$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e91b329a-9516-332c-beca-df9a17f1cbe7.roa File: e91b329a-9516-332c-beca-df9a17f1cbe7.roa (raw, json) Hash identifier: t5ZfZBdS2UVGhzPex4njFm9a2Kg2DzYJ0NYPmPcAXlc= Subject key identifier: EA:77:5A:34:8A:E4:0D:3E:0F:47:66:42:1C:12:ED:4D:83:99:F0:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E8E410B6A8E30E4951330 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e91b329a-9516-332c-beca-df9a17f1cbe7.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 23.5.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8e:41:0b:6a:8e:30:e4:95:13:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=970727f4-d6bc-4890-a867-4bd05362e242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:4e:d6:20:b0:80:02:d9:b8:e1:12:b7:1e: 7c:00:a1:8c:27:6f:0b:75:b3:3f:67:4e:05:42:fa: 00:95:e3:bb:32:c3:5b:06:56:7d:12:c9:38:78:0d: 41:52:30:00:a3:17:e8:6d:94:62:12:c2:dd:78:5a: 74:8f:cd:18:8d:03:c2:09:34:f8:05:9c:9e:ea:47: 09:3b:d1:35:2a:da:73:d2:a6:fb:d4:66:d0:b9:fb: 15:5a:2f:64:e2:36:87:4f:8c:74:f7:ab:1d:f4:e4: 63:e3:44:a2:dc:39:d9:51:e1:f7:0f:92:49:cb:b7: 6f:c2:e8:d8:f7:c0:02:43:aa:5a:d5:81:28:f7:97: 02:cc:16:fb:7c:4f:b6:69:34:30:e6:68:14:66:f6: 54:4f:d8:ed:57:fc:81:a6:0d:ae:f1:d0:49:52:11: 2b:64:0c:12:64:00:8b:90:f4:eb:ce:f8:6b:d0:06: 3c:fc:94:5a:74:36:47:a9:31:5d:32:9c:15:66:70: 20:16:d0:de:b2:ea:a7:6c:b5:5b:7a:06:ed:67:b4: 0f:6d:7d:a1:6d:fc:23:d7:73:f1:0e:73:44:75:d6: 4b:12:ae:92:d9:68:dc:cf:ea:a9:27:36:3b:21:d1: 07:5d:5c:0b:2d:2e:d5:f4:57:b4:36:20:91:63:33: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:77:5A:34:8A:E4:0D:3E:0F:47:66:42:1C:12:ED:4D:83:99:F0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e91b329a-9516-332c-beca-df9a17f1cbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.5.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:22:f5:b4:87:c3:fe:c6:c5:70:d3:b2:2e:51:99:1d:a1:58: 0e:9a:e5:67:98:e4:48:4a:0f:2c:83:bd:3e:03:44:44:df:63: a0:6f:00:51:f5:a9:07:65:68:0c:0f:52:06:68:a6:ed:43:e7: e2:fb:34:9d:67:f0:e4:06:26:2b:a1:a6:78:44:47:64:81:7b: 68:c3:f4:98:e9:03:9b:b7:9a:42:3a:38:98:41:71:e9:5f:d1: 42:f5:fc:fc:a0:2a:de:bf:4c:78:5e:9f:6b:a9:ec:ea:e4:27: a8:21:13:80:68:98:c4:3b:16:cc:58:50:b2:92:7b:6a:fd:da: 54:e2:33:da:62:7e:68:7a:4c:e3:d0:97:f2:78:99:da:e2:92: 98:84:1f:dc:94:56:e7:1d:5f:40:38:4f:e9:aa:3f:3e:be:ad: 20:04:98:03:99:87:09:de:fb:be:7d:5d:c7:76:13:89:62:e2: 18:80:84:97:b9:d1:09:b9:87:33:7f:48:36:41:5a:c5:a8:32: 9d:39:11:79:c9:10:db:3c:f0:b7:0b:8d:c3:bb:64:07:42:1d: f7:09:a7:cb:a4:3a:d2:74:cc:d2:ba:b5:d9:4c:4d:c3:71:3e: cc:c0:5f:40:f9:42:75:cb:06:4a:c3:71:19:f6:5c:ac:1c:6d: 9c:7a:66:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTo5BC2qOMOSVEzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk OTcwNzI3ZjQtZDZiYy00ODkwLWE4NjctNGJkMDUzNjJlMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkdO1iCwgALZuOEStx58AKGMJ28LdbM/Z04F QvoAleO7MsNbBlZ9Esk4eA1BUjAAoxfobZRiEsLdeFp0j80YjQPCCTT4BZye6kcJ O9E1Ktpz0qb71GbQufsVWi9k4jaHT4x096sd9ORj40Si3DnZUeH3D5JJy7dvwujY 98ACQ6pa1YEo95cCzBb7fE+2aTQw5mgUZvZUT9jtV/yBpg2u8dBJUhErZAwSZACL kPTrzvhr0AY8/JRadDZHqTFdMpwVZnAgFtDesuqnbLVbegbtZ7QPbX2hbfwj13Px DnNEddZLEq6S2Wjcz+qpJzY7IdEHXVwLLS7V9Fe0NiCRYzNBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp3WjSK5A0+D0dmQhwS7U2DmfBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkxYjMyOWEtOTUxNi0z MzJjLWJlY2EtZGY5YTE3ZjFjYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQi9bSHw/7GxXDTsi5RmR2hWA6a5WeY5EhKDyyDvT4DRETfY6BvAFH1 qQdlaAwPUgZopu1D5+L7NJ1n8OQGJiuhpnhER2SBe2jD9JjpA5u3mkI6OJhBcelf 0UL1/PygKt6/THhen2up7OrkJ6ghE4BomMQ7FsxYULKSe2r92lTiM9pifmh6TOPQ l/J4mdrikpiEH9yUVucdX0A4T+mqPz6+rSAEmAOZhwne+759Xcd2E4li4hiAhJe5 0Qm5hzN/SDZBWsWoMp05EXnJENs88LcLjcO7ZAdCHfcJp8ukOtJ0zNK6tdlMTcNx PszAX0D5QnXLBkrDcRn2XKwcbZx6ZhM= -----END CERTIFICATE-----Generated at Sat Apr 26 21:15:45 2025 by rpki-client