$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3e7c81c-0533-35fc-8ec8-ee0e0fc3a91c.roa File: d3e7c81c-0533-35fc-8ec8-ee0e0fc3a91c.roa (raw, json) Hash identifier: 1OYP8KtkrXyTQyx5GxTNX0HxvgD3rfjyFEttlBMdpxY= Subject key identifier: 21:7A:AE:CE:8B:0B:6B:95:E8:5E:1D:2D:24:EA:33:7F:8B:E3:18:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC41927E853FFE659D0200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3e7c81c-0533-35fc-8ec8-ee0e0fc3a91c.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.65.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:41:92:7e:85:3f:fe:65:9d:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=6ba7bf43-081d-43c6-94c0-18d28dd2eab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:81:af:6e:df:a3:cb:81:2a:7e:6c:ca:83:64: 71:07:9b:ae:4c:71:8a:5a:0c:00:2c:4b:f2:1f:c4: 03:3f:3e:01:8d:8f:a9:9b:2a:47:12:3b:bb:fe:3e: 23:bf:5d:be:c5:c3:63:38:ca:b2:91:a0:cf:6b:a9: 0a:85:a0:64:a0:b1:21:e4:ce:47:67:d2:bb:ec:59: 38:8b:82:24:0e:d5:20:94:cf:48:5c:c3:53:90:5b: 62:cd:48:6c:91:01:73:aa:1c:42:14:d6:42:0b:bb: 38:a9:40:35:b6:33:13:33:01:7b:7e:ed:01:d0:e0: 06:38:40:13:df:da:72:e1:2b:e8:0b:98:cf:da:29: f7:cf:c0:20:3c:d6:97:d0:41:34:1c:3f:9b:5c:b9: 85:0a:87:36:a3:85:1d:35:d9:07:d3:44:16:7a:86: f5:59:35:b3:b7:71:45:be:e6:11:b9:c6:47:76:74: 22:f4:a5:4a:b0:6f:79:81:48:b0:85:9f:f0:14:74: d1:94:b4:b7:d0:a0:cd:e9:54:cf:e0:e5:87:5f:f9: 34:3b:b6:ec:92:f0:2b:10:44:31:be:45:00:c2:cf: c5:3d:a9:b6:81:a1:70:ec:63:8b:da:10:48:b9:53: d1:dc:9b:2e:6f:bf:c0:ac:ec:b9:fa:26:69:3b:c0: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:AE:CE:8B:0B:6B:95:E8:5E:1D:2D:24:EA:33:7F:8B:E3:18:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3e7c81c-0533-35fc-8ec8-ee0e0fc3a91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8e:af:e2:f4:ae:4f:f2:64:47:40:58:17:1e:ab:9a:db:da: 98:1a:26:3d:23:ce:5a:6d:7e:a0:2c:32:c4:6e:bc:4e:5a:dc: 94:c9:8f:4d:88:23:b6:f7:1c:0b:d1:7a:82:82:f4:2b:1f:35: 97:bb:78:10:10:76:93:09:a5:0e:15:38:f0:14:07:91:59:c6: d9:45:59:46:5a:66:6e:7e:88:02:5e:b9:ad:26:d4:89:f5:18: dd:c2:1d:5b:17:ee:4b:36:a7:55:05:d9:91:c7:5c:56:23:00: 5f:2f:75:e5:a8:57:28:ee:aa:c3:9b:14:df:0f:03:90:54:d8: 26:1c:ae:c6:79:62:e3:a2:2a:0f:b4:27:1e:fe:3e:dd:8d:23: 8b:b8:a3:f1:94:35:59:21:ff:04:04:52:62:a8:f0:ea:75:18: 33:43:a7:7f:bb:f2:bd:9e:73:41:90:4c:65:37:29:2a:05:5c: 33:ba:5d:3d:b2:be:fd:43:84:8e:89:d1:6f:fd:4e:ea:b0:a9: e3:46:5e:a6:0f:d9:85:2a:d3:50:12:3a:4f:58:c6:b1:a2:d8: 9b:48:77:31:55:ff:66:bb:9e:b5:47:fd:2e:ee:41:df:36:d2: ef:74:f6:52:16:78:30:29:6f:cf:93:da:19:72:fe:9a:00:e5: c3:53:50:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrEGSfoU//mWdAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NmJhN2JmNDMtMDgxZC00M2M2LTk0YzAtMThkMjhkZDJlYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIGvbt+jy4EqfmzKg2RxB5uuTHGKWgwALEvy H8QDPz4BjY+pmypHEju7/j4jv12+xcNjOMqykaDPa6kKhaBkoLEh5M5HZ9K77Fk4 i4IkDtUglM9IXMNTkFtizUhskQFzqhxCFNZCC7s4qUA1tjMTMwF7fu0B0OAGOEAT 39py4SvoC5jP2in3z8AgPNaX0EE0HD+bXLmFCoc2o4UdNdkH00QWeob1WTWzt3FF vuYRucZHdnQi9KVKsG95gUiwhZ/wFHTRlLS30KDN6VTP4OWHX/k0O7bskvArEEQx vkUAws/FPam2gaFw7GOL2hBIuVPR3Jsub7/ArOy5+iZpO8BhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF6rs6LC2uV6F4dLSTqM3+L4xgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDNlN2M4MWMtMDUzMy0z NWZjLThlYzgtZWUwZTBmYzNhOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0EdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Or+L0rk/yZEdAWBceq5rb2pgaJj0jzlptfqAsMsRuvE5a3JTJj02I I7b3HAvReoKC9CsfNZe7eBAQdpMJpQ4VOPAUB5FZxtlFWUZaZm5+iAJeua0m1In1 GN3CHVsX7ks2p1UF2ZHHXFYjAF8vdeWoVyjuqsObFN8PA5BU2CYcrsZ5YuOiKg+0 Jx7+Pt2NI4u4o/GUNVkh/wQEUmKo8Op1GDNDp3+78r2ec0GQTGU3KSoFXDO6XT2y vv1DhI6J0W/9TuqwqeNGXqYP2YUq01ASOk9YxrGi2JtIdzFV/2a7nrVH/S7uQd82 0u909lIWeDApb8+T2hly/poA5cNTUKQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:05 2025 by rpki-client