$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2beb10-f824-33ed-acd4-a3599b4fd987.roa File: ba2beb10-f824-33ed-acd4-a3599b4fd987.roa (raw, json) Hash identifier: 1LQufzCJGB+px0X1qoO0HkPcZ38FCW9GqOJNnLDO6NA= Subject key identifier: DB:CD:E4:DA:5E:F5:3D:23:53:DC:A1:9A:C4:26:A0:D2:52:A2:48:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247D9CEFF9093660305600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2beb10-f824-33ed-acd4-a3599b4fd987.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.44.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7d:9c:ef:f9:09:36:60:30:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=1e284d43-995a-4ecc-9801-0645cb223cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:14:c6:ae:5f:a0:9e:c4:46:cc:19:d6:73: f8:e8:ec:d5:60:e0:aa:3f:8e:21:23:6c:6d:a8:cb: 88:6d:34:31:b9:a5:36:1f:68:16:23:22:c3:99:35: 6c:24:83:f3:9e:47:00:e6:70:f2:d7:6e:c0:1d:23: 0f:d7:7a:3c:d3:53:9f:4a:a0:f6:24:7d:40:12:bf: e1:50:e6:41:dc:00:7e:34:e5:df:03:8b:f8:97:1a: 51:7b:c9:99:0e:3b:10:41:1b:ec:4c:5f:eb:4e:a6: 3f:3a:ed:ad:a7:d7:6b:f9:c1:bb:b7:f7:8d:a3:e0: ab:76:2d:de:fb:b8:f3:1f:19:43:cc:3c:94:4d:2a: c6:fb:d6:8e:9f:c1:46:2c:52:7c:a9:a1:b3:32:9d: 06:a3:a0:a3:f5:7c:d8:22:8f:d8:c8:77:06:b5:95: ee:e0:c6:78:c1:88:a2:c4:33:21:6d:8a:16:cc:43: 46:33:dc:63:e2:ff:54:5f:70:90:3f:d1:ba:35:d7: a7:7a:e7:5e:cc:47:15:c2:33:69:18:b6:3a:90:f2: 92:72:a6:1b:b3:7a:33:0f:ee:6f:03:f4:42:50:de: d1:7d:4e:94:6c:f0:93:9b:90:90:78:3e:af:03:66: ca:6e:b9:49:3e:f3:c4:85:ea:42:ca:17:ca:c0:6c: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CD:E4:DA:5E:F5:3D:23:53:DC:A1:9A:C4:26:A0:D2:52:A2:48:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2beb10-f824-33ed-acd4-a3599b4fd987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:21:b0:93:d9:56:90:9d:93:92:09:d5:55:2e:62:8a:17:02: 6b:69:72:22:5d:c4:24:80:0d:c1:fc:0c:99:d7:a2:76:eb:4b: cb:2f:9b:77:3e:68:1a:4e:d2:8c:cc:8c:62:0d:fe:94:d6:b7: 87:f2:9f:29:8b:04:62:e1:80:a8:df:ec:a9:b5:44:93:fc:fe: da:27:f3:79:26:7e:53:0d:1d:b0:37:9f:09:9a:a7:61:25:dc: a2:4f:bf:e8:b4:62:bf:4f:e7:f3:fb:12:5a:f0:f6:f2:97:3f: 42:c1:1f:04:49:ff:0a:93:df:0c:03:1f:d2:48:3c:19:00:d0: c1:94:2b:dd:3c:df:61:5c:51:68:6b:51:0c:1a:f0:7b:46:dc: 45:91:d2:40:19:20:d5:05:50:c5:9f:9c:42:a7:8a:fe:d1:d2: 8f:7d:80:ad:09:67:71:1b:fe:6e:fe:13:fc:60:13:84:ef:f1: 81:87:25:09:9d:aa:46:2b:22:f8:a9:bb:88:b4:a1:de:68:6e: e5:c2:4d:e0:e1:5d:1b:33:26:1d:36:cd:e4:65:e4:81:d1:7e: 26:c3:11:d3:1d:fa:66:9d:1a:d7:c3:58:c8:8b:bd:a7:f1:3f: 59:23:13:e1:be:87:49:f4:05:fb:72:c0:5f:87:d6:7c:d8:11: ae:c5:5d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJH2c7/kJNmAwVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MWUyODRkNDMtOTk1YS00ZWNjLTk4MDEtMDY0NWNiMjIzY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSMUxq5foJ7ERswZ1nP46OzVYOCqP44hI2xt qMuIbTQxuaU2H2gWIyLDmTVsJIPznkcA5nDy127AHSMP13o801OfSqD2JH1AEr/h UOZB3AB+NOXfA4v4lxpRe8mZDjsQQRvsTF/rTqY/Ou2tp9dr+cG7t/eNo+Crdi3e +7jzHxlDzDyUTSrG+9aOn8FGLFJ8qaGzMp0Go6Cj9XzYIo/YyHcGtZXu4MZ4wYii xDMhbYoWzENGM9xj4v9UX3CQP9G6NdeneudezEcVwjNpGLY6kPKScqYbs3ozD+5v A/RCUN7RfU6UbPCTm5CQeD6vA2bKbrlJPvPEhepCyhfKwGwn3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvN5Npe9T0jU9yhmsQmoNJSokiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmEyYmViMTAtZjgyNC0z M2VkLWFjZDQtYTM1OTliNGZkOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEhsJPZVpCdk5IJ1VUuYooXAmtpciJdxCSADcH8DJnXonbrS8svm3c+ aBpO0ozMjGIN/pTWt4fynymLBGLhgKjf7Km1RJP8/ton83kmflMNHbA3nwmap2El 3KJPv+i0Yr9P5/P7Elrw9vKXP0LBHwRJ/wqT3wwDH9JIPBkA0MGUK90832FcUWhr UQwa8HtG3EWR0kAZINUFUMWfnEKniv7R0o99gK0JZ3Eb/m7+E/xgE4Tv8YGHJQmd qkYrIvipu4i0od5obuXCTeDhXRszJh02zeRl5IHRfibDEdMd+madGtfDWMiLvafx P1kjE+G+h0n0BftywF+H1nzYEa7FXd0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:01 2025 by rpki-client