$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca599066-649c-3a33-9a21-52a70acad756.roa File: ca599066-649c-3a33-9a21-52a70acad756.roa (raw, json) Hash identifier: gEsR8uWStdSriUSeU/Yk5X73CoSBrZtwSbOJefaIgU8= Subject key identifier: 24:06:C9:6F:F4:D2:19:E1:67:9D:6C:CD:AF:5A:F0:B6:3E:D4:80:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D211476206BCECF251808FD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca599066-649c-3a33-9a21-52a70acad756.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.43.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:47:62:06:bc:ec:f2:51:80:8f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c131dceb-c473-47cd-ad0e-9186a78464d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:f2:a1:74:2c:3a:f8:03:da:f9:1b:d3:1a: fe:a0:45:93:e0:23:23:5b:c3:ee:c8:f1:70:cc:7b: c5:8c:25:4f:98:aa:c2:9f:1d:0e:c5:5f:80:ff:2c: fb:16:4c:21:d0:68:cf:de:87:4f:c9:de:f6:8a:2c: c3:32:f1:99:2b:fe:a9:c5:19:81:8a:86:31:35:d5: a6:5d:01:1a:94:b7:91:c4:c0:36:0f:de:c1:a3:a8: 68:e3:05:63:de:4f:ab:f8:f2:02:cb:96:85:42:dd: 64:b3:63:5e:67:e8:03:4e:50:6e:ae:29:26:5b:d2: 1d:74:3e:13:a5:e2:9b:f2:5d:17:9b:71:b3:9d:70: 1f:32:df:9d:55:53:1e:43:98:a2:a9:56:93:a8:28: f5:1b:6e:bf:bb:06:ad:b3:17:9b:94:71:87:de:cf: 1c:c5:2c:9d:5e:82:6a:91:e8:a3:7b:50:06:d1:1c: 4f:8d:a0:28:b8:9c:86:76:2b:70:7e:01:36:9d:29: 41:68:3d:79:b5:f5:8a:7f:96:8e:d5:13:81:04:b7: 47:f8:bb:73:8b:98:07:59:8e:f3:c5:d2:3d:4a:9d: c8:04:07:fa:6f:0c:3a:64:4e:a5:20:0e:7b:63:0f: c5:7d:b3:fd:5d:10:67:48:30:14:08:57:6f:c8:0a: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:C9:6F:F4:D2:19:E1:67:9D:6C:CD:AF:5A:F0:B6:3E:D4:80:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca599066-649c-3a33-9a21-52a70acad756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:89:e5:12:19:88:28:96:6e:78:05:2e:1a:a1:fa:17:9a:e6: 74:1f:ee:62:1a:2c:5d:0c:8e:f4:61:2e:f4:77:c9:d3:ba:79: 3f:9e:e0:27:a2:13:d0:f9:14:d4:70:94:c5:d8:69:c7:08:54: 15:88:01:fb:1e:99:1e:54:87:f8:82:81:0f:ac:24:b8:8c:a6: 7f:63:8a:a0:7c:94:eb:af:e5:60:28:48:2d:16:6f:fd:02:59: db:68:73:8e:07:d9:f2:48:29:37:42:3b:b6:e4:44:7e:d5:bd: c1:dc:01:8e:0d:50:a3:58:bb:48:22:7e:7a:56:6f:1e:d9:51: 7d:62:19:7a:94:e6:3f:c8:6b:2e:d8:43:d4:69:eb:78:25:0d: ce:6b:09:c7:d8:2c:30:cf:d6:c0:d3:f9:95:6c:ff:6d:58:9a: 9b:61:bb:c3:b2:38:f4:a6:b7:19:ef:4e:2f:33:6c:49:0c:5c: 2a:2d:58:55:02:0a:b1:15:88:d2:d3:e1:3f:dd:e7:97:54:9f: 79:7f:ee:ad:ca:39:6f:e7:44:d5:9d:f4:a7:54:ba:b5:94:66: 8b:71:05:64:40:e5:d0:97:73:33:d0:2b:39:bc:03:80:b9:bb: 27:7f:c5:a7:e9:66:10:26:0c:70:ea:b7:e1:fc:d6:fd:5a:25: dc:9c:84:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUdiBrzs8lGAj9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzEzMWRjZWItYzQ3My00N2NkLWFkMGUtOTE4NmE3ODQ2NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpbyoXQsOvgD2vkb0xr+oEWT4CMjW8PuyPFw zHvFjCVPmKrCnx0OxV+A/yz7Fkwh0GjP3odPyd72iizDMvGZK/6pxRmBioYxNdWm XQEalLeRxMA2D97Bo6ho4wVj3k+r+PICy5aFQt1ks2NeZ+gDTlBurikmW9IddD4T peKb8l0Xm3GznXAfMt+dVVMeQ5iiqVaTqCj1G26/uwatsxeblHGH3s8cxSydXoJq keije1AG0RxPjaAouJyGditwfgE2nSlBaD15tfWKf5aO1ROBBLdH+Ltzi5gHWY7z xdI9Sp3IBAf6bww6ZE6lIA57Yw/FfbP9XRBnSDAUCFdvyAowlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQGyW/00hnhZ51sza9a8LY+1IBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E1OTkwNjYtNjQ5Yy0z YTMzLTlhMjEtNTJhNzBhY2FkNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFysQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSJ5RIZiCiWbngFLhqh+hea5nQf7mIaLF0MjvRhLvR3ydO6eT+e4Cei E9D5FNRwlMXYaccIVBWIAfsemR5Uh/iCgQ+sJLiMpn9jiqB8lOuv5WAoSC0Wb/0C Wdtoc44H2fJIKTdCO7bkRH7VvcHcAY4NUKNYu0gifnpWbx7ZUX1iGXqU5j/Iay7Y Q9Rp63glDc5rCcfYLDDP1sDT+ZVs/21Ympthu8OyOPSmtxnvTi8zbEkMXCotWFUC CrEViNLT4T/d55dUn3l/7q3KOW/nRNWd9KdUurWUZotxBWRA5dCXczPQKzm8A4C5 uyd/xafpZhAmDHDqt+H81v1aJdychEU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:57 2025 by rpki-client