$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a093cce2-60c8-3198-9da3-582b1967ffa2.roa File: a093cce2-60c8-3198-9da3-582b1967ffa2.roa (raw, json) Hash identifier: JBKajLIvJpsZ7n6A2UV0kEXu/Zr+cjL6oqLdZhjadZI= Subject key identifier: BC:5A:9C:19:1D:20:64:DA:98:2C:1D:79:56:F2:71:7A:D4:66:CE:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494E2EBD7286FDF287BCF60480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a093cce2-60c8-3198-9da3-582b1967ffa2.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 55836 IP address blocks: 23.34.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:bd:72:86:fd:f2:87:bc:f6:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=037f5c24-9f4c-4f3c-8f56-410883a26fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:71:aa:98:42:31:6b:70:a1:58:8a:67:e4: 80:3e:5b:ed:12:aa:17:51:fd:d1:f8:ba:ad:74:a2: 3b:3f:6a:7d:cf:50:6d:fa:81:97:9c:c3:cc:eb:b6: 40:7d:cb:78:7b:4e:d9:d6:3f:6c:04:a5:24:46:00: c1:a0:c2:34:63:46:50:58:69:69:cc:83:65:1e:b2: 1a:1f:bc:18:99:8d:a7:02:d0:9c:ec:c2:29:bf:4d: c9:ed:c7:aa:6b:8f:18:39:d4:45:2e:c6:80:25:67: 64:4a:51:85:94:f3:3c:f5:9e:ed:ce:04:5f:4b:0b: f2:e3:55:e8:81:de:f2:4f:97:0c:7f:68:ff:9e:6d: 70:76:de:1d:05:55:9b:74:9e:da:49:b1:7e:37:01: 6c:c5:9e:e5:65:57:58:2d:4c:23:58:e5:e5:9e:fc: a2:d0:8b:a1:02:1d:ee:2d:1e:c9:05:38:1c:e4:0c: 04:b7:6c:11:cf:f0:a6:36:71:74:85:49:e1:6d:03: 6a:e9:62:4c:62:89:d6:b2:7c:31:27:58:b7:c5:4e: f4:5e:96:4e:85:8a:39:54:a5:97:a3:11:a8:df:ea: 4a:b8:dc:4c:3f:52:16:e4:63:b7:7b:bf:4e:4c:1a: 31:39:a7:49:94:52:97:7e:9e:7a:49:48:74:56:96: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5A:9C:19:1D:20:64:DA:98:2C:1D:79:56:F2:71:7A:D4:66:CE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a093cce2-60c8-3198-9da3-582b1967ffa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:39:40:50:46:bd:1b:ef:18:0a:83:76:f8:7d:88:88:50:8e: ca:e1:22:5a:41:60:97:a8:41:c4:97:63:9a:4e:d6:5b:7c:ad: 86:07:2b:69:f1:2f:a8:9e:5a:81:32:2e:f5:7d:e1:e0:c6:11: 6e:51:4e:67:7f:02:b0:49:cd:fa:b1:17:1d:37:6e:9a:83:10: 03:a0:a2:40:37:9e:ff:dc:71:48:15:bc:43:7b:d3:0b:40:90: 5f:1c:93:02:a7:c2:0a:3e:55:9b:b9:c1:38:a6:07:98:64:8c: 45:8b:38:fc:9a:09:84:8d:39:fe:33:fc:bd:01:5b:8a:e3:47: 31:bc:d7:93:72:c4:61:cf:50:c5:4f:69:76:b5:4d:aa:cb:6c: bc:40:63:f9:df:71:be:dc:06:3a:33:a8:7f:d9:d3:7e:eb:24: 59:0c:c6:8e:d9:86:36:1e:b4:a3:c3:d6:0e:be:15:12:32:93: 97:90:e7:52:09:db:65:62:e5:af:b1:f9:b4:ee:bc:29:b8:a9: 56:27:b3:00:40:ce:9c:ad:c0:94:d1:17:6d:75:37:09:cc:59: 4c:74:8c:fd:52:2f:a8:d9:0c:c4:e9:8c:6c:e0:b6:04:29:0d: 7a:af:00:a8:94:ef:ff:2e:72:4e:44:0d:65:43:00:cc:7d:38: 4c:2b:f9:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLr1yhv3yh7z2BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MDM3ZjVjMjQtOWY0Yy00ZjNjLThmNTYtNDEwODgzYTI2ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFxqphCMWtwoViKZ+SAPlvtEqoXUf3R+Lqt dKI7P2p9z1Bt+oGXnMPM67ZAfct4e07Z1j9sBKUkRgDBoMI0Y0ZQWGlpzINlHrIa H7wYmY2nAtCc7MIpv03J7ceqa48YOdRFLsaAJWdkSlGFlPM89Z7tzgRfSwvy41Xo gd7yT5cMf2j/nm1wdt4dBVWbdJ7aSbF+NwFsxZ7lZVdYLUwjWOXlnvyi0IuhAh3u LR7JBTgc5AwEt2wRz/CmNnF0hUnhbQNq6WJMYonWsnwxJ1i3xU70XpZOhYo5VKWX oxGo3+pKuNxMP1IW5GO3e79OTBoxOadJlFKXfp56SUh0VpafJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxanBkdIGTamCwdeVbycXrUZs6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTA5M2NjZTItNjBjOC0z MTk4LTlkYTMtNTgyYjE5NjdmZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM5QFBGvRvvGAqDdvh9iIhQjsrhIlpBYJeoQcSXY5pO1lt8rYYHK2nx L6ieWoEyLvV94eDGEW5RTmd/ArBJzfqxFx03bpqDEAOgokA3nv/ccUgVvEN70wtA kF8ckwKnwgo+VZu5wTimB5hkjEWLOPyaCYSNOf4z/L0BW4rjRzG815NyxGHPUMVP aXa1TarLbLxAY/nfcb7cBjozqH/Z037rJFkMxo7ZhjYetKPD1g6+FRIyk5eQ51IJ 22Vi5a+x+bTuvCm4qVYnswBAzpytwJTRF211NwnMWUx0jP1SL6jZDMTpjGzgtgQp DXqvAKiU7/8uck5EDWVDAMx9OEwr+XA= -----END CERTIFICATE-----Generated at Mon May 5 15:23:16 2025 by rpki-client