$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99eac548-c053-3614-95f1-ea6b497acdcb.roa File: 99eac548-c053-3614-95f1-ea6b497acdcb.roa (raw, json) Hash identifier: 3wHd9vWbI3XddECnh+zZByX8w/pYMJvAwiZi6odLKug= Subject key identifier: B0:46:FE:48:DD:5C:E9:A1:52:3F:5F:D4:40:FA:C1:C6:FA:1D:3F:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EB6C2971F200790B68D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99eac548-c053-3614-95f1-ea6b497acdcb.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.33.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b6:c2:97:1f:20:07:90:b6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=10030557-8d45-431b-80b8-c7f24d632ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:22:51:97:c6:b8:7a:2e:92:d3:bb:07:58: 0d:6e:42:4e:a1:be:bf:80:60:a2:76:f3:e3:57:80: a6:3c:3b:a0:88:d6:c0:8a:a6:d3:1c:20:cb:38:09: 91:49:54:f3:76:51:db:2d:f3:1f:02:5c:c8:c0:b6: 48:c6:be:50:fc:8c:f4:04:e9:c7:d9:27:13:35:2f: 41:51:14:c6:db:e6:60:83:b2:cc:b1:d1:02:a2:f8: c0:bd:12:07:67:bf:99:a1:34:6a:13:1a:c3:c6:2b: ac:64:31:b5:3e:12:c8:1c:a2:65:d2:9f:06:6e:7b: 20:d1:95:8c:84:97:8d:b5:17:11:d2:44:d9:3b:45: 59:f7:6a:f8:8d:fd:e6:e8:44:c4:cc:5e:e2:35:52: a0:07:92:42:50:2a:d7:91:72:c0:1e:6e:1c:81:9b: 84:d6:87:74:a9:09:fa:5f:08:45:c1:2c:cf:32:3b: e1:69:c3:e6:db:44:11:35:b2:d3:9b:75:b1:74:b6: f2:67:21:73:66:65:3a:b0:ba:77:50:f5:07:2e:4a: 17:a6:2f:9e:27:a3:bc:b1:83:1c:f7:de:9b:14:7f: 22:db:26:91:ab:fa:94:0b:c1:98:54:e8:fd:40:83: f1:eb:38:f1:e3:42:36:6d:ff:7e:88:a3:5f:89:1a: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:FE:48:DD:5C:E9:A1:52:3F:5F:D4:40:FA:C1:C6:FA:1D:3F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99eac548-c053-3614-95f1-ea6b497acdcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:03:9d:a2:64:ba:74:f5:c9:ee:98:cf:3d:b0:73:cf:87:ac: 73:6f:a4:f7:33:82:7a:8b:6e:4b:14:ce:d1:66:87:06:ff:0e: 3c:83:b3:ad:4f:24:99:54:94:76:91:f0:6c:3d:d1:b1:7b:2f: cb:da:ea:cc:ad:fd:bf:31:7f:e6:f1:ed:96:13:ca:bf:e2:1d: 96:eb:31:b5:0f:97:6f:fd:2a:24:c5:95:fa:65:34:9f:6a:cf: da:f6:63:57:49:ab:c7:94:74:65:0f:ad:d6:75:dc:da:79:77: 1c:c0:6c:4c:c8:fe:e5:93:59:59:5c:27:43:fc:2f:d8:5a:49: bc:bc:af:2b:05:33:11:89:28:99:e3:34:0d:c0:25:7a:72:4b: 37:89:84:9e:ba:db:9c:f4:51:a6:f3:fd:22:77:f5:c3:42:34: 5d:16:2c:11:36:41:c3:5b:38:7d:2c:8e:15:fa:ed:ab:4c:44: 9a:a6:49:ca:c9:cb:0a:dd:84:d1:20:05:23:cf:74:a2:cc:5a: 5c:c7:1a:a9:f2:14:e6:b7:1f:5f:75:4e:cb:5c:c1:16:79:89: c3:63:5d:65:5f:b5:03:6d:f9:ae:55:ff:79:f5:1d:69:99:a3: 53:88:8a:e8:ff:dd:1e:5f:75:35:5b:8e:ec:46:01:b2:fa:39: 53:d8:75:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrbClx8gB5C2jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MTAwMzA1NTctOGQ0NS00MzFiLTgwYjgtYzdmMjRkNjMyZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPsiUZfGuHouktO7B1gNbkJOob6/gGCidvPj V4CmPDugiNbAiqbTHCDLOAmRSVTzdlHbLfMfAlzIwLZIxr5Q/Iz0BOnH2ScTNS9B URTG2+Zgg7LMsdECovjAvRIHZ7+ZoTRqExrDxiusZDG1PhLIHKJl0p8Gbnsg0ZWM hJeNtRcR0kTZO0VZ92r4jf3m6ETEzF7iNVKgB5JCUCrXkXLAHm4cgZuE1od0qQn6 XwhFwSzPMjvhacPm20QRNbLTm3WxdLbyZyFzZmU6sLp3UPUHLkoXpi+eJ6O8sYMc 996bFH8i2yaRq/qUC8GYVOj9QIPx6zjx40I2bf9+iKNfiRoJIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBG/kjdXOmhUj9f1ED6wcb6HT9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTllYWM1NDgtYzA1My0z NjE0LTk1ZjEtZWE2YjQ5N2FjZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4DnaJkunT1ye6Yzz2wc8+HrHNvpPczgnqLbksUztFmhwb/DjyDs61P JJlUlHaR8Gw90bF7L8va6syt/b8xf+bx7ZYTyr/iHZbrMbUPl2/9KiTFlfplNJ9q z9r2Y1dJq8eUdGUPrdZ13Np5dxzAbEzI/uWTWVlcJ0P8L9haSby8rysFMxGJKJnj NA3AJXpySzeJhJ6625z0Uabz/SJ39cNCNF0WLBE2QcNbOH0sjhX67atMRJqmScrJ ywrdhNEgBSPPdKLMWlzHGqnyFOa3H191TstcwRZ5icNjXWVftQNt+a5V/3n1HWmZ o1OIiuj/3R5fdTVbjuxGAbL6OVPYdQA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:14 2025 by rpki-client