$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a21d7ca7-62f8-3bcf-a7ba-6ec95106c756.roa File: a21d7ca7-62f8-3bcf-a7ba-6ec95106c756.roa (raw, json) Hash identifier: +D72uWFze2ywUGwdQy/DgTq81KVF3kf4Zef3Jv9aPgw= Subject key identifier: FA:58:A4:89:C8:A1:4B:F3:79:19:49:FB:4D:01:CA:22:98:B9:7D:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496FAEF453B0C180AC26F16280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a21d7ca7-62f8-3bcf-a7ba-6ec95106c756.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.55.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:ae:f4:53:b0:c1:80:ac:26:f1:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=ea30fb67-9693-4516-b1bd-4fcd032bf3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:4d:26:b9:08:8a:fd:91:cc:1b:04:20:ee: b7:61:c7:9e:7c:d8:60:dc:aa:36:89:cd:e7:21:a6: 3a:9e:06:ac:0a:6e:b0:fb:08:8b:a4:ec:7e:d9:ce: 9d:84:6b:e2:b9:4b:f4:f4:1f:ed:ec:1a:66:6b:a5: 0f:e7:6a:4f:5f:86:c7:0f:6e:f6:bb:b7:19:53:9a: ab:a1:e8:2d:bc:da:72:8e:d2:91:6d:d4:27:70:b4: da:a8:a3:f0:6e:37:c4:6b:d8:93:03:d6:f4:ad:9d: 48:f0:b6:14:da:d3:16:8f:5c:b8:93:cf:7b:eb:45: 60:42:97:99:cc:a0:db:ab:f6:b4:2c:95:a3:de:f4: b2:4c:2e:cd:10:97:25:63:f9:f9:da:bd:72:22:a8: e0:b5:38:b8:53:74:b9:b5:27:5f:92:8d:57:20:38: 25:40:5f:c0:9c:d8:e1:d7:d1:0d:c8:24:e9:4b:9d: 8a:1e:bc:b1:e5:8b:6a:aa:fe:07:de:78:0c:d6:f8: a4:f6:fd:d0:d8:56:1b:1e:6c:6f:85:3a:4f:8d:8f: 96:1f:d3:07:36:81:e2:81:2f:d1:f1:b5:2a:f4:b5: a0:15:1b:04:05:3e:68:f2:fb:b4:b7:5c:8d:0f:a8: 2d:90:eb:45:fd:a5:3c:a8:26:77:56:b9:c6:81:46: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:58:A4:89:C8:A1:4B:F3:79:19:49:FB:4D:01:CA:22:98:B9:7D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a21d7ca7-62f8-3bcf-a7ba-6ec95106c756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b4:7e:c0:80:45:8e:d5:55:49:8b:91:b7:d7:b3:c8:6a:89: 02:9a:ec:45:cc:aa:67:69:90:9f:d6:bf:33:5e:9a:25:d6:0b: 68:58:01:40:5f:6e:44:13:d7:f4:0f:77:cc:e4:d2:c0:99:9d: 7d:d6:5a:7e:40:b5:c5:eb:06:36:65:2c:be:03:1b:59:6a:c7: ba:4e:d6:50:3f:37:49:48:ea:ae:82:6f:a7:cb:12:3a:34:0d: 54:f7:c9:a4:35:05:95:3a:90:bd:30:2f:ee:b8:8a:83:1e:27: 07:26:4d:64:03:a7:bd:68:be:fe:8f:01:20:d2:bb:27:25:30: c4:6b:7c:59:1f:83:3c:55:71:59:92:fc:8b:c0:84:2d:36:23: bb:2a:56:88:ed:45:1d:cd:0a:24:07:b9:e5:bd:2c:44:a9:ac: 3b:53:d9:c7:3e:c6:bc:e9:3e:7c:36:86:21:d0:d1:11:46:d8: 22:18:bb:be:48:b8:25:80:cb:57:78:35:29:f9:3c:0e:be:30: da:05:fc:a6:60:9a:71:18:e0:0e:0c:aa:c1:ea:95:0a:86:ab: 37:37:b7:17:d9:c5:cb:20:10:5a:51:d3:ec:24:65:c1:7d:e9: a0:52:73:fb:64:e7:28:28:ae:84:32:48:36:2b:ae:dd:67:99: d1:32:0c:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrvRTsMGArCbxYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWEzMGZiNjctOTY5My00NTE2LWIxYmQtNGZjZDAzMmJmM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl39NJrkIiv2RzBsEIO63YceefNhg3Ko2ic3n IaY6ngasCm6w+wiLpOx+2c6dhGviuUv09B/t7Bpma6UP52pPX4bHD272u7cZU5qr oegtvNpyjtKRbdQncLTaqKPwbjfEa9iTA9b0rZ1I8LYU2tMWj1y4k89760VgQpeZ zKDbq/a0LJWj3vSyTC7NEJclY/n52r1yIqjgtTi4U3S5tSdfko1XIDglQF/AnNjh 19ENyCTpS52KHryx5Ytqqv4H3ngM1vik9v3Q2FYbHmxvhTpPjY+WH9MHNoHigS/R 8bUq9LWgFRsEBT5o8vu0t1yND6gtkOtF/aU8qCZ3VrnGgUZNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpYpInIoUvzeRlJ+00ByiKYuX1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTIxZDdjYTctNjJmOC0z YmNmLWE3YmEtNmVjOTUxMDZjNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq0fsCARY7VVUmLkbfXs8hqiQKa7EXMqmdpkJ/WvzNemiXWC2hYAUBf bkQT1/QPd8zk0sCZnX3WWn5AtcXrBjZlLL4DG1lqx7pO1lA/N0lI6q6Cb6fLEjo0 DVT3yaQ1BZU6kL0wL+64ioMeJwcmTWQDp71ovv6PASDSuyclMMRrfFkfgzxVcVmS /IvAhC02I7sqVojtRR3NCiQHueW9LESprDtT2cc+xrzpPnw2hiHQ0RFG2CIYu75I uCWAy1d4NSn5PA6+MNoF/KZgmnEY4A4MqsHqlQqGqzc3txfZxcsgEFpR0+wkZcF9 6aBSc/tk5ygoroQySDYrrt1nmdEyDGM= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:23 2025 by rpki-client