$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa File: 3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa (raw, json) Hash identifier: v42bqGrKzCVlQrOGKkYCmgDz36UApwFeawkErx3x294= Subject key identifier: B8:3D:ED:59:50:14:DC:5B:28:1C:58:A7:3D:5D:C3:4F:CE:FD:01:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497544648F39B74609EFE928A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.223.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:64:8f:39:b7:46:09:ef:e9:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=dad3ed88-b87c-433a-adea-565baaaf30b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:10:46:46:e0:f6:f2:3a:85:28:72:dc:29: e0:d3:7d:0b:43:f4:f6:60:c4:c7:f9:0b:ca:7a:94: 17:ab:f5:99:36:25:2b:b3:4d:e4:e5:f4:8e:60:48: bb:44:49:f3:64:72:1f:e6:43:b1:82:0e:9b:2e:db: f2:34:9c:2f:04:b8:c8:e7:7e:2c:80:bc:86:c3:4e: 72:fa:28:6e:c5:a8:4c:71:ec:b9:2a:6e:f4:b9:5e: ef:02:65:69:76:28:41:e9:89:bb:bf:34:01:81:d8: 88:fb:65:65:51:d2:0b:f1:43:88:86:33:4a:72:ba: e5:6f:8c:8d:41:a1:93:5b:62:03:ec:99:cb:ce:cd: bc:87:c5:8c:1c:53:94:9a:e8:7c:f8:9a:83:cc:0a: 08:43:fe:d9:76:a0:de:f8:c2:f1:24:8c:f3:a6:97: 17:60:a8:9c:19:98:89:8f:ae:3b:79:b4:88:02:17: b9:46:d7:1a:a0:e6:b8:85:2f:8c:69:07:97:78:8e: e4:87:74:5a:d0:0e:e7:14:fa:ed:a2:3a:58:91:e5: 7b:ee:61:e9:f7:f8:6d:62:c5:05:5f:b6:7e:d6:0f: a3:21:75:93:e3:a6:a3:65:f0:5c:53:15:65:c3:a4: a1:3e:db:7f:4d:8d:c3:92:65:51:ee:f8:3d:c2:12: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3D:ED:59:50:14:DC:5B:28:1C:58:A7:3D:5D:C3:4F:CE:FD:01:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f1:79:68:98:21:33:cb:29:b6:3c:77:f0:f7:77:f8:8f:f4: 9f:0f:ac:a8:8f:31:f6:90:41:02:3c:b4:bf:ae:a2:8e:64:c2: 11:48:3a:c7:e5:32:a5:a4:4c:4b:d3:ff:f1:d4:9b:8e:97:f1: 25:14:91:ef:39:49:0f:99:3e:71:4a:0e:d4:2d:84:62:60:f1: fb:6e:ed:6f:4d:d9:83:49:07:9b:4e:da:3b:b7:c4:bd:eb:74: 83:0d:2d:17:0d:30:1d:e0:a1:f1:a8:67:ad:0e:11:7d:8e:b4: 25:b9:ec:4c:93:fc:96:45:65:ff:67:a0:8c:30:2c:1d:ac:ec: cc:21:29:03:15:c6:bf:c1:86:03:d1:ec:90:84:76:fd:9e:d4: ad:ea:c5:7c:e1:b7:a8:60:15:cb:67:3a:1d:20:bb:0d:9e:60: 13:dd:28:0d:7c:08:d0:48:14:b5:eb:d5:a4:27:29:bf:c8:cb: 03:49:75:29:c0:7a:18:6c:50:81:a6:7a:a7:81:dc:e4:7b:11: 2c:f6:f8:3c:dc:3f:06:dd:27:b0:f6:ae:fd:19:e8:c1:26:fb: 01:37:94:1f:14:ec:22:71:7a:02:79:c3:f7:b4:af:4b:98:96: a1:67:2f:28:e7:aa:5f:54:0f:dc:c5:42:65:dd:e9:24:12:0f: bc:52:7e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RGSPObdGCe/pKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZGFkM2VkODgtYjg3Yy00MzNhLWFkZWEtNTY1YmFhYWYzMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpkQRkbg9vI6hShy3Cng030LQ/T2YMTH+QvK epQXq/WZNiUrs03k5fSOYEi7REnzZHIf5kOxgg6bLtvyNJwvBLjI534sgLyGw05y +ihuxahMcey5Km70uV7vAmVpdihB6Ym7vzQBgdiI+2VlUdIL8UOIhjNKcrrlb4yN QaGTW2ID7JnLzs28h8WMHFOUmuh8+JqDzAoIQ/7ZdqDe+MLxJIzzppcXYKicGZiJ j647ebSIAhe5RtcaoOa4hS+MaQeXeI7kh3Ra0A7nFPrtojpYkeV77mHp9/htYsUF X7Z+1g+jIXWT46ajZfBcUxVlw6ShPtt/TY3DkmVR7vg9whIdSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg97VlQFNxbKBxYpz1dw0/O/QHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YxOGUwZmYtNWY4My0z MTE2LWFjNjMtM2E5Y2VkY2Y1NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnxeWiYITPLKbY8d/D3d/iP9J8PrKiPMfaQQQI8tL+uoo5kwhFIOsfl MqWkTEvT//HUm46X8SUUke85SQ+ZPnFKDtQthGJg8ftu7W9N2YNJB5tO2ju3xL3r dIMNLRcNMB3gofGoZ60OEX2OtCW57EyT/JZFZf9noIwwLB2s7MwhKQMVxr/BhgPR 7JCEdv2e1K3qxXzht6hgFctnOh0guw2eYBPdKA18CNBIFLXr1aQnKb/IywNJdSnA ehhsUIGmeqeB3OR7ESz2+DzcPwbdJ7D2rv0Z6MEm+wE3lB8U7CJxegJ5w/e0r0uY lqFnLyjnql9UD9zFQmXd6SQSD7xSflA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:34 2025 by rpki-client