$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/88b01f75-289b-3917-81b2-0639885fa215.roa File: 88b01f75-289b-3917-81b2-0639885fa215.roa (raw, json) Hash identifier: /wgqQ+rd38yToSYskpqDfK+rYyPoU5kgAYvmnBYdKWU= Subject key identifier: CE:B9:9B:09:78:B0:BD:D3:49:DA:88:86:30:59:79:37:3B:BF:06:4A Certificate issuer: /CN=b54409ec-efa1-4239-8321-5d6ff0ea596e Certificate serial: 010D0C9F432858499CDDF09F43162EFAF650EB00 Authority key identifier: BB:C8:26:DF:56:C8:25:77:8C:03:3B:98:AB:BE:E7:A3:DB:16:8C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/88b01f75-289b-3917-81b2-0639885fa215.roa Signing time: Tue 22 Apr 2025 17:27:07 +0000 ROA not before: Tue 22 Apr 2025 17:27:07 +0000 ROA not after: Mon 21 Jul 2025 17:27:07 +0000 asID: 395367 IP address blocks: 23.137.60.0/24 maxlen: 24 2604:aa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/b54409ec-efa1-4239-8321-5d6ff0ea596e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/b54409ec-efa1-4239-8321-5d6ff0ea596e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:dd:f0:9f:43:16:2e:fa:f6:50:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b54409ec-efa1-4239-8321-5d6ff0ea596e Validity Not Before: Apr 22 17:27:07 2025 GMT Not After : Jul 21 17:27:07 2025 GMT Subject: CN=a90504d7-98c6-4fac-b0f1-dca59176f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:8f:aa:82:20:c3:38:95:61:6f:7e:82:80: c6:39:6a:52:75:08:9f:75:48:c6:15:05:04:85:9a: 11:d9:01:a7:48:c2:38:e4:7e:7e:78:f0:91:ee:03: 66:84:eb:61:6e:3e:e7:9d:c2:3c:4b:b8:15:5b:ad: 07:80:58:df:ce:6c:92:42:8f:8b:4d:0e:f4:c7:bc: c4:34:1d:28:91:46:bc:8f:1b:c1:7f:5f:13:e2:87: c1:58:c4:8e:4a:16:fe:77:02:6a:79:5a:ef:12:76: aa:e9:24:60:2e:17:68:72:58:44:83:36:b4:35:44: 78:50:ee:1c:79:2e:94:7d:ba:37:3f:01:ed:ce:54: 61:d0:0b:f2:61:eb:6b:36:67:77:94:e4:31:e0:ef: a9:17:37:e0:28:58:b6:35:3d:d6:a6:b5:11:cf:73: 9f:05:cb:52:df:0f:84:fb:2d:8b:22:1c:1c:fe:18: d6:80:9e:59:7c:54:43:1f:99:9d:80:e0:fc:e5:78: 0d:00:a9:dd:d4:a0:7b:fb:55:cb:75:99:74:e2:aa: e7:78:80:13:a5:fd:91:0c:d4:45:60:b8:8b:59:9e: b3:40:d4:00:1e:04:1e:24:28:2e:12:8b:1c:69:3d: c1:2f:66:49:e0:38:4c:83:bf:db:58:48:f3:a8:c0: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:9B:09:78:B0:BD:D3:49:DA:88:86:30:59:79:37:3B:BF:06:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/88b01f75-289b-3917-81b2-0639885fa215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/b54409ec-efa1-4239-8321-5d6ff0ea596e.crl X509v3 Authority Key Identifier: keyid:BB:C8:26:DF:56:C8:25:77:8C:03:3B:98:AB:BE:E7:A3:DB:16:8C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e.cer sbgp-ipAddrBlock: critical IPv4: 23.137.60.0/24 IPv6: 2604:aa0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c6:c4:ae:e1:3f:67:c8:ff:4e:75:1c:f7:8f:47:87:61:f7: 6f:ea:67:4e:b5:6b:68:84:b8:6b:92:5e:4e:d7:fb:1a:3f:ba: e5:9e:1d:2c:fa:4a:22:ec:d8:05:cb:bb:82:78:b5:71:49:2c: 82:1b:e8:62:c4:57:cb:32:36:5a:76:d3:3f:62:b9:13:fe:0c: 8e:93:a3:99:4a:fa:0b:d0:f1:ec:94:7f:ca:41:86:4f:5e:82: 9c:3f:78:6f:f5:2b:d3:b4:4d:dd:f5:d7:d6:94:bd:ae:9d:f0: c3:10:9f:50:2b:3d:c8:1f:b1:1f:53:3d:39:5c:21:54:7d:fe: 34:86:72:7e:f1:07:a6:67:bf:60:1e:bc:42:33:d8:5c:d0:21: 02:72:76:d1:f9:77:98:4a:1e:91:79:ff:d2:9f:f2:60:39:9f: cc:cd:a0:10:45:3e:b3:ba:19:26:0a:0d:52:fd:77:a9:73:57: a7:fd:02:79:02:69:61:e4:1c:f1:11:10:19:0b:a1:89:79:b0: ae:e1:05:73:06:6a:87:76:d3:47:5e:58:44:1d:7f:b1:70:a8: 0e:ae:66:79:bc:48:01:31:e1:1d:b7:a1:de:69:23:b5:67:ec: b8:8f:3f:f0:04:63:a9:f9:31:78:46:4f:56:48:12:eb:f2:9c: 78:f8:0e:b8 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEmc3fCfQxYu+vZQ6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU0NDA5ZWMtZWZhMS00MjM5LTgzMjEtNWQ2ZmYwZWE1 OTZlMB4XDTI1MDQyMjE3MjcwN1oXDTI1MDcyMTE3MjcwN1owLzEtMCsGA1UEAxMk YTkwNTA0ZDctOThjNi00ZmFjLWIwZjEtZGNhNTkxNzZmNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH6PqoIgwziVYW9+goDGOWpSdQifdUjGFQUE hZoR2QGnSMI45H5+ePCR7gNmhOthbj7nncI8S7gVW60HgFjfzmySQo+LTQ70x7zE NB0okUa8jxvBf18T4ofBWMSOShb+dwJqeVrvEnaq6SRgLhdoclhEgza0NUR4UO4c eS6Ufbo3PwHtzlRh0AvyYetrNmd3lOQx4O+pFzfgKFi2NT3WprURz3OfBctS3w+E +y2LIhwc/hjWgJ5ZfFRDH5mdgOD85XgNAKnd1KB7+1XLdZl04qrneIATpf2RDNRF YLiLWZ6zQNQAHgQeJCguEoscaT3BL2ZJ4DhMg7/bWEjzqMB9nwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFM65mwl4sL3TSdqIhjBZeTc7vwZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNTQ0 MDllYy1lZmExLTQyMzktODMyMS01ZDZmZjBlYTU5NmUvODhiMDFmNzUtMjg5Yi0z OTE3LTgxYjItMDYzOTg4NWZhMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjU0NDA5ZWMtZWZhMS00MjM5LTgz MjEtNWQ2ZmYwZWE1OTZlL2I1NDQwOWVjLWVmYTEtNDIzOS04MzIxLTVkNmZmMGVh NTk2ZS5jcmwwHwYDVR0jBBgwFoAUu8gm31bIJXeMAzuYq77no9sWjOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNTQ0MDllYy1lZmExLTQyMzktODMyMS01ZDZm ZjBlYTU5NmUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4k8MA0E AgACMAcDBQAmBAqgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKXGxK7hP2fI/051HPePR4dh92/qZ061a2iE uGuSXk7X+xo/uuWeHSz6SiLs2AXLu4J4tXFJLIIb6GLEV8syNlp20z9iuRP+DI6T o5lK+gvQ8eyUf8pBhk9egpw/eG/1K9O0Td3119aUva6d8MMQn1ArPcgfsR9TPTlc IVR9/jSGcn7xB6Znv2AevEIz2FzQIQJydtH5d5hKHpF5/9Kf8mA5n8zNoBBFPrO6 GSYKDVL9d6lzV6f9AnkCaWHkHPEREBkLoYl5sK7hBXMGaod200deWEQdf7FwqA6u Znm8SAEx4R23od5pI7Vn7LiPP/AEY6n5MXhGT1ZIEuvynHj4Drg= -----END CERTIFICATE-----Generated at Fri May 2 17:28:16 2025 by rpki-client