$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b779878a-b76e-38f9-a607-a8fc9dc7d8af.roa File: b779878a-b76e-38f9-a607-a8fc9dc7d8af.roa (raw, json) Hash identifier: kauHMDLuiVQqWiu2SedLy5JHn004rPL3CB13FyDF0yE= Subject key identifier: AC:27:97:7B:18:6C:8A:E1:A5:E8:A0:11:34:9A:04:AD:4A:71:83:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964846E0255E0623A2CAC7980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b779878a-b76e-38f9-a607-a8fc9dc7d8af.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.53.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6e:02:55:e0:62:3a:2c:ac:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=60e65b1a-77d3-4446-af8c-d30997bb7c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:96:d6:26:01:ce:98:5b:fd:6e:8b:d2:d9: a2:e9:df:cf:26:5a:41:8c:3f:70:bc:4b:94:c2:18: 08:b9:46:e1:2b:dd:6b:d0:00:0f:2b:7a:04:af:7c: 10:c8:e2:96:ef:44:e9:04:49:c5:35:6e:af:7c:65: e1:55:f3:d3:18:1c:3c:05:24:04:55:1b:ef:fd:e6: 0e:45:c5:24:1b:da:79:fa:f1:36:25:83:80:10:ec: aa:4c:40:c9:32:3f:7f:dc:97:a8:0a:4d:69:03:d6: 4a:fd:5e:15:ca:7d:27:4b:ef:e9:9c:9d:ed:e3:88: 4b:bb:67:86:d0:99:40:22:e0:47:de:02:36:6f:aa: cf:f7:cd:ae:3f:8a:95:e3:7c:3b:45:2b:bf:fe:33: 84:2b:f0:56:93:ff:b7:62:d4:a3:b1:ca:f8:62:47: 99:77:ed:d4:87:4d:ec:b3:50:52:17:84:11:1b:82: 63:73:68:28:76:1b:92:da:4a:da:37:42:92:fb:8b: 71:e3:ec:07:4c:85:5f:83:36:02:e7:7f:a7:57:25: 8a:d3:2f:7d:ea:fe:77:8b:fa:b1:60:d2:6a:85:5e: 64:f9:fa:b8:24:f2:17:1d:ad:37:33:47:cc:2e:cf: 07:44:12:7e:a0:e6:14:21:c1:47:db:a4:a7:80:cb: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:27:97:7B:18:6C:8A:E1:A5:E8:A0:11:34:9A:04:AD:4A:71:83:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b779878a-b76e-38f9-a607-a8fc9dc7d8af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d1:04:53:7b:bb:b4:b4:6b:03:48:ef:9f:16:ac:82:d7:af: 60:bc:73:df:ed:9b:32:f8:be:cb:63:5e:a5:27:e8:1b:6b:a6: 51:e4:84:57:c5:59:91:13:05:79:94:43:ce:da:eb:67:e4:aa: 23:0c:6c:c0:b2:27:af:b3:cd:cf:f8:a2:03:d1:15:79:d7:7b: 47:9c:f3:ca:00:6e:b1:90:71:fd:af:57:07:22:1b:af:6d:35: 6b:7c:cd:a1:1e:a7:5c:25:73:84:95:db:09:c3:4f:0c:4b:b2: 55:74:c8:2f:7b:03:a1:a0:b6:bd:a4:6d:00:09:5f:5b:2c:c6: 9e:e8:da:ea:55:82:91:9c:9a:79:74:7b:ab:62:28:04:09:01: 2e:78:53:38:cb:0f:77:59:e9:57:0f:cc:8f:7c:37:ac:e0:0a: 4e:5c:35:98:16:79:3f:da:ee:7f:3d:08:1a:ac:46:ee:1e:85: d2:22:34:f8:ce:6c:7e:40:3e:11:91:50:da:79:21:96:c8:33: 63:31:2e:ec:ce:d1:b4:39:a6:53:7a:73:10:94:ec:5a:7e:9b: 82:2a:c9:46:06:18:ad:ba:ff:1a:24:36:f6:c3:e4:bf:69:46: ff:a2:8f:6d:3f:f0:ad:da:6f:9f:cc:2d:66:f4:0c:e1:f2:43: 61:fd:a3:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhG4CVeBiOiyseYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NjBlNjViMWEtNzdkMy00NDQ2LWFmOGMtZDMwOTk3YmI3YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi+W1iYBzphb/W6L0tmi6d/PJlpBjD9wvEuU whgIuUbhK91r0AAPK3oEr3wQyOKW70TpBEnFNW6vfGXhVfPTGBw8BSQEVRvv/eYO RcUkG9p5+vE2JYOAEOyqTEDJMj9/3JeoCk1pA9ZK/V4Vyn0nS+/pnJ3t44hLu2eG 0JlAIuBH3gI2b6rP982uP4qV43w7RSu//jOEK/BWk/+3YtSjscr4YkeZd+3Uh03s s1BSF4QRG4Jjc2godhuS2kraN0KS+4tx4+wHTIVfgzYC53+nVyWK0y996v53i/qx YNJqhV5k+fq4JPIXHa03M0fMLs8HRBJ+oOYUIcFH26SngMv9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwnl3sYbIrhpeigETSaBK1KcYMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjc3OTg3OGEtYjc2ZS0z OGY5LWE2MDctYThmYzlkYzdkOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATRBFN7u7S0awNI758WrILXr2C8c9/tmzL4vstjXqUn6BtrplHkhFfF WZETBXmUQ87a62fkqiMMbMCyJ6+zzc/4ogPRFXnXe0ec88oAbrGQcf2vVwciG69t NWt8zaEep1wlc4SV2wnDTwxLslV0yC97A6Ggtr2kbQAJX1ssxp7o2upVgpGcmnl0 e6tiKAQJAS54UzjLD3dZ6VcPzI98N6zgCk5cNZgWeT/a7n89CBqsRu4ehdIiNPjO bH5APhGRUNp5IZbIM2MxLuzO0bQ5plN6cxCU7Fp+m4IqyUYGGK26/xokNvbD5L9p Rv+ij20/8K3ab5/MLWb0DOHyQ2H9owM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:32 2025 by rpki-client