$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df86d034-3d1b-385b-8ea1-5c09abe7568c.roa File: df86d034-3d1b-385b-8ea1-5c09abe7568c.roa (raw, json) Hash identifier: QdVtQJRaX/gbE8Em55pOtIVtiPVZwCK7N+oJKRk2/sU= Subject key identifier: 30:5B:D9:DA:AE:8D:DF:CD:71:D6:C9:EB:A7:8B:9F:BD:11:D1:F7:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46C681CB11CAE49FBA740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df86d034-3d1b-385b-8ea1-5c09abe7568c.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.61.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6c:68:1c:b1:1c:ae:49:fb:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=ff0bd205-c54f-47b3-959d-47c50d1d7ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:53:f1:d7:57:76:55:e8:9f:38:d1:0a:26:17: 9e:7d:36:62:ec:83:01:5c:4e:fd:11:f1:2c:3b:81: 60:c5:25:e2:b1:6e:ab:1a:b4:59:1f:a6:e0:2e:8a: 61:8d:d1:7b:05:45:53:5c:aa:e1:17:76:80:c9:dd: 90:cd:c6:5a:45:47:fc:49:63:71:e9:76:3f:30:01: 88:13:06:8e:fb:32:a9:99:af:66:cc:6a:57:9c:f0: a8:2d:8e:0a:d0:22:31:58:22:52:d8:34:7b:d2:d8: 1d:3b:47:0f:8a:12:83:fd:a0:12:3f:68:c9:66:fd: 3a:6d:3a:78:f0:0d:b0:3e:f8:ce:58:13:da:76:66: 87:1e:2c:50:83:30:4a:bd:ad:58:96:2a:dd:7a:97: b9:06:a9:a6:23:39:52:d6:ea:03:cf:18:a9:20:17: 75:6f:c8:54:1d:cc:c9:56:6b:31:c3:2c:91:7e:2e: b1:4f:0a:ff:51:b9:c6:f9:61:f7:8a:3c:c8:25:5b: ea:ed:fb:bb:93:2f:80:2f:54:57:e1:aa:ea:67:bb: 4d:8b:be:ef:15:fc:4c:7d:83:c6:2b:e9:57:c4:a7: b4:d7:7b:01:bb:7b:62:ac:ee:ef:59:5c:a1:ed:b4: a2:d1:cf:99:66:de:d8:8a:a3:91:3f:b4:20:ac:da: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:D9:DA:AE:8D:DF:CD:71:D6:C9:EB:A7:8B:9F:BD:11:D1:F7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df86d034-3d1b-385b-8ea1-5c09abe7568c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f7:d6:d4:82:9b:c4:e1:4b:67:84:68:09:fa:d3:f7:18:51: 74:55:c4:8b:d5:d2:34:a6:88:95:95:36:4d:e8:25:8f:0e:f8: a0:36:30:17:33:f7:0b:16:d6:e7:47:21:09:5e:8b:f8:12:85: 01:42:5c:ed:f9:ae:48:f6:27:fd:11:18:f6:e4:fe:02:5c:69: 80:7c:bc:9b:92:1f:be:cb:f9:ce:8d:39:b9:b6:06:02:c9:f6: b8:74:5e:2e:4b:bd:cf:f6:5d:7a:c3:29:b4:73:21:34:58:7a: cb:e9:11:3c:dd:11:2c:67:03:21:bf:9a:54:38:55:6b:ef:ce: fe:90:0e:94:6e:5e:24:03:a2:2e:14:5c:bc:09:20:e4:d5:47: 7c:af:b7:97:fc:3a:7f:06:85:71:53:79:70:51:57:5a:c7:8c: 97:7d:53:d9:8f:b0:8c:36:7d:34:00:59:1e:cb:de:93:1d:84: 31:48:a7:c5:b6:ec:10:fc:04:dd:a3:9e:55:4d:f4:dd:01:07: 7b:17:da:4c:0f:cd:8d:ae:a5:fa:61:7a:62:64:71:28:cd:40: 7a:45:1d:ae:ca:f2:1e:f2:37:ca:5d:91:68:50:51:42:61:c1: 03:4e:51:f2:a1:48:de:77:b7:c0:64:e7:11:db:cf:4b:a5:91: 78:c6:ec:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GxoHLEcrkn7p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZmYwYmQyMDUtYzU0Zi00N2IzLTk1OWQtNDdjNTBkMWQ3YWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlPx11d2VeifONEKJheefTZi7IMBXE79EfEs O4FgxSXisW6rGrRZH6bgLophjdF7BUVTXKrhF3aAyd2QzcZaRUf8SWNx6XY/MAGI EwaO+zKpma9mzGpXnPCoLY4K0CIxWCJS2DR70tgdO0cPihKD/aASP2jJZv06bTp4 8A2wPvjOWBPadmaHHixQgzBKva1Ylirdepe5BqmmIzlS1uoDzxipIBd1b8hUHczJ VmsxwyyRfi6xTwr/UbnG+WH3ijzIJVvq7fu7ky+AL1RX4arqZ7tNi77vFfxMfYPG K+lXxKe013sBu3tirO7vWVyh7bSi0c+ZZt7YiqORP7QgrNqrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBb2dqujd/NcdbJ66eLn70R0ffMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY4NmQwMzQtM2QxYi0z ODViLThlYTEtNWMwOWFiZTc1NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC331tSCm8ThS2eEaAn60/cYUXRVxIvV0jSmiJWVNk3oJY8O+KA2MBcz 9wsW1udHIQlei/gShQFCXO35rkj2J/0RGPbk/gJcaYB8vJuSH77L+c6NObm2BgLJ 9rh0Xi5Lvc/2XXrDKbRzITRYesvpETzdESxnAyG/mlQ4VWvvzv6QDpRuXiQDoi4U XLwJIOTVR3yvt5f8On8GhXFTeXBRV1rHjJd9U9mPsIw2fTQAWR7L3pMdhDFIp8W2 7BD8BN2jnlVN9N0BB3sX2kwPzY2upfphemJkcSjNQHpFHa7K8h7yN8pdkWhQUUJh wQNOUfKhSN53t8Bk5xHbz0ulkXjG7Fk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:56 2025 by rpki-client