$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa File: cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa (raw, json) Hash identifier: qvpYDtdMVAfXtY/H+/MuadlmZPRD8NTYl8+N8TEiEVo= Subject key identifier: E7:43:5E:74:73:9D:8B:68:A3:60:DB:AA:C7:93:4A:A2:71:DC:6F:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED569B9107346C1FA2B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d5:69:b9:10:73:46:c1:fa:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=44781e3c-a218-4853-b381-0621d9a136c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:ec:5f:9a:6e:46:1b:e5:c8:a9:5f:bf:af: d9:dc:e2:43:8f:5b:49:58:79:73:51:0f:42:19:e2: b1:3c:e2:d4:cd:5c:32:8f:be:06:0b:13:8e:b4:b1: 23:76:71:8c:31:2a:46:ba:a8:71:93:01:d9:af:e0: e0:20:29:15:68:2a:0a:78:e7:79:b0:39:e6:63:80: a9:02:78:f6:cc:74:30:b9:8b:b8:77:ff:34:73:a1: 50:5f:ea:0e:c8:1d:e8:67:2e:6c:cd:b9:eb:89:45: d4:38:2f:8d:2e:9b:53:dc:72:ee:12:48:99:df:a3: 4b:60:2d:c2:45:9a:86:72:f0:29:09:b2:40:eb:43: cb:e5:03:f6:a2:f6:2d:fe:0f:ad:a4:6f:9a:e5:b7: e7:07:fc:8d:47:0d:95:00:9a:ed:65:08:36:bf:32: e9:0d:4f:5c:47:63:2e:bc:46:fb:88:ba:92:8c:ea: f9:b8:5f:59:d0:88:e1:23:c5:8f:54:52:ae:fd:ce: b0:21:3d:c1:75:52:4a:3e:46:fb:72:82:0a:70:9b: fe:b4:87:31:6f:c2:00:48:3a:79:47:20:da:49:6f: e3:b4:c1:71:85:97:15:d4:0a:5e:a5:1e:49:73:f2: d2:6f:61:25:dc:e9:6b:5e:05:58:e7:c7:a4:c1:c9: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:5E:74:73:9D:8B:68:A3:60:DB:AA:C7:93:4A:A2:71:DC:6F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b1:86:7d:82:2e:5e:fd:a8:63:ad:28:ee:50:30:77:51:cd: 19:01:05:e9:f8:56:08:67:e1:2a:4b:63:4b:4e:6d:e4:26:ef: 66:08:95:fa:71:82:97:2c:df:44:0f:5d:cf:15:f3:df:3a:fd: 40:66:f3:e7:0d:86:2c:9f:ae:05:e9:e3:31:b9:1d:f4:42:26: 9d:44:51:df:5a:a4:f6:aa:bc:d5:d5:f1:01:41:76:b0:f9:ea: de:dc:90:63:db:68:fa:9e:44:7c:f4:6f:e5:35:6d:98:7d:b8: 8e:a5:12:62:1f:a1:41:fa:9e:bb:34:28:39:65:4e:fb:8f:df: b2:5b:e9:84:53:d2:5e:64:7e:94:d1:7a:be:e7:3a:31:87:d4: 25:1a:a6:6b:d7:d2:6c:9e:b6:32:6e:55:d4:87:67:55:d0:1c: 3f:5b:15:7e:37:86:19:16:48:eb:7e:ab:bb:05:b7:9c:6d:dd: f5:6b:4f:34:a0:f7:87:8f:53:14:18:e2:3e:ef:a5:f5:2f:70: 60:61:aa:aa:7d:2f:05:dc:de:89:fa:f8:fc:58:04:76:c5:44: 1f:1b:b0:68:c4:dc:04:bc:03:f9:ed:57:5c:30:28:3b:82:e5: 40:04:76:90:95:af:8e:b3:1c:6b:b2:0f:42:36:06:29:f9:f7: ce:fc:34:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtVpuRBzRsH6KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NDQ3ODFlM2MtYTIxOC00ODUzLWIzODEtMDYyMWQ5YTEzNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLHsX5puRhvlyKlfv6/Z3OJDj1tJWHlzUQ9C GeKxPOLUzVwyj74GCxOOtLEjdnGMMSpGuqhxkwHZr+DgICkVaCoKeOd5sDnmY4Cp Anj2zHQwuYu4d/80c6FQX+oOyB3oZy5szbnriUXUOC+NLptT3HLuEkiZ36NLYC3C RZqGcvApCbJA60PL5QP2ovYt/g+tpG+a5bfnB/yNRw2VAJrtZQg2vzLpDU9cR2Mu vEb7iLqSjOr5uF9Z0IjhI8WPVFKu/c6wIT3BdVJKPkb7coIKcJv+tIcxb8IASDp5 RyDaSW/jtMFxhZcV1ApepR5Jc/LSb2El3OlrXgVY58ekwcmwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdDXnRznYtoo2DbqseTSqJx3G+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RmMTVkNjAtMGI1YS0z MTQxLTgzMjctMTBmYjMyMTFmZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmxhn2CLl79qGOtKO5QMHdRzRkBBen4Vghn4SpLY0tObeQm72YIlfpx gpcs30QPXc8V8986/UBm8+cNhiyfrgXp4zG5HfRCJp1EUd9apPaqvNXV8QFBdrD5 6t7ckGPbaPqeRHz0b+U1bZh9uI6lEmIfoUH6nrs0KDllTvuP37Jb6YRT0l5kfpTR er7nOjGH1CUapmvX0myetjJuVdSHZ1XQHD9bFX43hhkWSOt+q7sFt5xt3fVrTzSg 94ePUxQY4j7vpfUvcGBhqqp9LwXc3on6+PxYBHbFRB8bsGjE3AS8A/ntV1wwKDuC 5UAEdpCVr46zHGuyD0I2Bin59878NLs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:46 2025 by rpki-client