$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa File: bc43b7af-674b-3639-b972-1363cf194946.roa (raw, json) Hash identifier: /XK5GUqNlmw0fhz2AvLzqDHIsM/vnVwvpGQQ0ihMOK4= Subject key identifier: 5D:72:F7:3D:B9:37:81:D4:13:1D:14:B9:11:18:C4:5F:AB:D4:0C:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D6411730FC3CC614698C3D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.220.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:17:30:fc:3c:c6:14:69:8c:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=17c7b874-cf66-4e3b-898a-8701c7b3bf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:5e:fb:ae:4f:a8:c6:0f:80:7a:07:29:df: 8f:6b:70:89:3a:7a:0b:fe:f5:36:a4:fa:f9:44:3f: 43:c3:5b:19:33:24:d0:94:52:de:5b:4c:45:c1:c6: bd:07:54:f9:62:99:2b:c3:6f:a3:5d:50:2e:07:fe: e8:92:7e:c4:89:9a:32:43:27:89:62:ce:b5:c7:7e: 7f:d8:66:c5:fb:39:5d:d2:39:e4:21:00:d2:b9:7b: 84:a3:5d:5d:e3:68:d6:90:0d:26:d2:2f:43:c3:c1: bd:60:51:c5:d3:4e:1c:ff:0f:93:9a:c9:a4:81:d6: 94:8d:91:c1:ed:0b:73:3f:5c:7d:6e:4e:aa:50:7c: bb:85:96:74:ea:07:6f:1b:2c:2e:1e:31:a7:b1:54: ba:78:6e:02:4d:03:41:7e:a2:51:63:47:a9:2f:df: c1:7a:e7:c9:98:77:68:36:63:05:59:f3:e9:18:6d: 36:8f:41:68:f3:6c:8b:0c:fe:94:8c:18:92:d5:39: b7:3b:6b:18:29:74:22:11:ef:46:67:94:ff:b6:0a: 46:d1:fe:36:45:ba:b6:10:cb:b5:b3:56:03:ac:33: c6:6e:5e:ff:8d:e4:d7:89:46:87:2f:1d:83:4f:31: 9e:9b:71:93:2a:e7:38:92:0a:4d:3d:e4:dd:fc:c8: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:72:F7:3D:B9:37:81:D4:13:1D:14:B9:11:18:C4:5F:AB:D4:0C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2e:e3:b6:e6:9d:25:53:99:4c:b1:81:40:6c:48:29:cd:4b: fc:99:49:e8:4f:cc:0c:1f:c7:84:1f:27:32:4f:7a:33:cc:b9: df:71:42:68:09:85:aa:a2:9d:a1:71:03:e7:da:20:8d:5d:fb: 86:69:15:6b:f0:4e:66:5c:55:4b:76:05:24:bb:c0:31:3f:03: 28:f7:cd:10:85:72:4a:33:e2:56:eb:58:44:a9:fb:ff:5b:d2: 9f:eb:d9:94:72:4e:c5:5a:b5:3f:71:55:7b:bb:5c:86:1c:ae: 3f:db:d3:93:af:6d:0a:06:63:2e:79:d3:6b:25:ff:f9:1f:5a: 9b:7e:f1:4b:58:5b:c9:41:4f:0f:59:9c:42:30:ea:e7:ea:c7: a0:8c:c4:ae:6e:d1:b4:0f:e0:66:9b:38:ea:de:82:5d:49:65: e1:8e:30:cf:ff:6e:ec:c4:ff:0c:90:8b:a3:12:43:0e:d8:c6: fa:09:50:0d:6f:e3:12:15:aa:6f:08:a9:35:84:1a:b6:76:0b: 15:50:dd:fb:87:81:4d:7d:61:7e:b5:5e:ef:fc:97:e1:1b:4e: 28:c1:5c:c1:d2:bd:e8:32:29:f4:68:79:03:ba:46:84:8f:75: 1b:f9:f0:ce:79:ea:d3:b8:4a:28:b7:82:84:47:04:c2:d7:b4: d5:4b:fb:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRcw/DzGFGmMPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTdjN2I4NzQtY2Y2Ni00ZTNiLTg5OGEtODcwMWM3YjNiZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ5e+65PqMYPgHoHKd+Pa3CJOnoL/vU2pPr5 RD9Dw1sZMyTQlFLeW0xFwca9B1T5Ypkrw2+jXVAuB/7okn7EiZoyQyeJYs61x35/ 2GbF+zld0jnkIQDSuXuEo11d42jWkA0m0i9Dw8G9YFHF004c/w+TmsmkgdaUjZHB 7QtzP1x9bk6qUHy7hZZ06gdvGywuHjGnsVS6eG4CTQNBfqJRY0epL9/BeufJmHdo NmMFWfPpGG02j0Fo82yLDP6UjBiS1Tm3O2sYKXQiEe9GZ5T/tgpG0f42Rbq2EMu1 s1YDrDPGbl7/jeTXiUaHLx2DTzGem3GTKuc4kgpNPeTd/MhDmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1y9z25N4HUEx0UuREYxF+r1AzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM0M2I3YWYtNjc0Yi0z NjM5LWI5NzItMTM2M2NmMTk0OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYu47bmnSVTmUyxgUBsSCnNS/yZSehPzAwfx4QfJzJPejPMud9xQmgJ haqinaFxA+faII1d+4ZpFWvwTmZcVUt2BSS7wDE/Ayj3zRCFckoz4lbrWESp+/9b 0p/r2ZRyTsVatT9xVXu7XIYcrj/b05OvbQoGYy5502sl//kfWpt+8UtYW8lBTw9Z nEIw6ufqx6CMxK5u0bQP4GabOOregl1JZeGOMM//buzE/wyQi6MSQw7YxvoJUA1v 4xIVqm8IqTWEGrZ2CxVQ3fuHgU19YX61Xu/8l+EbTijBXMHSvegyKfRoeQO6RoSP dRv58M556tO4Sii3goRHBMLXtNVL+wE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:44 2025 by rpki-client