$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6c925c0-3225-3305-96ac-b8e8afb6debc.roa File: f6c925c0-3225-3305-96ac-b8e8afb6debc.roa (raw, json) Hash identifier: Iwdh640ySIZ16pGWE6K1nW6AssgDVisd0zZSp2duKpM= Subject key identifier: AE:5B:2E:59:69:79:AD:21:AE:62:DB:62:47:B6:98:D2:7A:F3:50:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858493C09462B2A83E09FB446E5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6c925c0-3225-3305-96ac-b8e8afb6debc.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 20940 IP address blocks: 23.43.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:46:2b:2a:83:e0:9f:b4:46:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=dc0b9436-7651-4280-b762-6ebc1f69d482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:41:c2:5c:6c:22:f8:08:9d:b8:b0:01:36: 47:97:d2:42:2c:9d:93:1b:3b:24:b2:99:f0:3a:5b: da:83:77:ed:e0:37:54:8c:19:3b:ad:bd:96:75:5f: e3:82:f4:b8:64:8b:fe:55:98:0b:b1:3b:9c:c0:41: c3:ff:5c:9d:dd:b2:58:2a:a7:13:a4:2a:c4:a9:28: 97:f8:e6:4d:3c:08:44:7b:c1:79:34:dd:ef:87:ea: 6c:71:e1:5b:15:19:02:d1:11:ef:29:9e:d5:da:db: a8:ed:78:31:f0:d5:4d:a6:67:a1:0b:c0:6e:04:62: af:ef:7f:8b:fd:32:18:86:4d:ae:36:17:84:2a:5e: 6b:8b:f1:e3:08:5d:8c:47:1c:4c:34:4f:02:8e:61: f5:48:45:a5:4c:02:53:43:2c:3f:7a:19:96:4c:be: a3:7f:72:b8:7a:e0:38:f7:a4:56:72:ab:4b:b7:d0: 20:cb:63:7a:dd:0d:4a:a5:b4:4b:13:0d:27:00:58: d9:fa:81:c2:84:91:2b:6a:9b:0d:da:d6:fa:aa:4e: 7d:c7:d8:26:0e:d2:4a:77:4a:73:9b:00:42:ba:ef: fa:5a:2d:18:92:52:da:86:25:f8:fe:92:92:2c:34: fa:9a:35:a1:7a:3f:41:c3:e6:59:51:7b:e6:da:2c: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:2E:59:69:79:AD:21:AE:62:DB:62:47:B6:98:D2:7A:F3:50:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6c925c0-3225-3305-96ac-b8e8afb6debc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5e:e4:ff:ba:1f:b6:6e:cc:82:47:e0:70:53:aa:e0:be:b9: 93:ad:d2:74:3f:dd:a1:21:15:b9:78:60:e4:fa:a2:3a:17:7b: 7e:cf:f4:c3:26:d8:0b:66:d5:41:ca:dd:a3:0d:5a:e4:af:8a: 6c:44:cb:41:18:43:08:74:c2:fb:ea:03:73:fa:4a:5a:15:75: 4e:41:8a:19:ce:d3:f9:f3:43:81:5e:43:ea:47:0a:10:5d:00: b5:e9:d2:31:a5:6c:a8:8d:ce:ae:f8:13:13:66:ea:9f:60:b0: ea:66:17:0c:62:18:48:f1:3d:36:87:f8:1c:0f:fa:fa:87:a3: c0:65:47:bb:73:b2:ac:39:71:d7:24:38:81:eb:0d:3c:24:90: af:7b:e7:58:c0:7e:88:03:78:89:3f:87:b5:99:db:e9:bd:96: 6c:59:9c:ff:a7:c5:79:91:c4:ac:04:c9:ad:b6:44:5c:14:a5: 39:1d:06:64:eb:c4:78:7c:f7:c2:5d:30:ed:b1:cc:cc:2f:67: 19:f3:b0:b3:75:49:84:21:d1:89:3e:06:e5:19:11:fd:39:f5: 9c:4e:06:b5:8a:1a:f3:6b:06:e8:af:11:0b:9c:5e:30:f8:f2: 26:13:13:57:2d:5b:69:d5:71:1a:1d:e7:51:1d:0b:e2:72:71: a9:ba:6d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUYrKoPgn7RG5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZGMwYjk0MzYtNzY1MS00MjgwLWI3NjItNmViYzFmNjlkNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMlBwlxsIvgInbiwATZHl9JCLJ2TGzskspnw Olvag3ft4DdUjBk7rb2WdV/jgvS4ZIv+VZgLsTucwEHD/1yd3bJYKqcTpCrEqSiX +OZNPAhEe8F5NN3vh+psceFbFRkC0RHvKZ7V2tuo7Xgx8NVNpmehC8BuBGKv73+L /TIYhk2uNheEKl5ri/HjCF2MRxxMNE8CjmH1SEWlTAJTQyw/ehmWTL6jf3K4euA4 96RWcqtLt9Agy2N63Q1KpbRLEw0nAFjZ+oHChJErapsN2tb6qk59x9gmDtJKd0pz mwBCuu/6Wi0YklLahiX4/pKSLDT6mjWhej9Bw+ZZUXvm2ix8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5bLllpea0hrmLbYke2mNJ681CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjZjOTI1YzAtMzIyNS0z MzA1LTk2YWMtYjhlOGFmYjZkZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFe5P+6H7ZuzIJH4HBTquC+uZOt0nQ/3aEhFbl4YOT6ojoXe37P9MMm 2Atm1UHK3aMNWuSvimxEy0EYQwh0wvvqA3P6SloVdU5BihnO0/nzQ4FeQ+pHChBd ALXp0jGlbKiNzq74ExNm6p9gsOpmFwxiGEjxPTaH+BwP+vqHo8BlR7tzsqw5cdck OIHrDTwkkK9751jAfogDeIk/h7WZ2+m9lmxZnP+nxXmRxKwEya22RFwUpTkdBmTr xHh898JdMO2xzMwvZxnzsLN1SYQh0Yk+BuUZEf059ZxOBrWKGvNrBuivEQucXjD4 8iYTE1ctW2nVcRod51EdC+Jycam6bSE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:59 2025 by rpki-client