$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa File: 4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa (raw, json) Hash identifier: vDmCjjrwmBVOSiIJf0pegplaJ+xdyhhzbFNK67Ob4+c= Subject key identifier: 79:2A:98:9B:60:36:B9:DE:14:BA:92:F8:0E:5B:82:F5:4D:F6:5C:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6EF4A2D3CAA8F1F7FDC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.74.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ef:4a:2d:3c:aa:8f:1f:7f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=dc024b0b-408c-46ba-8ed3-970895569fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:26:97:31:c2:49:f5:53:ac:e1:38:81:e7: ed:4d:c3:87:0d:b5:55:a4:e7:dc:3f:8a:5b:ef:4b: dd:3b:09:67:10:ce:0a:0a:7c:74:7b:d0:2e:a8:80: 02:32:bd:06:5c:85:f4:fc:b7:19:b0:28:47:2d:0a: 18:1f:a1:0c:04:c4:dd:de:4f:1a:26:38:ef:76:74: 5c:f3:54:69:c5:71:bc:a4:b0:9d:95:5b:37:cb:fd: ad:81:5b:82:c8:02:36:56:92:96:d1:ac:cf:8a:92: 83:aa:8f:f4:be:11:ae:c0:3f:a9:c4:5d:a7:2d:00: ed:7d:1e:99:e5:18:2c:f8:4c:f4:da:df:cf:b0:d7: 34:ec:77:9e:10:5a:23:25:09:af:f2:0f:19:7b:d2: ad:1d:89:e2:4c:de:f7:ee:95:95:95:9e:1f:1e:8f: b9:cd:71:fd:e3:f1:de:59:40:b2:3d:e6:5c:9b:1d: 1f:f6:74:a4:d6:9a:75:59:a4:a1:76:95:26:d1:bd: 30:4f:8d:d3:f9:b2:52:d8:d7:b4:22:2a:fb:ba:81: 8c:80:73:b6:2d:79:a2:2c:c2:b9:db:70:01:ad:b5: bf:42:5c:12:1a:fc:25:a5:17:81:96:64:80:1b:b9: f2:a9:7e:1f:3c:88:a1:2f:3f:f2:33:9c:40:69:ac: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2A:98:9B:60:36:B9:DE:14:BA:92:F8:0E:5B:82:F5:4D:F6:5C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.74.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:68:68:91:fb:66:fd:f9:7d:25:be:61:41:39:95:82:c6:2f: cb:ef:06:f8:66:9e:8e:5c:e5:16:26:f5:03:3f:e7:c3:5e:f4: 48:1d:f3:c6:8e:94:11:a9:32:21:bd:c0:ce:8f:5f:69:a0:68: b1:0f:26:5c:1c:00:c0:a5:94:d5:51:67:db:ed:86:f0:d3:b2: 9f:44:b7:df:fb:8b:2b:01:d9:cd:ab:3c:fa:e7:d8:b8:c8:05: 22:81:8d:ab:7c:bb:fd:c1:68:a9:43:55:75:19:3e:1e:f0:26: b6:56:3f:fe:0b:63:62:a8:1f:47:2d:1e:9e:40:bc:f3:1f:29: 7f:dd:ae:ab:ab:84:f5:9e:a4:e4:b0:0c:d9:e4:ef:c2:eb:bc: ea:d6:85:95:df:3f:30:1b:cd:e1:94:bc:79:72:49:54:b7:d9: c6:60:d3:47:2a:cb:42:d7:6d:bf:58:e6:ce:9b:14:f1:54:6a: e6:3c:42:a9:16:1b:bf:fc:3b:d2:8b:a3:a6:16:63:18:e9:91: 30:43:d3:b4:0d:83:7b:57:01:90:5b:60:fc:9c:7e:61:f9:6a: e7:f2:32:50:35:3e:03:9a:4c:e1:3e:98:51:0d:40:55:25:96: 20:db:5c:0f:87:18:4b:92:a1:eb:71:18:d0:16:77:f6:e8:1e: 91:d3:a2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1u9KLTyqjx9/3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZGMwMjRiMGItNDA4Yy00NmJhLThlZDMtOTcwODk1NTY5ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP0mlzHCSfVTrOE4geftTcOHDbVVpOfcP4pb 70vdOwlnEM4KCnx0e9AuqIACMr0GXIX0/LcZsChHLQoYH6EMBMTd3k8aJjjvdnRc 81RpxXG8pLCdlVs3y/2tgVuCyAI2VpKW0azPipKDqo/0vhGuwD+pxF2nLQDtfR6Z 5Rgs+Ez02t/PsNc07HeeEFojJQmv8g8Ze9KtHYniTN737pWVlZ4fHo+5zXH94/He WUCyPeZcmx0f9nSk1pp1WaShdpUm0b0wT43T+bJS2Ne0Iir7uoGMgHO2LXmiLMK5 23ABrbW/QlwSGvwlpReBlmSAG7nyqX4fPIihLz/yM5xAaaym3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkqmJtgNrneFLqS+A5bgvVN9lxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI4YmE4ZTMtMjY4ZS0z ZTIxLThmMjUtY2I0OTIzOTg3YzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0oPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1oaJH7Zv35fSW+YUE5lYLGL8vvBvhmno5c5RYm9QM/58Ne9Egd88aO lBGpMiG9wM6PX2mgaLEPJlwcAMCllNVRZ9vthvDTsp9Et9/7iysB2c2rPPrn2LjI BSKBjat8u/3BaKlDVXUZPh7wJrZWP/4LY2KoH0ctHp5AvPMfKX/drqurhPWepOSw DNnk78LrvOrWhZXfPzAbzeGUvHlySVS32cZg00cqy0LXbb9Y5s6bFPFUauY8QqkW G7/8O9KLo6YWYxjpkTBD07QNg3tXAZBbYPycfmH5aufyMlA1PgOaTOE+mFENQFUl liDbXA+HGEuSoetxGNAWd/boHpHTokc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:28 2025 by rpki-client