$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f359787-d3a7-3a15-9d19-b4b945d2bf32.roa File: 9f359787-d3a7-3a15-9d19-b4b945d2bf32.roa (raw, json) Hash identifier: 1negCPlrd9VZGrS+r9Nx5PXT1qtzwHsNgq3bQHzQAwc= Subject key identifier: D6:30:6D:C4:46:25:64:87:46:57:F6:FD:59:DE:62:31:9E:AD:12:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6F0193BF361EE880D7AA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f359787-d3a7-3a15-9d19-b4b945d2bf32.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.76.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:f0:19:3b:f3:61:ee:88:0d:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=ec84c7ac-1dce-44a9-80f0-4aca40099b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:49:04:e8:db:a6:ca:31:00:bd:9b:cb:81:19: a8:8d:d0:f7:8d:8b:be:4f:d0:c0:3a:63:41:f9:9a: 75:c3:8f:37:5b:f3:ea:af:1a:46:5f:91:52:0f:dc: b9:df:64:0b:f2:5a:c9:1d:35:15:bc:f4:df:ae:67: 28:6f:d1:36:5f:50:e2:74:08:03:24:b5:df:5f:20: ef:3d:83:1e:80:49:64:31:13:89:df:c1:7e:a2:04: db:89:ba:b7:a9:00:56:c1:ed:1f:ab:ed:0d:52:b9: e4:26:be:f7:84:30:6f:f7:1c:f3:be:71:a0:0d:f2: 67:dd:d2:e2:0d:fe:ec:09:9a:b1:6a:a9:7e:2e:fb: c9:5e:5b:7c:5f:13:ff:71:8a:ef:90:ca:7c:77:7d: 89:ae:26:45:37:2f:fb:3f:0d:e0:97:fb:17:6a:64: ae:90:27:16:a9:b4:6c:01:a2:7d:0a:a0:f2:15:84: 8d:a8:6e:06:34:0a:ea:d5:cb:38:8d:65:69:0b:31: ae:36:4a:af:c2:94:b1:7d:73:67:1a:0a:a9:5f:1c: 73:dd:ab:85:6c:2f:d3:30:a7:8f:7d:1c:ef:b0:f7: bf:ec:c5:89:8d:2e:1c:e9:bc:df:b4:77:74:b0:87: c7:bc:3b:cf:91:bf:d3:80:e3:4c:3a:c8:d5:a8:75: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:6D:C4:46:25:64:87:46:57:F6:FD:59:DE:62:31:9E:AD:12:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f359787-d3a7-3a15-9d19-b4b945d2bf32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:38:da:e8:b2:09:3a:46:68:d1:b7:11:06:df:40:a2:ed:5f: 0d:60:eb:26:22:c4:ff:c8:9d:f8:74:c8:a0:7b:a3:a7:13:43: fa:2c:68:92:e2:a8:0e:91:e6:99:84:fd:77:07:26:9d:0f:42: ff:b6:ff:b5:e0:7f:6c:9c:5f:18:4b:66:ec:2c:ef:f2:82:68: 6a:b7:4e:8d:a5:41:f2:25:db:ff:c4:98:97:19:34:bf:bc:38: 28:d4:f4:17:24:d1:ea:93:74:07:79:0a:9c:4a:c3:ea:d1:7b: af:a4:ca:fd:72:56:a5:12:8c:13:24:29:8e:43:34:28:bf:fa: 7d:da:f2:f3:d0:03:b5:5c:26:68:1a:4e:a9:54:28:a5:7f:1e: 20:43:56:b7:9a:f3:11:d0:bc:04:9b:ac:eb:99:1c:74:fd:56: be:ba:f4:af:67:67:1b:3c:e7:f6:4f:98:08:ec:91:fb:3a:37: bc:12:ba:af:1b:84:2e:ec:77:b2:06:99:41:6d:ef:40:3b:33: ac:5e:cd:2d:8b:0c:86:da:e3:ea:9b:2b:13:3b:58:52:da:59: 03:b9:bf:cd:57:0e:28:c5:84:4e:09:cd:ab:ed:db:e4:04:36: 33:b6:5e:a6:4a:b2:22:47:db:77:90:01:3d:08:b4:c8:cd:4d: 6a:f1:2d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1vAZO/Nh7ogNeqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZWM4NGM3YWMtMWRjZS00NGE5LTgwZjAtNGFjYTQwMDk5YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEkE6NumyjEAvZvLgRmojdD3jYu+T9DAOmNB +Zp1w483W/PqrxpGX5FSD9y532QL8lrJHTUVvPTfrmcob9E2X1DidAgDJLXfXyDv PYMegElkMROJ38F+ogTbibq3qQBWwe0fq+0NUrnkJr73hDBv9xzzvnGgDfJn3dLi Df7sCZqxaql+LvvJXlt8XxP/cYrvkMp8d32JriZFNy/7Pw3gl/sXamSukCcWqbRs AaJ9CqDyFYSNqG4GNArq1cs4jWVpCzGuNkqvwpSxfXNnGgqpXxxz3auFbC/TMKeP fRzvsPe/7MWJjS4c6bzftHd0sIfHvDvPkb/TgONMOsjVqHVKdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYwbcRGJWSHRlf2/VneYjGerRIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWYzNTk3ODctZDNhNy0z YTE1LTlkMTktYjRiOTQ1ZDJiZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC842uiyCTpGaNG3EQbfQKLtXw1g6yYixP/Infh0yKB7o6cTQ/osaJLi qA6R5pmE/XcHJp0PQv+2/7Xgf2ycXxhLZuws7/KCaGq3To2lQfIl2//EmJcZNL+8 OCjU9Bck0eqTdAd5CpxKw+rRe6+kyv1yVqUSjBMkKY5DNCi/+n3a8vPQA7VcJmga TqlUKKV/HiBDVrea8xHQvASbrOuZHHT9Vr669K9nZxs85/ZPmAjskfs6N7wSuq8b hC7sd7IGmUFt70A7M6xezS2LDIba4+qbKxM7WFLaWQO5v81XDijFhE4Jzavt2+QE NjO2XqZKsiJH23eQAT0ItMjNTWrxLZE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:13 2025 by rpki-client