$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5285f77-8997-3052-9baf-3a3b2922d5eb.roa File: c5285f77-8997-3052-9baf-3a3b2922d5eb.roa (raw, json) Hash identifier: AN2UNTJhAkv4OyXn95EyFDTzKz9rUTiBjTWyNF+1QAI= Subject key identifier: F1:A7:FA:32:8B:59:8C:FB:5D:99:AC:AF:4B:3E:C1:47:45:CC:FA:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5B4E3D3749DBB6041580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5285f77-8997-3052-9baf-3a3b2922d5eb.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.56.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:5b:4e:3d:37:49:db:b6:04:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=185731bb-cdfe-4a63-9dac-a086e41156fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:56:72:ca:28:a8:df:22:98:b1:5b:20:5d: 7b:9f:ee:c7:50:e2:60:74:f7:66:dc:a2:db:65:67: 84:dc:50:4c:0d:ce:66:3b:32:3d:ff:be:c8:f2:17: 67:a0:00:36:a7:75:5d:34:81:8a:cb:d9:b1:b9:57: 7f:ee:96:bf:f0:2c:4b:28:5d:f2:10:b9:a3:16:81: d6:9d:3c:42:50:88:fb:2a:15:99:2e:ed:dd:4b:72: 99:ad:ad:cb:d2:98:f0:9a:5a:23:c5:3c:e1:43:3c: c9:a6:2e:56:54:14:de:a0:74:f7:c4:a4:42:5f:0c: d4:34:1c:47:1a:84:cd:21:e7:18:07:e9:8c:cc:f9: e4:87:01:c9:c7:6a:d8:d4:94:7c:08:36:0d:33:86: 68:01:88:89:90:f8:de:a3:b3:63:42:4c:9c:08:a6: 85:58:2d:ee:67:cb:2a:7f:b2:a4:25:d6:d1:5d:51: 0f:e9:9f:21:9b:ff:e8:d3:10:fc:20:50:5c:c4:45: d9:1e:80:cb:96:37:78:9f:7d:7c:ee:01:ce:e0:d1: 75:85:5c:5b:87:74:7e:b8:ea:93:6a:de:24:0b:22: 69:e5:8e:4e:74:85:e6:dc:cd:f9:9f:1e:12:36:39: 95:09:ae:5b:d2:cc:23:36:b5:95:b9:11:0d:76:c5: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:FA:32:8B:59:8C:FB:5D:99:AC:AF:4B:3E:C1:47:45:CC:FA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5285f77-8997-3052-9baf-3a3b2922d5eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:bd:b1:f4:f1:aa:e9:42:2a:55:ad:6c:7e:57:2c:5c:73:e2: 14:6a:24:6f:20:a7:80:2b:ff:51:db:c2:47:7f:f9:cf:1c:bd: 96:ed:9b:21:eb:83:af:89:94:9b:cd:d6:fa:3a:60:6b:8e:8a: 60:98:a2:ef:3c:7c:76:23:1c:f0:aa:22:27:4b:6a:57:bd:c2: f0:eb:d7:2c:13:0c:b4:f9:40:82:bb:8e:b1:99:76:1f:18:9b: 16:4a:0e:e8:32:48:0a:40:38:42:3e:ef:25:52:13:b9:cd:5a: 2f:57:ba:ee:d9:dc:20:12:5e:41:f7:e0:9d:84:a1:51:97:74: e5:fb:41:b3:04:1e:f6:b7:ff:3b:25:9c:59:fc:e9:8e:ba:f6: 07:da:f4:70:ab:d0:38:60:1b:cc:ab:24:f6:dd:7e:fe:5e:71: a7:35:63:12:1e:82:74:98:7d:a9:3f:7c:95:4a:92:27:fc:ad: bd:90:8b:94:e8:a0:10:3f:eb:8a:f3:ae:fb:01:4b:3c:a5:5f: f3:e0:4b:c8:74:ea:fd:66:8f:40:41:69:bb:ce:fd:ef:c3:a4: 5a:08:e2:7e:58:b2:3e:35:30:9c:ef:e0:09:29:19:5a:d8:65: d7:6a:a3:9d:d8:70:a9:67:33:1b:82:71:7a:a8:7d:f6:4c:aa: 10:fb:fc:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1tOPTdJ27YEFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MTg1NzMxYmItY2RmZS00YTYzLTlkYWMtYTA4NmU0MTE1NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHZWcsooqN8imLFbIF17n+7HUOJgdPdm3KLb ZWeE3FBMDc5mOzI9/77I8hdnoAA2p3VdNIGKy9mxuVd/7pa/8CxLKF3yELmjFoHW nTxCUIj7KhWZLu3dS3KZra3L0pjwmlojxTzhQzzJpi5WVBTeoHT3xKRCXwzUNBxH GoTNIecYB+mMzPnkhwHJx2rY1JR8CDYNM4ZoAYiJkPjeo7NjQkycCKaFWC3uZ8sq f7KkJdbRXVEP6Z8hm//o0xD8IFBcxEXZHoDLljd4n3187gHO4NF1hVxbh3R+uOqT at4kCyJp5Y5OdIXm3M35nx4SNjmVCa5b0swjNrWVuRENdsW5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGn+jKLWYz7XZmsr0s+wUdFzPo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzUyODVmNzctODk5Ny0z MDUyLTliYWYtM2EzYjI5MjJkNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO9sfTxqulCKlWtbH5XLFxz4hRqJG8gp4Ar/1Hbwkd/+c8cvZbtmyHr g6+JlJvN1vo6YGuOimCYou88fHYjHPCqIidLale9wvDr1ywTDLT5QIK7jrGZdh8Y mxZKDugySApAOEI+7yVSE7nNWi9Xuu7Z3CASXkH34J2EoVGXdOX7QbMEHva3/zsl nFn86Y669gfa9HCr0DhgG8yrJPbdfv5ecac1YxIegnSYfak/fJVKkif8rb2Qi5To oBA/64rzrvsBSzylX/PgS8h06v1mj0BBabvO/e/DpFoI4n5Ysj41MJzv4AkpGVrY Zddqo53YcKlnMxuCcXqoffZMqhD7/HM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:59:42 2025 by rpki-client