$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa File: 90b3c37a-65af-33a6-90d6-b28162089b17.roa (raw, json) Hash identifier: rI6ng+RH9SLA9PE+FJsyzLbCs1yLFP8yUs+xqdz2bAs= Subject key identifier: C6:EA:32:6C:2A:D4:11:0E:60:25:A9:C4:E8:9F:1C:82:67:9A:79:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5F3CDF781C0E9551AC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 24319 IP address blocks: 23.59.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5f:3c:df:78:1c:0e:95:51:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=f2859b72-5db3-4c9c-aa60-43bc04969725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:df:92:a2:b9:b3:23:ec:b6:79:2b:a0:c0: f0:6b:09:3c:82:63:93:b8:3d:6b:7d:e2:88:da:18: dc:15:22:b1:dd:2b:54:2e:9c:c5:64:39:f2:dc:20: 7d:12:f3:47:21:e3:bd:58:a5:a0:80:1f:37:fc:c2: 6d:13:b3:8b:8d:26:92:7c:89:d2:df:a8:bb:85:c5: 33:a5:45:83:99:ce:f8:a1:60:28:c0:a7:88:ed:47: c1:b5:94:8c:03:6b:bf:57:26:f6:e8:15:d6:47:75: b5:80:51:74:f6:15:00:fb:4b:42:ce:0f:13:f8:32: 92:be:08:33:ca:48:7e:a6:ad:3d:3d:fc:3e:60:1a: 3b:8d:8c:5b:a8:29:5e:3d:e9:9c:17:4d:6b:22:cc: f3:5e:59:98:63:25:8a:ba:fb:c6:89:b6:94:31:67: c8:2c:68:00:0a:15:8c:59:40:a4:95:94:bf:10:14: 96:1e:6d:95:ee:5a:7a:fe:03:1b:2e:27:0e:a3:7d: 66:4a:0a:4a:18:da:8d:10:da:24:70:d6:ce:32:32: cb:c6:9d:e4:11:73:e8:53:6f:2a:b5:d2:0e:6b:c6: 82:61:46:85:f5:bd:8d:7f:86:b9:e8:8c:2b:0b:eb: 2a:c6:77:1e:c1:55:0a:58:86:f8:86:40:cb:0b:e0: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EA:32:6C:2A:D4:11:0E:60:25:A9:C4:E8:9F:1C:82:67:9A:79:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b9:c8:cf:b7:e4:22:dc:66:43:4a:c3:46:63:39:cd:5f:65: 9b:7c:de:a0:2c:c5:33:c8:53:4a:46:1f:7d:c8:cf:1b:1b:f4: ba:17:93:fd:f3:6f:c0:62:d7:8a:31:a4:1e:1a:55:2f:e1:2f: 50:dc:0b:97:3c:b5:e8:c0:4e:b1:32:10:42:6b:b7:80:04:fa: 2b:fb:f5:5e:9a:b4:ed:ef:13:c3:cb:f5:47:12:44:1b:9d:7c: 19:b2:9d:ba:58:77:7d:a7:a9:4c:f8:8f:93:a9:5e:40:2c:b5: d5:12:ec:2c:9d:ab:1b:d7:b8:51:ec:bf:e4:a7:bb:dc:65:81: 32:06:93:aa:0b:0b:6e:98:bd:84:28:d8:35:ed:93:bc:fb:e1: de:9a:dc:93:0f:09:44:1d:fb:26:82:ac:12:7e:fc:fa:b9:b0: 12:70:70:07:ca:c4:f6:55:fd:e9:6e:1d:06:a8:25:fd:7e:ba: ee:79:16:33:be:70:d4:cd:2d:cf:33:e2:84:7e:a1:72:75:e9: dd:dc:d8:ac:ec:66:57:ed:c4:1b:e3:a6:84:81:96:e7:49:0e: 78:a1:17:82:89:49:f0:19:5a:ec:bf:55:8a:00:e0:24:29:28: 45:e4:52:11:e6:72:60:4d:7f:23:c4:45:28:e9:e7:90:14:1a: bb:91:1f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq18833gcDpVRrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk ZjI4NTliNzItNWRiMy00YzljLWFhNjAtNDNiYzA0OTY5NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaLfkqK5syPstnkroMDwawk8gmOTuD1rfeKI 2hjcFSKx3StULpzFZDny3CB9EvNHIeO9WKWggB83/MJtE7OLjSaSfInS36i7hcUz pUWDmc74oWAowKeI7UfBtZSMA2u/Vyb26BXWR3W1gFF09hUA+0tCzg8T+DKSvggz ykh+pq09Pfw+YBo7jYxbqClePemcF01rIszzXlmYYyWKuvvGibaUMWfILGgAChWM WUCklZS/EBSWHm2V7lp6/gMbLicOo31mSgpKGNqNENokcNbOMjLLxp3kEXPoU28q tdIOa8aCYUaF9b2Nf4a56IwrC+sqxncewVUKWIb4hkDLC+BpXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbqMmwq1BEOYCWpxOifHIJnmnllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTBiM2MzN2EtNjVhZi0z M2E2LTkwZDYtYjI4MTYyMDg5YjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC5yM+35CLcZkNKw0ZjOc1fZZt83qAsxTPIU0pGH33Izxsb9LoXk/3z b8Bi14oxpB4aVS/hL1DcC5c8tejATrEyEEJrt4AE+iv79V6atO3vE8PL9UcSRBud fBmynbpYd32nqUz4j5OpXkAstdUS7CydqxvXuFHsv+Snu9xlgTIGk6oLC26YvYQo 2DXtk7z74d6a3JMPCUQd+yaCrBJ+/Pq5sBJwcAfKxPZV/eluHQaoJf1+uu55FjO+ cNTNLc8z4oR+oXJ16d3c2KzsZlftxBvjpoSBludJDnihF4KJSfAZWuy/VYoA4CQp KEXkUhHmcmBNfyPERSjp55AUGruRH6Y= -----END CERTIFICATE-----Generated at Sat Apr 5 13:17:33 2025 by rpki-client