$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/693c058b-fe86-3b29-854c-07c6a45b096c.roa File: 693c058b-fe86-3b29-854c-07c6a45b096c.roa (raw, json) Hash identifier: +nv3Vo1ziIB0tOupAJwXx1nUBoqns16IvbYFd3rglfM= Subject key identifier: 69:59:E5:30:7E:96:C6:D4:01:32:A5:0E:FA:F0:DE:48:28:BF:6F:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849568EB5FF015E6EF245013D88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/693c058b-fe86-3b29-854c-07c6a45b096c.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.55.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:b5:ff:01:5e:6e:f2:45:01:3d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=81436ab0-82c8-4056-8806-ab97d64e80c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:26:03:b5:0a:59:ac:0e:29:41:db:66:95: 74:07:d3:48:8a:65:43:98:d5:dd:be:74:c6:bb:fd: 56:76:4f:ad:5e:cf:08:99:c0:b1:79:a0:2b:38:72: 79:cc:af:50:29:61:8f:da:cc:2b:67:85:89:76:76: 87:1d:eb:92:01:32:86:6e:e6:fa:e4:28:53:0b:1b: c9:23:a1:13:88:11:37:fd:25:a4:ce:5b:d2:76:21: f0:f9:4d:a4:0f:cc:a5:9d:8c:c2:e3:6b:10:a4:a5: ed:00:5e:74:9b:01:7d:e4:c7:a8:f1:bf:fc:98:be: b7:70:dc:3b:5c:e2:de:38:7a:f7:f1:92:38:bf:56: bb:30:64:90:4a:79:eb:bd:44:62:c7:c5:a1:b8:19: 77:6c:c8:04:47:59:4a:b9:0f:1d:a5:49:13:38:9c: ba:11:56:6c:9c:1c:12:56:b2:69:50:12:dc:ca:7e: c8:2a:e8:ee:63:56:fa:13:1e:0a:de:99:68:a4:cd: 86:f8:45:ae:17:cc:b5:46:4c:56:b9:6f:9e:68:88: f7:b8:89:a6:18:8e:76:0a:6a:cc:8b:7e:c8:f7:d7: 22:41:eb:73:a6:b3:95:e0:0c:e8:dd:f5:96:cb:52: e8:6f:10:29:7a:7e:bc:ca:b2:a6:6d:73:c1:55:d2: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:59:E5:30:7E:96:C6:D4:01:32:A5:0E:FA:F0:DE:48:28:BF:6F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/693c058b-fe86-3b29-854c-07c6a45b096c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a0:16:34:df:e1:ea:c6:25:d9:49:a8:d4:2e:5d:f7:7d:4e: 91:37:86:ea:26:4d:f1:c7:ce:f6:e9:b1:db:32:c8:74:41:b0: 30:0a:3f:81:ce:40:0c:8f:5e:b5:ca:4a:75:37:86:56:93:18: aa:9e:2e:43:06:7a:83:11:7f:b3:57:68:4e:99:c6:e5:90:0b: b5:48:a9:1d:c7:3a:e9:c6:bd:18:95:88:bd:f1:c4:c6:10:69: a8:eb:84:69:c2:62:65:e7:ed:f6:78:ce:e9:d8:b9:51:ac:0f: eb:86:cc:2a:dd:55:95:88:c9:b4:d4:80:c8:e5:98:b5:cc:6f: 0b:54:56:98:4e:c7:6b:21:ae:99:f7:84:0c:a5:8e:a8:b0:61: 9d:29:1d:fc:3a:97:6f:03:b7:78:9a:f2:b6:67:bf:b7:dc:09: c0:0e:40:75:34:4f:11:fa:c1:9d:79:f1:d2:82:35:a2:4a:8f: 53:dc:8d:67:49:f2:ab:ca:f4:a0:39:f7:d4:2f:b9:21:12:65: 62:76:b6:29:9e:9d:f5:3d:31:3e:21:fb:ed:da:e2:b7:7c:a1: 87:e1:ab:88:ca:99:d6:fc:85:8f:03:03:e3:88:f3:31:56:79: ae:71:d7:da:38:7c:bf:c2:44:e4:51:14:65:93:e5:c1:db:63: 2e:f9:96:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrX/AV5u8kUBPYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk ODE0MzZhYjAtODJjOC00MDU2LTg4MDYtYWI5N2Q2NGU4MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibwmA7UKWawOKUHbZpV0B9NIimVDmNXdvnTG u/1Wdk+tXs8ImcCxeaArOHJ5zK9QKWGP2swrZ4WJdnaHHeuSATKGbub65ChTCxvJ I6ETiBE3/SWkzlvSdiHw+U2kD8ylnYzC42sQpKXtAF50mwF95Meo8b/8mL63cNw7 XOLeOHr38ZI4v1a7MGSQSnnrvURix8WhuBl3bMgER1lKuQ8dpUkTOJy6EVZsnBwS VrJpUBLcyn7IKujuY1b6Ex4K3plopM2G+EWuF8y1RkxWuW+eaIj3uImmGI52CmrM i37I99ciQetzprOV4Azo3fWWy1LobxApen68yrKmbXPBVdJlTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlZ5TB+lsbUATKlDvrw3kgov2+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjkzYzA1OGItZmU4Ni0z YjI5LTg1NGMtMDdjNmE0NWIwOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzclMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGegFjTf4erGJdlJqNQuXfd9TpE3huomTfHHzvbpsdsyyHRBsDAKP4HO QAyPXrXKSnU3hlaTGKqeLkMGeoMRf7NXaE6ZxuWQC7VIqR3HOunGvRiViL3xxMYQ aajrhGnCYmXn7fZ4zunYuVGsD+uGzCrdVZWIybTUgMjlmLXMbwtUVphOx2shrpn3 hAyljqiwYZ0pHfw6l28Dt3ia8rZnv7fcCcAOQHU0TxH6wZ158dKCNaJKj1PcjWdJ 8qvK9KA599QvuSESZWJ2timenfU9MT4h++3a4rd8oYfhq4jKmdb8hY8DA+OI8zFW ea5x19o4fL/CRORRFGWT5cHbYy75lkI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:32 2025 by rpki-client