$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8031d3b-1e9c-3ffe-9ed3-05124ec70175.roa File: a8031d3b-1e9c-3ffe-9ed3-05124ec70175.roa (raw, json) Hash identifier: FcXeIGiAri93jq1sHZqaXONW7yKHI+cKmFOQxIxaGVA= Subject key identifier: 77:C9:81:3A:F7:1B:B7:C9:D4:D7:8B:E6:F1:22:E8:76:A1:B4:F6:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB59F826399B31757E6D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8031d3b-1e9c-3ffe-9ed3-05124ec70175.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.55.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:59:f8:26:39:9b:31:75:7e:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=6aea6066-7b00-4bab-8f90-3cb9b04fa42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:3f:e8:d3:db:21:2d:ef:c3:cd:a0:46:db: a7:f1:68:af:e8:a2:ab:8f:50:70:4b:63:61:db:66: ce:26:bb:8a:63:4a:b6:21:54:c6:e6:81:b6:fb:08: 37:80:fd:1d:34:f8:00:cf:0c:5e:e0:35:12:c9:7e: 98:89:cc:31:c5:d1:8e:1e:63:c9:f9:9f:5b:7b:4e: cc:aa:78:55:dc:bb:45:8a:99:6f:d8:9d:e6:d5:90: 6d:4b:d1:3f:f7:48:0a:10:e2:73:74:4a:29:89:80: 3c:d3:23:88:48:46:1e:4b:9b:8b:e2:00:bc:d6:27: 84:33:08:b5:7d:cf:fd:58:c7:67:ad:ab:b0:e4:82: ce:f9:bb:57:2b:f1:48:3a:17:91:ac:b5:81:af:b6: 28:b7:3c:0d:d7:52:10:53:d1:6d:f1:fe:1f:8e:b2: 1b:aa:66:ad:22:4f:16:ff:61:31:f8:e7:cd:50:8e: b6:f4:44:71:23:f7:e5:6a:86:83:dd:0b:13:9b:65: 4e:30:f4:66:9d:c5:c9:60:b2:77:c7:67:49:75:18: 5e:11:b3:c6:17:99:bc:ef:7d:1b:5e:da:6e:2b:5f: 30:a5:44:71:9b:7b:91:a7:b9:5b:ea:e5:9e:f6:0e: 12:c1:4b:19:a6:8c:6d:e9:9f:c0:b8:4e:6c:02:54: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C9:81:3A:F7:1B:B7:C9:D4:D7:8B:E6:F1:22:E8:76:A1:B4:F6:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8031d3b-1e9c-3ffe-9ed3-05124ec70175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9d:66:68:8b:54:3d:7c:d6:55:5c:87:87:98:1f:ab:49:37: 10:8e:11:39:44:c0:c3:e7:98:d9:6e:f1:81:76:3c:81:e5:78: 33:5b:c1:c6:b8:4b:16:7d:b9:81:b8:a8:02:04:7c:58:5e:c5: 10:62:5b:a1:73:99:3b:d9:a2:01:77:90:02:fc:fa:5f:b8:02: 2c:ef:ce:89:5d:6f:9f:fa:f5:db:25:3b:1b:70:36:79:53:30: b9:96:38:43:fe:b2:b9:49:f0:a3:36:dd:41:e5:00:53:4d:18: 16:bb:0b:09:19:17:d0:8b:b0:57:67:11:d1:43:75:62:91:8f: f5:69:0a:a6:dc:08:5d:90:33:b1:9a:13:0b:c1:07:03:62:91: b8:26:0e:90:7a:f1:6d:2b:5f:3e:40:00:47:3d:6f:68:7b:b4: 7f:1a:bb:34:80:57:3e:e1:c6:94:3b:a4:ae:2b:7d:9c:77:be: 78:13:61:3a:83:a1:ee:a5:ac:50:78:5f:68:d4:e1:71:bf:f0: 6c:89:a6:73:48:62:63:a6:40:1a:7e:3c:99:fd:86:c2:a6:c1: 02:30:05:bf:dc:70:39:30:9a:4b:dd:17:6a:61:23:18:5e:d2: c3:19:19:f5:1e:a7:c7:1e:3e:10:b7:70:04:7f:5a:1c:9e:7e: bf:83:9b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1n4JjmbMXV+bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk NmFlYTYwNjYtN2IwMC00YmFiLThmOTAtM2NiOWIwNGZhNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlI/6NPbIS3vw82gRtun8Wiv6KKrj1BwS2Nh 22bOJruKY0q2IVTG5oG2+wg3gP0dNPgAzwxe4DUSyX6YicwxxdGOHmPJ+Z9be07M qnhV3LtFiplv2J3m1ZBtS9E/90gKEOJzdEopiYA80yOISEYeS5uL4gC81ieEMwi1 fc/9WMdnrauw5ILO+btXK/FIOheRrLWBr7YotzwN11IQU9Ft8f4fjrIbqmatIk8W /2Ex+OfNUI629ERxI/flaoaD3QsTm2VOMPRmncXJYLJ3x2dJdRheEbPGF5m8730b XtpuK18wpURxm3uRp7lb6uWe9g4SwUsZpoxt6Z/AuE5sAlQSkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfJgTr3G7fJ1NeL5vEi6HahtPajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgwMzFkM2ItMWU5Yy0z ZmZlLTllZDMtMDUxMjRlYzcwMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGdZmiLVD181lVch4eYH6tJNxCOETlEwMPnmNlu8YF2PIHleDNbwca4 SxZ9uYG4qAIEfFhexRBiW6FzmTvZogF3kAL8+l+4Aizvzoldb5/69dslOxtwNnlT MLmWOEP+srlJ8KM23UHlAFNNGBa7CwkZF9CLsFdnEdFDdWKRj/VpCqbcCF2QM7Ga EwvBBwNikbgmDpB68W0rXz5AAEc9b2h7tH8auzSAVz7hxpQ7pK4rfZx3vngTYTqD oe6lrFB4X2jU4XG/8GyJpnNIYmOmQBp+PJn9hsKmwQIwBb/ccDkwmkvdF2phIxhe 0sMZGfUep8cePhC3cAR/Whyefr+Dm2I= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:47 2025 by rpki-client