$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea9d51a5-3f2a-3d9c-8a9d-66e48c2cde36.roa File: ea9d51a5-3f2a-3d9c-8a9d-66e48c2cde36.roa (raw, json) Hash identifier: DKjzPHYJrWbm9rsY2PfH2Cre/ZAKaIX58m6o1E2tDB8= Subject key identifier: FB:C5:5B:23:BA:31:FA:3F:16:66:C7:DF:A8:E3:DB:85:FE:DD:F9:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E9CBF4408F952D470E1F8B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea9d51a5-3f2a-3d9c-8a9d-66e48c2cde36.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.193.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f4:40:8f:95:2d:47:0e:1f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=80d148e4-a873-447d-ab46-d1b95de43129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:29:48:21:94:20:39:d6:fd:52:74:0d:86: 55:93:49:b2:e1:71:8f:52:b3:c6:2f:0e:c4:84:aa: a3:79:b5:16:34:8b:39:cd:33:b8:75:9b:ba:38:24: 64:38:02:fc:13:7c:cc:36:24:ca:e2:c6:56:ce:d4: 89:38:77:c2:66:7a:2b:91:cd:a8:5b:e6:ba:db:de: 95:99:61:d1:d5:33:49:98:ed:31:2b:f5:e5:76:60: fb:88:b2:a1:91:85:96:34:41:36:67:b8:a7:5f:a0: aa:ee:bf:c3:3e:43:2a:ae:59:d6:01:4c:23:fa:81: 9a:c9:45:00:b0:b6:b0:55:41:28:39:a9:45:db:95: 84:d4:fd:9b:fe:e8:9a:72:5f:bc:10:ac:bc:8f:df: 21:15:c4:ec:36:8a:97:ca:f9:5e:df:1b:b1:ba:2f: 4b:cf:af:44:b7:45:ca:73:ad:02:4d:3e:82:91:5b: 89:a5:cb:6b:57:6b:0b:f7:9e:39:f1:6b:04:9c:82: 3e:b3:b6:ca:dc:8f:7e:ec:ae:7b:74:01:3a:c5:1f: 34:55:81:c0:33:26:bb:c0:06:d7:3a:1b:e9:c1:10: 97:cc:2c:61:e3:bd:f9:86:cc:33:f2:ca:02:c4:25: e7:41:fc:76:e4:74:59:d9:35:4a:1b:89:5e:bf:f8: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C5:5B:23:BA:31:FA:3F:16:66:C7:DF:A8:E3:DB:85:FE:DD:F9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea9d51a5-3f2a-3d9c-8a9d-66e48c2cde36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:54:4c:6d:e5:14:02:39:f5:62:d5:07:61:d5:a7:b1:c8:05: 95:45:27:1f:1f:b8:3a:6d:27:bf:65:b2:a5:13:fd:64:64:0e: d0:89:52:76:fc:68:e9:67:08:a2:2b:53:5a:85:2c:09:b4:11: 38:4b:e2:30:db:ea:7c:0c:37:32:99:a9:b7:32:be:e1:6d:b0: 91:d9:ec:af:52:c9:2c:4f:27:d2:fb:e2:1d:6b:80:a4:04:47: 61:53:b1:f3:e5:87:e8:16:4c:a7:f4:74:0b:5d:d3:d1:4b:38: b1:1b:2c:53:d4:a3:4e:5b:53:9c:b5:3b:a7:71:11:f5:08:9d: 12:64:39:10:82:78:b4:22:9f:49:8b:55:1a:5f:30:6b:7c:1f: 11:74:72:b5:dd:b4:21:2b:fc:df:70:ee:35:6c:5e:71:5c:fd: 69:dc:fa:d7:9d:c9:41:c6:fb:84:51:9a:86:67:c1:82:88:6a: ff:c9:e1:3e:bf:d8:c8:eb:c4:dd:36:34:b8:35:50:af:d0:d6: 93:02:50:a0:c7:3e:1b:36:5d:8f:da:22:6e:2a:ba:82:a3:46: 9e:0d:1e:db:1b:c1:e9:50:09:83:65:cd:b5:75:9f:3d:a0:e6: 5e:64:7f:79:2c:92:39:24:96:a2:40:16:30:80:be:71:f2:66: 7a:61:84:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/RAj5UtRw4fiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ODBkMTQ4ZTQtYTg3My00NDdkLWFiNDYtZDFiOTVkZTQzMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHopSCGUIDnW/VJ0DYZVk0my4XGPUrPGLw7E hKqjebUWNIs5zTO4dZu6OCRkOAL8E3zMNiTK4sZWztSJOHfCZnorkc2oW+a6296V mWHR1TNJmO0xK/XldmD7iLKhkYWWNEE2Z7inX6Cq7r/DPkMqrlnWAUwj+oGayUUA sLawVUEoOalF25WE1P2b/uiacl+8EKy8j98hFcTsNoqXyvle3xuxui9Lz69Et0XK c60CTT6CkVuJpctrV2sL95458WsEnII+s7bK3I9+7K57dAE6xR80VYHAMya7wAbX OhvpwRCXzCxh4735hswz8soCxCXnQfx25HRZ2TVKG4lev/jEdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvFWyO6Mfo/FmbH36jj24X+3fncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWE5ZDUxYTUtM2YyYS0z ZDljLThhOWQtNjZlNDhjMmNkZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBUTG3lFAI59WLVB2HVp7HIBZVFJx8fuDptJ79lsqUT/WRkDtCJUnb8 aOlnCKIrU1qFLAm0EThL4jDb6nwMNzKZqbcyvuFtsJHZ7K9SySxPJ9L74h1rgKQE R2FTsfPlh+gWTKf0dAtd09FLOLEbLFPUo05bU5y1O6dxEfUInRJkORCCeLQin0mL VRpfMGt8HxF0crXdtCEr/N9w7jVsXnFc/Wnc+tedyUHG+4RRmoZnwYKIav/J4T6/ 2MjrxN02NLg1UK/Q1pMCUKDHPhs2XY/aIm4quoKjRp4NHtsbwelQCYNlzbV1nz2g 5l5kf3kskjkklqJAFjCAvnHyZnphhFU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:06 2025 by rpki-client