$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a674baaa-f971-3a33-80ec-35909dc3a986.roa File: a674baaa-f971-3a33-80ec-35909dc3a986.roa (raw, json) Hash identifier: 0X8hLp0kwTUTd7uXwmEyHh3LNL8GaLFElYH9KxNTp4A= Subject key identifier: 6B:D4:79:65:6C:78:1E:AF:2C:C8:BD:11:10:E0:82:A9:3F:6B:2B:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC0CE8ACC0408901BE6680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a674baaa-f971-3a33-80ec-35909dc3a986.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 35994 IP address blocks: 23.54.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0c:e8:ac:c0:40:89:01:be:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bc143a05-76e5-4914-8489-96e738a903e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:a3:ed:85:8f:8b:38:2b:2d:37:bd:4d:b7: ac:7f:7c:e0:00:2c:83:c0:2c:17:3e:6c:72:74:e3: 97:d3:85:42:44:fe:d4:36:41:2c:74:79:3b:50:8d: 0d:a5:87:13:d3:ea:68:60:18:20:4b:6e:ef:f5:c3: 0e:bc:14:44:43:f6:36:5c:4d:97:29:aa:ed:5a:f5: 88:08:ce:d7:ea:92:97:f0:73:00:4e:64:ba:ca:a5: 77:25:03:43:4c:ed:22:30:53:5f:c1:a1:1a:7c:4c: 62:56:a5:ac:49:32:84:40:91:6b:bd:45:23:29:e1: 0d:d9:f0:0e:83:ba:df:44:b0:09:d0:94:7b:b7:43: 45:c0:40:ac:bb:65:77:84:e5:76:87:9f:83:81:7a: 52:81:ed:9e:79:05:43:05:99:02:64:bc:6f:39:2d: 14:5d:ab:55:d6:6f:0b:a9:a1:f1:d4:d6:53:8a:2b: 62:b8:a0:13:e6:63:3c:a3:33:3c:28:58:aa:69:11: 03:2c:4b:4e:f2:a4:0e:93:2b:d7:e5:53:7a:5b:35: a5:5e:5e:9e:b1:80:0d:5c:03:db:ce:6d:4f:44:93: 59:8e:1b:58:d8:5e:87:23:d8:e5:b6:73:0a:e6:88: 1a:02:59:35:7d:15:49:b3:47:87:b3:d8:60:38:81: df:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:79:65:6C:78:1E:AF:2C:C8:BD:11:10:E0:82:A9:3F:6B:2B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a674baaa-f971-3a33-80ec-35909dc3a986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:48:31:e3:da:46:2e:3e:c4:61:5b:2b:d9:88:3f:aa:40:a0: 89:42:92:ea:90:7e:75:7c:85:ab:ea:2c:d1:e2:80:42:10:96: 41:b5:19:7a:13:47:8a:e9:0f:0e:05:15:0d:84:ae:83:1b:31: 68:fe:e2:41:17:53:7d:42:b9:a4:fa:9f:a5:b6:9b:19:ac:ea: 18:b9:6b:f0:bc:77:44:b2:4c:ad:44:a7:7e:8c:93:f0:ec:49: a7:c5:d5:55:d0:d0:97:d9:7c:6f:2c:0f:80:48:9b:e4:e6:0b: 00:e6:f3:6f:06:c8:18:03:f8:f0:c9:33:85:80:54:59:72:aa: 61:d4:b4:70:31:88:2d:8f:d8:28:69:ed:d9:a6:ad:77:73:12: 47:5c:86:b6:a4:20:da:55:40:0e:cb:5f:05:a1:c2:e7:14:48: 2e:dc:7f:a0:5f:49:39:0a:e5:e2:7c:de:9a:16:21:df:dd:67: 04:07:67:f7:7b:3a:14:af:dd:b8:21:80:ca:bb:51:bc:11:ac: c1:4e:01:28:72:27:c5:f0:27:cb:e9:52:53:42:07:b6:fa:e5: e6:08:3e:92:fa:33:94:60:61:dd:d8:8b:87:89:f1:2a:a6:3e: dd:35:47:bf:e7:2c:83:cf:9a:2d:b9:10:5f:3a:4c:2f:e4:a2: 92:5a:14:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AzorMBAiQG+ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmMxNDNhMDUtNzZlNS00OTE0LTg0ODktOTZlNzM4YTkwM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFuj7YWPizgrLTe9Tbesf3zgACyDwCwXPmxy dOOX04VCRP7UNkEsdHk7UI0NpYcT0+poYBggS27v9cMOvBREQ/Y2XE2XKartWvWI CM7X6pKX8HMATmS6yqV3JQNDTO0iMFNfwaEafExiVqWsSTKEQJFrvUUjKeEN2fAO g7rfRLAJ0JR7t0NFwECsu2V3hOV2h5+DgXpSge2eeQVDBZkCZLxvOS0UXatV1m8L qaHx1NZTiitiuKAT5mM8ozM8KFiqaREDLEtO8qQOkyvX5VN6WzWlXl6esYANXAPb zm1PRJNZjhtY2F6HI9jltnMK5ogaAlk1fRVJs0eHs9hgOIHfowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvUeWVseB6vLMi9ERDggqk/ays5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY3NGJhYWEtZjk3MS0z YTMzLTgwZWMtMzU5MDlkYzNhOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVIMePaRi4+xGFbK9mIP6pAoIlCkuqQfnV8havqLNHigEIQlkG1GXoT R4rpDw4FFQ2EroMbMWj+4kEXU31CuaT6n6W2mxms6hi5a/C8d0SyTK1Ep36Mk/Ds SafF1VXQ0JfZfG8sD4BIm+TmCwDm828GyBgD+PDJM4WAVFlyqmHUtHAxiC2P2Chp 7dmmrXdzEkdchrakINpVQA7LXwWhwucUSC7cf6BfSTkK5eJ83poWId/dZwQHZ/d7 OhSv3bghgMq7UbwRrMFOAShyJ8XwJ8vpUlNCB7b65eYIPpL6M5RgYd3Yi4eJ8Sqm Pt01R7/nLIPPmi25EF86TC/kopJaFIs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:35 2025 by rpki-client