM9GbLH +E62NrqL1AHhnGfHSceBCji3MFn2sSrVnqYb2vbm8ydqwe7LDbqRrRDC1wJIqzh7 ZMqA6tDAFuDk9ib3D5sziudhPVHEzrlT1dR1DOWnfI2SGYDT6YqjeraJMD895Rtj vpXgJk6QDOkdC2GS+Kff+67mcNF/7rz5t8aYGBkOhpKBluQdzbXezIF9eprIrzaK kLNo1vlzdoaQ97mYrzJpgfB6xHLfuN4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:04 2025 by rpki-client