$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843b999-42f5-3c3c-92ca-c791c383ba14.roa File: d843b999-42f5-3c3c-92ca-c791c383ba14.roa (raw, json) Hash identifier: Fddh1aFzhtAl7SHWjMU6va8FsDpCXzfzT6xISZde5hM= Subject key identifier: 92:33:05:37:CA:25:63:B7:18:8B:19:80:01:D3:CF:A0:5B:1F:05:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F4F972C46791E3FA0A223780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843b999-42f5-3c3c-92ca-c791c383ba14.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.46.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:72:c4:67:91:e3:fa:0a:22:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=595cf9cc-1927-4591-91d1-4f4038f29d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9e:f0:2e:82:94:7d:43:d2:a8:33:81:c3:51: 87:98:83:d5:4c:86:6e:e2:fe:fb:d3:24:3c:ae:ed: d4:79:3c:a7:6b:4f:6c:64:25:ea:b5:c7:2e:1a:51: 4a:76:83:43:01:b1:78:ff:68:a1:71:5a:91:88:49: c7:f7:d8:ce:7a:1d:1d:b5:2f:38:08:cf:8e:a8:01: 95:d4:79:01:a9:f8:a9:6a:10:fd:7f:44:0c:da:b8: 71:5b:50:d2:69:5d:15:93:fc:80:1e:7a:d8:64:89: 68:d1:5d:3d:94:93:4f:ef:4c:c5:f5:b1:d3:72:9a: c1:88:6f:a3:df:d2:f3:97:4f:f5:cc:c6:4c:99:11: ed:69:4b:43:f6:f6:3c:bc:9b:80:14:c7:bf:53:f4: 9c:1d:f7:6f:f0:b2:2e:c7:91:df:b7:7f:f2:ed:b1: c3:1c:92:0e:e9:12:20:36:05:d3:80:b4:81:12:a8: 54:7d:98:dc:44:46:cc:16:66:8c:ae:92:68:17:ac: 86:be:6d:3a:60:e9:ad:78:bb:d2:3c:78:35:98:1a: b7:e2:ef:1b:e7:6d:73:31:8e:81:6d:56:0b:65:57: 5a:3d:66:66:af:41:3d:cf:80:f8:96:5e:19:77:3b: 67:05:85:f4:a8:dd:f0:a5:76:0c:65:d3:67:58:09: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:05:37:CA:25:63:B7:18:8B:19:80:01:D3:CF:A0:5B:1F:05:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843b999-42f5-3c3c-92ca-c791c383ba14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.46.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bc:11:0d:b8:98:60:74:d9:4a:f7:96:c1:eb:4b:1f:86:48: ba:5b:10:30:1b:c1:2e:9b:0d:37:0f:b7:be:70:5c:3a:7e:54: 0e:a5:f1:01:e4:96:07:b6:8b:a3:0c:a3:d2:9e:69:aa:6c:d8: 51:69:94:ac:f8:0d:af:58:2f:7c:80:f9:10:ab:31:24:c0:9d: f6:23:dc:b5:be:34:61:59:86:23:db:ee:5a:8a:14:86:b2:f6: e4:f8:78:6d:1a:2b:07:20:63:5c:08:35:27:b7:63:7f:7c:5f: f2:f6:bd:d4:67:0e:40:52:a3:cc:77:32:d9:45:a4:6e:b4:36: 53:90:24:38:3a:c4:a1:8e:1f:ad:e6:98:b7:f9:5a:d0:24:55: b2:08:30:7e:40:d4:db:9e:63:64:73:a7:04:d8:7b:06:b6:a7: 62:7d:b5:7c:4c:1f:65:aa:73:39:f1:65:51:81:ea:95:01:0b: 10:30:f4:9b:3f:01:0f:5a:1d:f0:c6:71:50:a7:b0:ad:9e:a3: a5:b0:6b:90:17:76:54:91:ee:8e:fd:56:52:b2:29:5f:5e:0e: 9c:92:71:18:55:60:df:8e:c9:6f:79:7f:2e:41:93:ff:45:81: 39:80:23:79:8e:e1:d6:92:88:df:43:68:2f:0d:29:75:5d:65: cc:1a:f8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+XLEZ5Hj+goiN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTk1Y2Y5Y2MtMTkyNy00NTkxLTkxZDEtNGY0MDM4ZjI5ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ7wLoKUfUPSqDOBw1GHmIPVTIZu4v770yQ8 ru3UeTyna09sZCXqtccuGlFKdoNDAbF4/2ihcVqRiEnH99jOeh0dtS84CM+OqAGV 1HkBqfipahD9f0QM2rhxW1DSaV0Vk/yAHnrYZIlo0V09lJNP70zF9bHTcprBiG+j 39Lzl0/1zMZMmRHtaUtD9vY8vJuAFMe/U/ScHfdv8LIux5Hft3/y7bHDHJIO6RIg NgXTgLSBEqhUfZjcREbMFmaMrpJoF6yGvm06YOmteLvSPHg1mBq34u8b521zMY6B bVYLZVdaPWZmr0E9z4D4ll4ZdztnBYX0qN3wpXYMZdNnWAkB/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIzBTfKJWO3GIsZgAHTz6BbHwWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg0M2I5OTktNDJmNS0z YzNjLTkyY2EtYzc5MWMzODNiYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy4NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa8EQ24mGB02Ur3lsHrSx+GSLpbEDAbwS6bDTcPt75wXDp+VA6l8QHk lge2i6MMo9Keaaps2FFplKz4Da9YL3yA+RCrMSTAnfYj3LW+NGFZhiPb7lqKFIay 9uT4eG0aKwcgY1wINSe3Y398X/L2vdRnDkBSo8x3MtlFpG60NlOQJDg6xKGOH63m mLf5WtAkVbIIMH5A1NueY2RzpwTYewa2p2J9tXxMH2WqcznxZVGB6pUBCxAw9Js/ AQ9aHfDGcVCnsK2eo6Wwa5AXdlSR7o79VlKyKV9eDpyScRhVYN+OyW95fy5Bk/9F gTmAI3mO4daSiN9DaC8NKXVdZcwa+GE= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:56 2025 by rpki-client