$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa File: 8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa (raw, json) Hash identifier: +DvJGNA4yEl4OCITmPHNFX28aTNs8Yzdwy6wGTFfy98= Subject key identifier: 25:34:F3:AC:23:CA:B7:ED:15:FA:32:71:1C:0A:4D:45:8F:E9:04:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849648454744292D75E3BB52340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.53.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:54:74:42:92:d7:5e:3b:b5:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=aeb10864-3578-4a02-9c0e-2391b3002c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:1b:60:8f:24:10:6b:1a:ce:84:f7:f6:0b: af:aa:7d:f2:1a:04:84:0c:de:d5:80:8c:f6:d2:35: 11:7f:86:e5:6d:01:b1:d4:9f:84:b5:63:bb:3c:6a: 72:09:24:52:9e:75:c2:aa:52:0d:4e:48:70:c6:83: b7:eb:3f:fa:47:7e:21:51:2d:f8:2c:6f:96:56:a7: 68:a6:75:e6:a5:fe:eb:a7:4b:d1:ab:89:e7:dc:d9: 0d:4d:46:f9:d5:fe:58:59:a7:9d:2e:69:52:4e:6e: 4e:1d:6f:d1:84:14:76:13:66:c0:88:ce:26:55:0b: 6f:9c:b5:84:a1:98:c3:97:90:b3:64:a0:fe:40:fb: cb:e7:76:93:38:1d:f2:bc:a3:3a:4c:36:0e:8a:14: 37:70:9f:2f:f0:08:53:93:e1:95:6a:5c:d4:43:0c: d4:3f:3d:ae:f6:44:83:70:d6:83:76:87:b6:56:27: 0d:38:b9:82:3e:00:e1:78:4e:db:3d:54:dc:ec:63: 07:82:27:ad:3e:6c:13:e6:20:b9:7f:e8:5f:8a:49: 64:19:ef:db:49:c2:f1:45:d7:4c:8a:6d:c6:1f:28: ac:50:bd:45:45:14:d6:14:45:65:c5:ce:dd:28:aa: 78:27:73:f9:9d:eb:d7:a3:4a:72:04:dd:af:38:84: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:F3:AC:23:CA:B7:ED:15:FA:32:71:1C:0A:4D:45:8F:E9:04:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e7:06:aa:4b:24:2d:02:8e:d6:c1:22:68:ea:e1:a9:ab:2b: 06:f4:ba:3b:82:bf:99:85:7e:5c:a3:75:52:2a:2d:3e:67:a7: 63:65:4b:f2:ef:2b:16:c4:af:1d:35:35:fd:3a:8e:a3:93:51: a4:63:5b:66:9a:5e:62:30:27:98:93:81:c0:ab:a4:60:85:15: a3:8f:f0:70:b1:bd:fc:4c:71:ad:e2:91:31:bb:ce:5e:7b:9c: e8:86:9f:e3:aa:97:83:81:f0:ab:3d:74:4d:82:0d:1b:dc:e3: 7f:39:75:82:2d:58:6a:3a:9d:e1:6e:61:27:66:a8:24:a3:a7: a8:a0:07:5e:be:b4:76:47:ea:71:27:b1:42:f9:f7:f5:e7:68: c4:60:a7:a6:20:f4:a3:e6:72:7b:de:59:59:6e:8b:08:e1:2b: e6:83:dd:ef:1b:7c:ee:15:62:3a:05:3c:76:36:a8:b4:7d:3d: d3:e8:e1:3b:b0:b9:46:bd:e3:89:16:5f:e2:58:30:ea:78:1b: 24:4f:d4:64:c2:c5:aa:5c:12:44:a6:26:1f:31:9b:92:d8:d4: ed:ba:5d:91:43:00:40:92:2b:a9:c5:1b:bd:49:0c:f2:12:4d: 49:89:7a:65:b6:66:82:9e:99:72:71:ae:4a:97:38:4c:ca:8a: 5c:6d:0c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFR0QpLXXju1I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk YWViMTA4NjQtMzU3OC00YTAyLTljMGUtMjM5MWIzMDAyYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvegbYI8kEGsazoT39guvqn3yGgSEDN7VgIz2 0jURf4blbQGx1J+EtWO7PGpyCSRSnnXCqlINTkhwxoO36z/6R34hUS34LG+WVqdo pnXmpf7rp0vRq4nn3NkNTUb51f5YWaedLmlSTm5OHW/RhBR2E2bAiM4mVQtvnLWE oZjDl5CzZKD+QPvL53aTOB3yvKM6TDYOihQ3cJ8v8AhTk+GValzUQwzUPz2u9kSD cNaDdoe2VicNOLmCPgDheE7bPVTc7GMHgietPmwT5iC5f+hfiklkGe/bScLxRddM im3GHyisUL1FRRTWFEVlxc7dKKp4J3P5nevXo0pyBN2vOIQ9mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU086wjyrftFfoycRwKTUWP6QTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY1MDU3ZTEtMjMyYS0z ZmFlLWE5YTItZTA0Y2QxYmE0Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjnBqpLJC0CjtbBImjq4amrKwb0ujuCv5mFflyjdVIqLT5np2NlS/Lv KxbErx01Nf06jqOTUaRjW2aaXmIwJ5iTgcCrpGCFFaOP8HCxvfxMca3ikTG7zl57 nOiGn+Oql4OB8Ks9dE2CDRvc4385dYItWGo6neFuYSdmqCSjp6igB16+tHZH6nEn sUL59/XnaMRgp6Yg9KPmcnveWVluiwjhK+aD3e8bfO4VYjoFPHY2qLR9PdPo4Tuw uUa944kWX+JYMOp4GyRP1GTCxapcEkSmJh8xm5LY1O26XZFDAECSK6nFG71JDPIS TUmJemW2ZoKemXJxrkqXOEzKilxtDBc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:31 2025 by rpki-client