$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa File: a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa (raw, json) Hash identifier: PdLmLtZox+GSuGqKCIdV9AfioT4WFPUSoq2R/hZ86DM= Subject key identifier: 5E:5D:68:7A:B7:3C:2B:F9:C4:99:5B:04:B9:01:99:F3:15:53:32:92 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858492CAE9849AA0B1DD8152214C6 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 30238 IP address blocks: 23.90.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:98:49:aa:0b:1d:d8:15:22:14:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3032d971-a5d4-49eb-b6d4-be11e6ce23b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:e6:09:06:e4:97:54:67:b1:57:c3:1e:be: 06:f6:0c:b8:a6:82:d3:ce:7e:d1:b4:d4:ca:ab:09: 6a:da:d7:f0:59:f3:66:ea:3b:1f:4c:c9:d3:dd:4e: 29:d9:3c:d6:f8:19:d1:f1:a4:b2:9d:fb:8e:3d:3b: d6:11:c4:21:e3:c3:0f:1e:bc:b1:04:da:ff:d4:6a: 16:c5:e2:e2:cd:c4:52:49:f1:03:0f:18:4c:2d:42: 61:7d:4e:35:1a:42:8c:b6:6d:01:a8:fc:4b:31:d6: 4a:69:1c:c2:75:62:95:48:49:19:11:b3:df:fc:4e: df:05:1f:20:92:17:9b:10:01:9c:9c:84:19:87:93: 40:3d:fc:60:f7:db:9e:35:79:b9:37:bb:27:dc:b1: 83:bf:7b:9e:a5:af:1b:4c:e4:fc:62:c5:1f:41:4c: 2f:3c:3a:26:9d:46:4f:0b:95:10:f5:7f:5d:e0:67: 84:f5:f7:24:f6:c2:b4:f4:b8:6c:7d:a8:d4:d5:2d: c1:79:87:80:15:37:68:a8:df:db:60:c0:74:6b:73: 1f:77:6e:53:c2:1b:d2:f1:cd:98:24:9d:80:9a:7a: 72:f8:16:1d:7e:93:03:b9:1b:f6:2f:d3:e1:b5:62: 0e:c4:76:73:a6:0b:e3:91:58:9a:2d:ab:dc:4f:d1: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5D:68:7A:B7:3C:2B:F9:C4:99:5B:04:B9:01:99:F3:15:53:32:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0b:55:ab:51:98:5d:5d:85:ee:bd:25:86:b9:be:95:49:c7: 41:7e:1d:1d:98:c1:5e:f7:83:8a:4a:cd:b2:72:a3:a4:ea:0e: 1c:b6:64:bd:47:79:8e:f5:9c:20:36:46:ef:de:b5:86:70:29: c7:ea:be:42:3d:2b:b0:8d:07:6c:c8:8e:cd:c4:9e:16:99:81: 7a:73:3d:c7:5f:a5:b5:4b:f2:db:bd:90:f2:05:5c:ca:cf:90: df:83:dd:76:58:9b:3f:3b:5c:31:f2:bf:7f:4d:14:c7:0d:4d: 09:12:b9:d2:9b:25:02:20:31:ea:13:4e:b1:a2:c2:37:c2:85: 7d:2a:1f:a9:35:22:76:b9:24:55:43:4f:6b:38:5f:e5:85:bc: 80:3b:9a:6d:4c:f6:2e:cf:f1:67:e6:6b:f1:52:bf:17:37:59: a6:17:be:92:06:12:21:3e:7d:e4:4d:dd:09:bb:a1:41:85:bc: 29:e7:13:1e:53:6b:5e:1e:07:b2:4b:cf:73:26:f8:ba:10:84: 66:da:9a:3c:8b:31:53:29:1d:fa:94:b9:f9:7b:f6:7b:79:dd: d2:67:96:86:e2:a0:fc:ea:65:18:21:20:56:07:62:98:5a:85: de:e6:33:71:82:20:8b:b2:fa:b5:25:7c:07:ad:0b:db:5c:9a: 05:81:82:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrphJqgsd2BUiFMYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzAzMmQ5NzEtYTVkNC00OWViLWI2ZDQtYmUxMWU2Y2UyM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuTmCQbkl1RnsVfDHr4G9gy4poLTzn7RtNTK qwlq2tfwWfNm6jsfTMnT3U4p2TzW+BnR8aSynfuOPTvWEcQh48MPHryxBNr/1GoW xeLizcRSSfEDDxhMLUJhfU41GkKMtm0BqPxLMdZKaRzCdWKVSEkZEbPf/E7fBR8g khebEAGcnIQZh5NAPfxg99ueNXm5N7sn3LGDv3uepa8bTOT8YsUfQUwvPDomnUZP C5UQ9X9d4GeE9fck9sK09LhsfajU1S3BeYeAFTdoqN/bYMB0a3Mfd25TwhvS8c2Y JJ2Amnpy+BYdfpMDuRv2L9PhtWIOxHZzpgvjkViaLavcT9GlVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5daHq3PCv5xJlbBLkBmfMVUzKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTcwZmI5OWYtNWMwZS0z NzRjLWE5ZDUtOGRhOWI0Y2E1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8LVatRmF1dhe69JYa5vpVJx0F+HR2YwV73g4pKzbJyo6TqDhy2ZL1H eY71nCA2Ru/etYZwKcfqvkI9K7CNB2zIjs3EnhaZgXpzPcdfpbVL8tu9kPIFXMrP kN+D3XZYmz87XDHyv39NFMcNTQkSudKbJQIgMeoTTrGiwjfChX0qH6k1Ina5JFVD T2s4X+WFvIA7mm1M9i7P8Wfma/FSvxc3WaYXvpIGEiE+feRN3Qm7oUGFvCnnEx5T a14eB7JLz3Mm+LoQhGbamjyLMVMpHfqUufl79nt53dJnlobioPzqZRghIFYHYpha hd7mM3GCIIuy+rUlfAetC9tcmgWBgnI= -----END CERTIFICATE-----Generated at Sat Apr 12 01:36:33 2025 by rpki-client