$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa File: fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa (raw, json) Hash identifier: 4NOAjrVTSS2dXt9OtWAuDLoa02m9gFVFvwBhvzcsR+A= Subject key identifier: D2:C8:EA:AD:18:22:B2:D8:D4:F4:12:4B:E7:6F:B6:1A:1B:47:2D:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC959746A2E7374C0F02780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 20940 IP address blocks: 23.32.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:59:74:6a:2e:73:74:c0:f0:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=7da1ce60-dc4b-469e-98f4-acd9067407e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:20:2e:7f:cf:b9:69:3b:4b:57:29:01:5e: 16:d4:1c:11:bf:79:f6:e1:99:01:1b:de:e3:3a:cb: 5a:0c:4e:50:91:2c:54:37:10:b3:3b:3d:3f:e3:4f: 5c:95:37:05:c4:a7:4d:4a:b5:42:8a:d4:69:d9:19: 20:a3:f5:42:64:b5:2f:87:45:b9:0c:4c:5c:4b:d9: aa:e0:a2:75:7f:91:ef:aa:fc:dc:b8:e0:21:08:05: ed:42:82:d7:b1:ee:a5:05:da:b9:e9:19:62:7d:d5: cd:b8:9a:a3:fb:c1:dc:07:8c:17:bc:32:b1:54:a4: fc:f1:69:cd:fb:04:af:b8:67:16:41:af:0f:81:d7: be:3f:65:c0:79:39:64:66:bf:f2:55:0d:d3:06:41: 0f:bc:33:a2:8d:36:be:20:c0:f1:d3:57:04:8f:0f: 42:61:50:5b:20:84:1f:ba:06:9b:f9:c1:91:9f:14: c2:93:f0:ff:d8:f6:4c:25:4a:e6:27:b6:e2:a9:f7: 1e:b3:e9:a1:8d:55:c7:d7:b1:ed:92:b5:3a:89:09: 28:e1:c4:21:ef:17:99:55:49:8d:f1:df:28:03:07: 9d:69:47:bd:8e:53:0d:83:8b:8d:24:93:c2:8f:e9: d7:ed:8a:8d:42:66:21:b3:6e:71:4a:6c:51:76:27: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C8:EA:AD:18:22:B2:D8:D4:F4:12:4B:E7:6F:B6:1A:1B:47:2D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8c2dc3-51ba-3d78-a08b-d207fc478930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:65:02:8b:6c:75:8e:cb:5f:2b:05:6c:a2:4a:25:f8:60:61: 13:c4:3c:ee:ba:2c:b1:bc:5a:be:18:2b:98:54:f9:89:be:0d: de:1a:ad:2f:b1:e3:66:54:84:2e:7a:5f:77:6e:32:fe:76:9d: 3d:6a:7a:41:65:8d:5d:cb:17:f6:38:3b:e2:d3:56:0a:6c:fd: dd:96:15:0f:20:cd:21:77:30:2a:c7:43:a8:74:6a:f8:99:b1: 84:c2:c1:cc:df:f8:20:8e:96:5a:53:58:33:37:67:a4:d4:7e: 42:ca:4a:0c:7f:66:1b:59:32:b7:9a:20:fc:98:55:e0:07:6d: be:6f:d2:27:5f:a4:f5:12:ee:f9:45:0c:9b:6f:c8:ba:2b:73: d4:2a:1d:ca:a8:e4:c0:8d:42:a3:18:18:42:4a:72:47:92:52: f5:b7:e1:09:16:e1:6b:1f:8f:ec:8d:23:12:b5:9d:86:d8:8c: 88:34:dc:ba:46:75:b1:e7:e9:46:e8:db:e9:31:a6:50:7c:76: 6b:8a:40:14:75:62:5f:7d:97:72:ff:af:e2:63:60:78:fc:a2: 56:d3:35:6a:08:bf:b3:2b:54:18:d9:dc:ce:c9:ae:e7:4f:a9: 80:5b:cc:1c:29:f6:a7:22:10:f0:8e:4e:f9:5a:2b:59:49:49: 11:3d:ad:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVl0ai5zdMDwJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk N2RhMWNlNjAtZGM0Yi00NjllLTk4ZjQtYWNkOTA2NzQwN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JMgLn/PuWk7S1cpAV4W1BwRv3n24ZkBG97j OstaDE5QkSxUNxCzOz0/409clTcFxKdNSrVCitRp2Rkgo/VCZLUvh0W5DExcS9mq 4KJ1f5HvqvzcuOAhCAXtQoLXse6lBdq56RlifdXNuJqj+8HcB4wXvDKxVKT88WnN +wSvuGcWQa8Pgde+P2XAeTlkZr/yVQ3TBkEPvDOijTa+IMDx01cEjw9CYVBbIIQf ugab+cGRnxTCk/D/2PZMJUrmJ7biqfces+mhjVXH17HtkrU6iQko4cQh7xeZVUmN 8d8oAwedaUe9jlMNg4uNJJPCj+nX7YqNQmYhs25xSmxRdicqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLI6q0YIrLY1PQSS+dvthobRy0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmM4YzJkYzMtNTFiYS0z ZDc4LWEwOGItZDIwN2ZjNDc4OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxlAotsdY7LXysFbKJKJfhgYRPEPO66LLG8Wr4YK5hU+Ym+Dd4arS+x 42ZUhC56X3duMv52nT1qekFljV3LF/Y4O+LTVgps/d2WFQ8gzSF3MCrHQ6h0aviZ sYTCwczf+CCOllpTWDM3Z6TUfkLKSgx/ZhtZMreaIPyYVeAHbb5v0idfpPUS7vlF DJtvyLorc9QqHcqo5MCNQqMYGEJKckeSUvW34QkW4Wsfj+yNIxK1nYbYjIg03LpG dbHn6Ubo2+kxplB8dmuKQBR1Yl99l3L/r+JjYHj8olbTNWoIv7MrVBjZ3M7JrudP qYBbzBwp9qciEPCOTvlaK1lJSRE9rco= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:32 2025 by rpki-client