$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa08c1da-79e0-3c97-aa59-23876ba839b9.roa File: fa08c1da-79e0-3c97-aa59-23876ba839b9.roa (raw, json) Hash identifier: C0Zb3Nma6eaN2mTHrdi8ZpZoA7qQv5nLJpB/G4v69Cs= Subject key identifier: 95:D2:D5:C1:8B:A0:87:39:55:62:1C:1E:6E:A1:6F:F0:4E:CC:48:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495C247F43C6ECDF8764A46940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa08c1da-79e0-3c97-aa59-23876ba839b9.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 35994 IP address blocks: 23.45.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:7f:43:c6:ec:df:87:64:a4:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=67ec15c2-4f41-470c-bcc8-fc2c31148b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:aa:f1:46:64:8e:86:3d:5a:fc:7b:0a:5f: 19:cd:6a:d6:9d:77:22:2c:92:da:f3:51:07:a9:e2: dc:cf:09:9d:bf:c0:31:8c:ef:1b:7c:4e:d3:55:da: e6:7f:dd:a0:9a:9a:17:14:c6:ed:6d:e3:25:33:05: 3a:82:53:59:01:af:c8:87:e2:f3:4d:0a:dd:fe:d7: 33:cb:2f:e2:6f:b3:8f:6f:3f:ae:b7:96:36:51:5b: 75:83:d7:46:57:f4:33:a7:b5:85:2a:49:c0:e6:02: b6:50:67:0e:73:89:a8:14:97:f6:28:c1:ac:55:ca: d0:a9:5f:31:7a:9b:c3:77:89:fc:1b:a1:85:f5:bc: 6f:f6:ba:52:0e:35:09:6e:76:e9:1f:97:12:f7:5e: 81:bc:3d:4b:e4:e9:7c:d2:fe:cf:0f:ba:04:01:06: ad:81:36:39:64:a3:50:9b:e7:09:79:e3:cf:21:8e: 1b:f8:38:6c:2b:5f:72:13:63:2f:40:5f:30:a3:67: 2e:a3:1c:f3:5f:a4:81:a3:b6:89:73:79:a4:4c:ef: b6:cb:27:e8:06:93:83:b1:c8:f5:ca:c1:92:00:d9: 51:c6:a8:01:23:71:86:4d:ec:f1:88:db:45:70:3c: 8b:8e:0a:4a:fa:d7:a6:99:e8:c7:f3:9a:a9:d3:08: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D2:D5:C1:8B:A0:87:39:55:62:1C:1E:6E:A1:6F:F0:4E:CC:48:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa08c1da-79e0-3c97-aa59-23876ba839b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9f:eb:a5:1c:e7:44:c6:b6:1d:b1:ed:51:60:88:ae:1e:58: b7:89:5e:91:75:d8:fa:0b:f6:8d:4a:42:2d:86:1b:75:46:d9: e2:2d:9b:f4:19:37:e0:c3:ce:ac:0a:d3:30:28:33:39:f1:06: fa:fa:0c:c1:f4:a1:7f:86:5f:05:4c:47:1d:cb:27:d2:19:b7: 23:0a:3e:6f:e9:66:c9:f1:b1:19:20:5b:15:ac:b9:60:c3:6e: e4:17:d1:b9:8d:7f:79:5a:c5:0b:02:25:12:40:0f:de:49:c6: 80:a8:9a:22:1a:ff:8b:96:9b:5c:44:d9:94:39:81:74:c6:05: 43:4b:89:57:c9:d5:6a:a6:34:4e:48:0d:fe:db:90:e0:dd:5f: 38:4c:94:23:ee:4e:ea:e3:be:fa:7c:ed:62:64:a0:78:b7:8d: 3b:f0:34:85:ed:41:89:de:62:36:d3:fa:7c:82:84:b3:98:43: 60:3b:b7:97:14:f9:53:56:f9:e9:b8:e9:0b:be:a3:09:35:73: a3:54:d2:38:4a:5a:09:d0:f5:ba:f5:25:b1:73:3a:04:78:da: 91:24:23:59:e5:49:2a:ca:af:bd:4b:02:e2:e3:44:b1:8b:79: a3:e3:59:2f:51:68:86:96:49:43:69:90:a2:27:35:e5:50:4e: bc:40:c6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJH9Dxuzfh2SkaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NjdlYzE1YzItNGY0MS00NzBjLWJjYzgtZmMyYzMxMTQ4YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzyq8UZkjoY9Wvx7Cl8ZzWrWnXciLJLa81EH qeLczwmdv8AxjO8bfE7TVdrmf92gmpoXFMbtbeMlMwU6glNZAa/Ih+LzTQrd/tcz yy/ib7OPbz+ut5Y2UVt1g9dGV/Qzp7WFKknA5gK2UGcOc4moFJf2KMGsVcrQqV8x epvDd4n8G6GF9bxv9rpSDjUJbnbpH5cS916BvD1L5Ol80v7PD7oEAQatgTY5ZKNQ m+cJeePPIY4b+DhsK19yE2MvQF8wo2cuoxzzX6SBo7aJc3mkTO+2yyfoBpODscj1 ysGSANlRxqgBI3GGTezxiNtFcDyLjgpK+temmejH85qp0wgB3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXS1cGLoIc5VWIcHm6hb/BOzEiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmEwOGMxZGEtNzllMC0z Yzk3LWFhNTktMjM4NzZiYTgzOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImf66Uc50TGth2x7VFgiK4eWLeJXpF12PoL9o1KQi2GG3VG2eItm/QZ N+DDzqwK0zAoMznxBvr6DMH0oX+GXwVMRx3LJ9IZtyMKPm/pZsnxsRkgWxWsuWDD buQX0bmNf3laxQsCJRJAD95JxoComiIa/4uWm1xE2ZQ5gXTGBUNLiVfJ1WqmNE5I Df7bkODdXzhMlCPuTurjvvp87WJkoHi3jTvwNIXtQYneYjbT+nyChLOYQ2A7t5cU +VNW+em46Qu+owk1c6NU0jhKWgnQ9br1JbFzOgR42pEkI1nlSSrKr71LAuLjRLGL eaPjWS9RaIaWSUNpkKInNeVQTrxAxuo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:48 2025 by rpki-client