$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/add2eacf-b253-36fb-9b86-273a0c99fe91.roa File: add2eacf-b253-36fb-9b86-273a0c99fe91.roa (raw, json) Hash identifier: 6hMkCQsC7iRJBFBvZU3Aph0j7IIXOt6exXE2xLS+o4w= Subject key identifier: D8:74:37:77:38:97:22:A6:6E:3E:D6:5E:B1:7F:41:C0:40:C7:FC:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5F7776A043616257F380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/add2eacf-b253-36fb-9b86-273a0c99fe91.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.59.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5f:77:76:a0:43:61:62:57:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=5b43ebeb-a85a-4eb1-a2ac-f43de983b1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7c:f1:02:b0:e1:68:35:60:39:41:df:45:0a: ac:0e:8b:cf:18:a4:10:62:1c:4a:48:88:3e:24:92: 8f:16:eb:3e:11:83:ce:83:c6:91:64:d6:13:d6:74: 31:95:d9:55:1c:3f:c9:b7:89:d1:a8:9e:92:07:69: 36:07:32:3c:0b:0e:a4:17:1f:d3:b8:af:45:f4:1e: 56:b2:d9:83:a5:5b:16:29:e5:ca:bf:07:fe:28:39: 37:64:c9:9d:54:f0:b3:02:3e:79:0f:b0:8c:de:50: 53:e5:5d:64:70:73:51:1e:9b:67:0c:0b:f0:4a:4e: fb:82:6c:3d:c7:a7:a0:62:d6:a0:64:bb:7f:47:e0: e2:e1:e5:3e:b4:5c:42:99:9f:cd:65:0b:a7:71:7c: 5b:0b:86:fd:4c:66:c5:6d:e5:b7:e7:9b:ea:ce:85: 2e:2d:f9:bb:95:eb:ed:f8:0f:64:4d:be:95:e2:a3: 8a:70:fb:3b:8d:1d:40:1b:09:4c:8b:7e:97:e6:e2: 2f:98:99:fc:d6:9d:4b:f8:70:f0:88:0c:8f:9e:c9: 8d:19:85:8e:9c:c0:3c:94:2f:d3:e9:00:3b:2c:33: 4e:78:e2:1f:a3:ce:b0:d0:b1:16:bc:2b:33:9b:24: 31:36:c3:b7:f7:23:da:05:b2:05:05:24:62:d5:d8: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:37:77:38:97:22:A6:6E:3E:D6:5E:B1:7F:41:C0:40:C7:FC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/add2eacf-b253-36fb-9b86-273a0c99fe91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1b:9b:38:d5:53:9b:be:8d:20:b5:ca:5b:e2:75:5c:49:73: df:75:54:81:21:6c:6b:48:d1:78:6d:77:1e:d1:db:6d:e6:b6: 32:a9:f8:c1:70:4b:5a:5d:ad:5f:b2:4c:f2:b4:55:7c:82:93: 61:70:59:70:99:e4:66:38:7b:cd:11:d1:0a:a7:7e:ef:17:9f: 33:d4:38:0b:6f:84:92:4c:70:80:4b:b6:7b:02:f7:dc:dd:80: f0:f4:a3:bf:fe:66:c6:e3:09:d6:2d:03:bd:6e:4b:01:f3:95: 96:2f:44:6b:32:71:a7:81:f6:bd:74:6f:5b:f4:df:7f:69:9f: da:f8:21:9f:dc:a6:ba:92:3f:52:1f:f1:b6:08:00:c5:5d:23: 02:d9:e3:12:6c:a8:c9:12:85:7d:03:5f:47:77:9d:91:0d:83: 65:e8:07:98:e1:62:d1:a6:99:b0:30:0a:70:1b:7c:3b:09:9e: 34:7e:70:89:2d:b8:92:3a:fd:ea:6b:27:dd:b3:05:ee:c7:dc: 49:6d:71:7d:0a:31:27:8f:c0:c8:8f:d4:f8:56:75:45:21:1f: 75:dd:53:6a:7b:a6:d7:fa:b5:aa:11:c6:fe:ed:8f:26:64:a6: 9e:9e:ea:68:5e:0b:c9:17:b6:4e:ab:ae:a5:1d:7f:8f:42:52: da:f6:41:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq193dqBDYWJX84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk NWI0M2ViZWItYTg1YS00ZWIxLWEyYWMtZjQzZGU5ODNiMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXzxArDhaDVgOUHfRQqsDovPGKQQYhxKSIg+ JJKPFus+EYPOg8aRZNYT1nQxldlVHD/Jt4nRqJ6SB2k2BzI8Cw6kFx/TuK9F9B5W stmDpVsWKeXKvwf+KDk3ZMmdVPCzAj55D7CM3lBT5V1kcHNRHptnDAvwSk77gmw9 x6egYtagZLt/R+Di4eU+tFxCmZ/NZQuncXxbC4b9TGbFbeW355vqzoUuLfm7levt +A9kTb6V4qOKcPs7jR1AGwlMi36X5uIvmJn81p1L+HDwiAyPnsmNGYWOnMA8lC/T 6QA7LDNOeOIfo86w0LEWvCszmyQxNsO39yPaBbIFBSRi1distQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh0N3c4lyKmbj7WXrF/QcBAx/yjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWRkMmVhY2YtYjI1My0z NmZiLTliODYtMjczYTBjOTlmZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFztEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkbmzjVU5u+jSC1ylvidVxJc991VIEhbGtI0Xhtdx7R223mtjKp+MFw S1pdrV+yTPK0VXyCk2FwWXCZ5GY4e80R0Qqnfu8XnzPUOAtvhJJMcIBLtnsC99zd gPD0o7/+ZsbjCdYtA71uSwHzlZYvRGsycaeB9r10b1v0339pn9r4IZ/cprqSP1If 8bYIAMVdIwLZ4xJsqMkShX0DX0d3nZENg2XoB5jhYtGmmbAwCnAbfDsJnjR+cIkt uJI6/eprJ92zBe7H3EltcX0KMSePwMiP1PhWdUUhH3XdU2p7ptf6taoRxv7tjyZk pp6e6mheC8kXtk6rrqUdf49CUtr2QR4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:50 2025 by rpki-client