$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e93f7fc7-fe38-37b1-851d-8325360ce025.roa File: e93f7fc7-fe38-37b1-851d-8325360ce025.roa (raw, json) Hash identifier: A4AN7fFTaHVPvXyLZRmNM92tNnyBrPr4FoiHKuHoZic= Subject key identifier: 92:73:A9:21:81:8F:FE:8C:D1:27:B0:08:C0:74:4B:67:70:02:CA:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496E4991BC6752142862F31440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e93f7fc7-fe38-37b1-851d-8325360ce025.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.62.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:91:bc:67:52:14:28:62:f3:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=6f34979b-bb5d-45b6-8c0d-c17eac3088d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e0:6d:20:37:b4:17:1e:10:0b:a0:9a:e9:d4: 29:d7:75:e7:dd:b3:39:7a:48:8d:85:67:a2:5d:65: d0:3b:c7:82:fb:e7:ac:b4:00:50:a7:66:5c:45:58: f7:cb:4d:ed:f0:1a:8e:f5:06:92:3b:0a:d3:6a:18: 52:c8:f0:e5:5e:28:ab:6a:7b:79:af:b9:fe:01:16: ef:ef:50:e4:64:3a:0a:04:2a:f7:3c:3e:73:c4:12: a5:9f:f3:62:ec:6d:d6:e9:30:76:93:3e:9a:66:42: a7:1d:63:a5:a9:6a:44:a6:d4:a1:c7:83:65:c1:03: 84:ec:e9:75:20:86:21:00:71:22:97:a5:4e:3d:f8: 54:3a:ab:94:7f:c8:20:66:97:59:b1:c4:b5:00:4d: 66:23:ab:eb:da:bd:f4:7b:6f:de:29:30:9d:e7:d2: 6a:10:c0:f3:42:67:9d:d7:f7:54:60:e7:45:e2:4f: bf:d5:c6:0c:b7:c4:94:fa:b6:cf:62:7d:2b:a0:a3: ce:ee:c5:37:de:b5:bc:b6:45:a1:94:3d:9a:bb:dd: 60:ef:f4:98:42:bc:1f:ff:d0:6d:f0:5e:97:e5:7b: d6:bc:64:19:f6:17:05:88:48:79:51:c4:d0:08:18: 01:1a:a8:88:49:12:3b:b0:5a:69:1b:1b:8f:d6:70: b2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:A9:21:81:8F:FE:8C:D1:27:B0:08:C0:74:4B:67:70:02:CA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e93f7fc7-fe38-37b1-851d-8325360ce025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d5:d9:6e:32:cc:67:a0:5d:e5:3e:06:87:2f:46:dc:83:2b: bc:81:a5:69:60:d3:b5:3b:13:8a:be:3d:29:e7:bb:47:5f:7c: 7b:81:17:a5:99:66:b0:04:55:b2:5a:e7:44:eb:24:ab:92:d0: fc:b0:22:2c:74:94:a9:f7:0b:10:8a:0b:e7:98:6e:c9:b7:32: 91:e8:fb:2c:5c:cc:f7:20:58:6e:9b:4f:20:ea:2c:84:ee:1a: f8:ff:d0:99:2a:f1:34:92:eb:09:a6:07:b0:d2:ea:7a:84:b5: 23:69:4b:25:a6:9c:f3:d1:4c:37:b3:a3:3b:a7:f5:a1:45:15: fb:28:7b:71:bb:8f:19:e7:1a:52:25:5c:d5:b6:1f:23:dd:f8: 88:d3:4b:20:97:5a:72:f4:45:c2:31:82:8b:e8:f4:cf:27:2c: 63:7b:74:eb:bf:55:87:60:63:6a:5c:5e:a2:6b:42:12:47:62: 44:f4:15:8f:aa:6b:17:3d:ca:36:46:b2:9a:6b:e0:ed:4e:f4: f5:66:a3:ba:ec:35:72:60:5d:4b:6a:a0:12:50:25:0f:91:16: e0:e3:66:56:6c:a4:f8:70:c8:66:7c:0b:4d:03:eb:0e:13:66: 05:4e:68:9b:f1:8a:36:20:4d:51:08:91:ea:f3:6d:31:d1:e8: b4:a3:86:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSZG8Z1IUKGLzFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk NmYzNDk3OWItYmI1ZC00NWI2LThjMGQtYzE3ZWFjMzA4OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeBtIDe0Fx4QC6Ca6dQp13Xn3bM5ekiNhWei XWXQO8eC++estABQp2ZcRVj3y03t8BqO9QaSOwrTahhSyPDlXiirant5r7n+ARbv 71DkZDoKBCr3PD5zxBKln/Ni7G3W6TB2kz6aZkKnHWOlqWpEptShx4NlwQOE7Ol1 IIYhAHEil6VOPfhUOquUf8ggZpdZscS1AE1mI6vr2r30e2/eKTCd59JqEMDzQmed 1/dUYOdF4k+/1cYMt8SU+rbPYn0roKPO7sU33rW8tkWhlD2au91g7/SYQrwf/9Bt 8F6X5XvWvGQZ9hcFiEh5UcTQCBgBGqiISRI7sFppGxuP1nCyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJzqSGBj/6M0SewCMB0S2dwAsoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkzZjdmYzctZmUzOC0z N2IxLTg1MWQtODMyNTM2MGNlMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLV2W4yzGegXeU+BocvRtyDK7yBpWlg07U7E4q+PSnnu0dffHuBF6WZ ZrAEVbJa50TrJKuS0PywIix0lKn3CxCKC+eYbsm3MpHo+yxczPcgWG6bTyDqLITu Gvj/0Jkq8TSS6wmmB7DS6nqEtSNpSyWmnPPRTDezozun9aFFFfsoe3G7jxnnGlIl XNW2HyPd+IjTSyCXWnL0RcIxgovo9M8nLGN7dOu/VYdgY2pcXqJrQhJHYkT0FY+q axc9yjZGsppr4O1O9PVmo7rsNXJgXUtqoBJQJQ+RFuDjZlZspPhwyGZ8C00D6w4T ZgVOaJvxijYgTVEIkerzbTHR6LSjhiU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:05 2025 by rpki-client