$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3496fb5c-d759-3391-aae8-b67efe932177.roa File: 3496fb5c-d759-3391-aae8-b67efe932177.roa (raw, json) Hash identifier: my1JmqXSYUo1zmYxahO1BnIxqwRZs2iVyd6B7bfB+wI= Subject key identifier: 26:AB:57:12:0A:7A:A5:3A:87:9E:48:08:FB:2A:A5:08:6F:96:E1:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABED3A47FA8C5BADDCE4A10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3496fb5c-d759-3391-aae8-b67efe932177.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.39.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:d3:a4:7f:a8:c5:ba:dd:ce:4a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=bd65da5b-f14c-4bac-a40c-363a600b5bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:44:ac:d1:27:6c:ff:5b:d1:57:fb:5d:5a: e0:4b:00:38:5f:69:2e:08:d1:9e:dc:eb:7a:0f:f0: 56:7c:4c:49:d1:06:21:8c:0d:67:a9:30:6c:4f:08: 16:66:61:af:6f:49:dc:e9:9e:df:60:8e:98:80:b6: a8:53:bc:ce:c9:f9:2e:c4:8d:c9:9f:19:39:51:cf: 66:40:db:8f:95:38:b3:4b:14:cb:cc:5e:f2:4a:85: 02:69:1c:43:07:55:8e:66:49:a2:ee:bc:64:6e:18: 0a:08:5d:41:b8:12:6f:18:b9:7c:3e:21:11:7a:b8: ef:7a:1f:24:6a:34:98:82:ea:5e:f0:ef:21:1f:e9: d7:2c:ca:72:fe:81:d7:3d:f9:82:18:72:46:85:d2: 5e:1c:a1:8c:60:fa:44:44:2a:68:64:91:66:17:5c: 83:80:9e:1c:e6:12:fa:89:eb:d4:88:18:8f:f0:26: 3c:b0:32:f1:20:7f:4b:f8:d8:2c:bb:af:bd:be:4c: 2a:63:2f:ed:7d:1d:5d:ef:38:73:de:a9:3c:87:6c: 95:fd:46:58:4a:d0:78:f4:7c:a1:ee:96:e4:7a:30: 00:1f:bf:8e:a2:fa:dd:05:06:ca:b9:ee:dd:84:e6: 49:ea:39:2e:0e:56:bf:7c:3e:02:f8:ac:b5:55:96: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AB:57:12:0A:7A:A5:3A:87:9E:48:08:FB:2A:A5:08:6F:96:E1:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3496fb5c-d759-3391-aae8-b67efe932177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:31:00:c8:e0:d7:b4:f6:00:7b:a7:53:be:7a:bb:36:48:02: 03:0a:61:aa:da:21:37:74:bc:67:78:0a:fc:6f:77:f6:d9:3f: fe:3a:81:ac:a6:d3:cf:48:0d:6c:ba:b2:93:2e:d7:39:a1:8e: 41:e7:35:81:f8:25:41:47:5c:22:f7:2e:87:d1:eb:04:3d:0d: 20:1a:42:76:12:c7:0d:83:98:ae:73:fc:09:87:9a:22:b1:54: c1:fd:ff:9a:16:d5:0b:a4:e2:0e:7e:6f:5a:80:ac:ff:a4:c8: 1a:80:35:47:66:b3:b6:59:fe:99:c2:b5:65:af:b5:9e:4f:31: 64:6d:e7:bc:b6:92:cd:fc:0a:22:16:22:ff:c5:7a:26:13:84: af:03:88:3a:71:d3:e8:81:3c:d9:30:a4:30:95:90:b2:01:50: 69:a1:a6:06:0f:cc:e5:e9:9d:76:59:3b:54:b4:f5:47:86:23: 47:89:fd:0d:3f:e8:c6:d6:8d:7c:02:2f:fa:c6:d0:20:37:ad: cd:06:be:6a:22:5f:12:20:3f:30:2f:94:68:72:b6:73:4c:d2: b7:e9:57:59:99:ba:06:6a:0c:94:be:80:f7:f9:c1:41:a6:46: 14:2b:ef:61:21:4c:db:c8:67:36:7f:e8:11:8b:55:f9:85:60: 1e:7f:15:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavtOkf6jFut3OShAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk YmQ2NWRhNWItZjE0Yy00YmFjLWE0MGMtMzYzYTYwMGI1YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRBErNEnbP9b0Vf7XVrgSwA4X2kuCNGe3Ot6 D/BWfExJ0QYhjA1nqTBsTwgWZmGvb0nc6Z7fYI6YgLaoU7zOyfkuxI3Jnxk5Uc9m QNuPlTizSxTLzF7ySoUCaRxDB1WOZkmi7rxkbhgKCF1BuBJvGLl8PiERerjveh8k ajSYgupe8O8hH+nXLMpy/oHXPfmCGHJGhdJeHKGMYPpERCpoZJFmF1yDgJ4c5hL6 ievUiBiP8CY8sDLxIH9L+Ngsu6+9vkwqYy/tfR1d7zhz3qk8h2yV/UZYStB49Hyh 7pbkejAAH7+OovrdBQbKue7dhOZJ6jkuDla/fD4C+Ky1VZbeAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCarVxIKeqU6h55ICPsqpQhvluHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ5NmZiNWMtZDc1OS0z MzkxLWFhZTgtYjY3ZWZlOTMyMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQxAMjg17T2AHunU756uzZIAgMKYaraITd0vGd4Cvxvd/bZP/46gaym 089IDWy6spMu1zmhjkHnNYH4JUFHXCL3LofR6wQ9DSAaQnYSxw2DmK5z/AmHmiKx VMH9/5oW1Quk4g5+b1qArP+kyBqANUdms7ZZ/pnCtWWvtZ5PMWRt57y2ks38CiIW Iv/FeiYThK8DiDpx0+iBPNkwpDCVkLIBUGmhpgYPzOXpnXZZO1S09UeGI0eJ/Q0/ 6MbWjXwCL/rG0CA3rc0GvmoiXxIgPzAvlGhytnNM0rfpV1mZugZqDJS+gPf5wUGm RhQr72EhTNvIZzZ/6BGLVfmFYB5/FQk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:00 2025 by rpki-client