$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa File: a1e4a25d-e72c-3c81-b8db-725e25b64588.roa (raw, json) Hash identifier: myV9GipwPbbmxoadPKT6WFTc+DpSFIz0K3vK9CrjZc8= Subject key identifier: 8E:C3:68:22:C6:38:E8:35:CB:E7:D8:CE:90:7F:35:FB:BB:F1:DC:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495ABEE991FBEF2C4789CD0000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.42.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e9:91:fb:ef:2c:47:89:cd:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=84c1ded2-d230-43cf-a608-a860ba7b1dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:6d:37:56:6a:f0:0b:50:de:6c:8a:04:dd: 71:92:3a:11:d3:88:03:8e:7e:f1:66:48:75:9b:71: cc:19:12:49:f8:3e:93:d6:4e:57:c6:4b:8a:f8:38: 17:ab:85:62:d1:b0:98:07:41:d1:42:3b:5e:86:ec: 40:65:76:8b:03:fc:df:06:02:01:b8:a5:a9:10:4e: 1a:f5:44:ff:3b:26:2d:22:ea:96:7f:0f:af:45:03: bf:51:73:35:cc:4b:5c:56:8f:f1:c9:d7:51:cc:d8: 06:ba:07:31:e1:fd:9a:fc:b7:2f:f3:07:59:55:56: 8c:5b:42:08:f2:e6:5e:0d:c7:7e:44:32:ad:d9:87: c4:08:e0:af:d3:b2:ef:60:f2:da:a9:53:05:71:f4: a9:9f:24:b3:6e:5a:c3:f1:f5:27:be:77:e9:1c:11: 6a:99:c5:61:b0:5a:37:40:b2:a8:7c:d0:10:5c:b1: bf:2e:09:d4:94:c5:e7:ce:69:54:84:65:d3:23:10: 7c:92:be:15:71:6c:51:30:0e:59:25:90:a6:16:06: ac:f2:88:f7:1d:c8:ad:42:dc:55:7e:09:65:77:22: 48:b3:98:e5:8c:96:d9:65:6a:22:df:2c:57:e6:68: 4b:22:80:25:dd:59:a4:b0:dd:fc:15:a9:c3:f3:ac: 14:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C3:68:22:C6:38:E8:35:CB:E7:D8:CE:90:7F:35:FB:BB:F1:DC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:53:48:66:f2:f2:0e:47:ec:ae:29:41:dd:fe:25:bc:ba:64: 63:66:ed:b5:e3:65:b4:c2:79:68:04:ae:ab:b6:c2:e9:b8:85: 97:4e:87:c2:41:90:e1:30:98:5e:a9:e4:6b:73:db:ab:f7:9a: d0:1a:43:43:25:6c:50:87:a1:76:de:e9:75:79:b6:d8:6a:43: c8:be:f2:96:d9:a5:3e:fa:8a:85:59:9f:4c:c9:f0:95:e8:f3: 1f:95:f5:36:34:2c:fb:fd:07:ad:52:83:a9:c7:a9:9f:6f:97: 96:a8:c4:6a:1c:02:cf:02:6b:ce:ef:26:b0:30:a6:bb:1f:6f: 8f:fd:36:8c:5b:58:5b:44:32:f9:2e:bd:33:5b:8a:15:7a:59: c4:a5:9f:1f:25:3f:39:16:24:eb:6a:e6:49:4b:ee:64:1f:6e: 36:7e:58:c2:43:d2:0c:ae:67:13:8a:b9:97:3e:27:83:c0:3d: 5a:19:b2:eb:ab:62:82:cd:66:56:42:6b:98:87:8d:3c:8e:91: 83:a5:f1:c4:70:b9:64:4c:5e:2b:89:2b:b9:e4:17:3b:1a:ca: 70:79:f6:87:4f:fd:dd:b3:6b:03:d4:08:b7:0d:9f:0d:22:a1: a2:ff:65:c0:21:86:89:a6:c6:c9:72:f5:84:42:1d:32:da:0a: 69:4d:7a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavumR++8sR4nNAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ODRjMWRlZDItZDIzMC00M2NmLWE2MDgtYTg2MGJhN2IxZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllttN1Zq8AtQ3myKBN1xkjoR04gDjn7xZkh1 m3HMGRJJ+D6T1k5XxkuK+DgXq4Vi0bCYB0HRQjtehuxAZXaLA/zfBgIBuKWpEE4a 9UT/OyYtIuqWfw+vRQO/UXM1zEtcVo/xyddRzNgGugcx4f2a/Lcv8wdZVVaMW0II 8uZeDcd+RDKt2YfECOCv07LvYPLaqVMFcfSpnySzblrD8fUnvnfpHBFqmcVhsFo3 QLKofNAQXLG/LgnUlMXnzmlUhGXTIxB8kr4VcWxRMA5ZJZCmFgas8oj3HcitQtxV fglldyJIs5jljJbZZWoi3yxX5mhLIoAl3VmksN38FanD86wUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7DaCLGOOg1y+fYzpB/Nfu78dzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFlNGEyNWQtZTcyYy0z YzgxLWI4ZGItNzI1ZTI1YjY0NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFTSGby8g5H7K4pQd3+Jby6ZGNm7bXjZbTCeWgErqu2wum4hZdOh8JB kOEwmF6p5Gtz26v3mtAaQ0MlbFCHoXbe6XV5tthqQ8i+8pbZpT76ioVZn0zJ8JXo 8x+V9TY0LPv9B61Sg6nHqZ9vl5aoxGocAs8Ca87vJrAwprsfb4/9NoxbWFtEMvku vTNbihV6WcSlnx8lPzkWJOtq5klL7mQfbjZ+WMJD0gyuZxOKuZc+J4PAPVoZsuur YoLNZlZCa5iHjTyOkYOl8cRwuWRMXiuJK7nkFzsaynB59odP/d2zawPUCLcNnw0i oaL/ZcAhhommxsly9YRCHTLaCmlNerA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:13 2025 by rpki-client