$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05af755a-a254-3bd6-ba01-7b5232550dee.roa File: 05af755a-a254-3bd6-ba01-7b5232550dee.roa (raw, json) Hash identifier: t2rK3jRBs4+crEWLNtdBAeWwovmwARX8Mgto6fkwVCA= Subject key identifier: 43:63:90:70:EC:3F:E6:84:E2:F8:6D:C1:E6:8B:18:40:AE:FF:48:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D1D6D214FE6CB4FC1180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05af755a-a254-3bd6-ba01-7b5232550dee.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.201.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d1:d6:d2:14:fe:6c:b4:fc:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=f5027ce6-cecb-499a-a7a0-98956c4af773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:e6:15:f6:8c:6c:98:ac:08:29:e3:2c:c5: 96:f3:51:f6:4b:cf:39:c9:97:bb:82:3e:a6:5b:59: fc:a1:8c:1b:7f:78:e6:5a:8e:2a:8c:bc:7e:32:5b: 54:50:ea:34:23:21:87:00:4c:f5:31:23:62:b8:e5: 53:6a:8e:7e:75:26:b1:34:e7:89:89:e5:30:72:ae: c9:25:bc:b5:71:ca:5f:c0:dd:33:02:37:51:eb:79: bc:b0:70:88:dd:08:e2:03:54:b1:41:69:de:cd:b4: 39:47:ef:30:a4:00:b7:1d:83:10:dc:6e:35:8a:89: 7d:5a:42:49:71:7b:fb:ef:0c:23:fb:82:c7:60:7c: db:e7:c9:03:fa:e8:2c:7e:41:f3:e3:52:a5:41:89: c7:ad:44:61:04:82:35:70:ff:e6:d1:87:23:d0:82: 08:cd:4f:69:fe:81:19:f0:ce:d1:d3:87:d0:87:f8: 94:f2:46:f5:44:ef:fe:16:c9:eb:a6:d2:c0:d4:8f: eb:fc:38:9b:17:d6:35:f5:f1:95:da:91:70:d7:b3: 08:b6:04:f7:cc:17:8c:f6:26:6f:52:5f:c0:3d:a0: 27:5f:a4:5c:d6:45:73:60:8f:e3:4d:2b:b2:07:0a: b4:4a:26:cc:97:b5:69:e2:5e:07:96:3a:36:12:9a: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:90:70:EC:3F:E6:84:E2:F8:6D:C1:E6:8B:18:40:AE:FF:48:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05af755a-a254-3bd6-ba01-7b5232550dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:76:bb:68:a1:65:67:85:c1:28:b3:60:5e:96:f9:cd:6a:4a: 9a:74:9f:8a:0f:5e:06:71:b5:05:78:a0:ee:79:4b:c1:9b:16: 22:73:0f:d6:0e:66:0e:c7:06:f0:66:c5:21:e4:f0:4b:19:f1: 4a:20:b8:19:d4:9c:a7:3b:2a:fe:06:06:82:cd:eb:89:d6:b9: de:2c:29:b4:8b:bb:7d:29:fb:48:a5:2d:58:89:ac:f9:46:07: 7f:f2:0d:92:cb:77:06:99:1a:2b:36:18:a2:28:ff:95:14:9e: 9d:a8:f2:53:13:bd:b7:41:e2:fd:e0:fb:3a:69:25:d5:fd:2f: 5e:1c:25:b8:c5:ff:a5:7e:a2:29:af:fd:f8:7e:22:1f:1e:b5: 28:e7:d9:9e:d6:c8:c8:ed:dd:56:95:e2:d1:41:dd:bd:43:73: ac:41:48:44:17:f9:22:77:5b:06:ed:46:98:04:98:59:4f:35: 0a:3f:93:dd:6f:b5:65:78:c0:23:f9:fe:88:f1:85:92:44:f2: a6:55:fc:14:9b:80:b3:b2:6d:9c:a8:a3:ce:43:d0:4d:94:bd: c6:1c:dc:9c:19:4f:80:51:5b:fb:5b:d0:87:96:46:7e:35:95: 25:26:91:fa:61:71:23:95:42:60:60:1c:89:a7:b0:11:61:81: e8:af:06:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadHW0hT+bLT8EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZjUwMjdjZTYtY2VjYi00OTlhLWE3YTAtOTg5NTZjNGFmNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw/mFfaMbJisCCnjLMWW81H2S885yZe7gj6m W1n8oYwbf3jmWo4qjLx+MltUUOo0IyGHAEz1MSNiuOVTao5+dSaxNOeJieUwcq7J Jby1ccpfwN0zAjdR63m8sHCI3QjiA1SxQWnezbQ5R+8wpAC3HYMQ3G41iol9WkJJ cXv77wwj+4LHYHzb58kD+ugsfkHz41KlQYnHrURhBII1cP/m0Ycj0IIIzU9p/oEZ 8M7R04fQh/iU8kb1RO/+FsnrptLA1I/r/DibF9Y19fGV2pFw17MItgT3zBeM9iZv Ul/APaAnX6Rc1kVzYI/jTSuyBwq0SibMl7Vp4l4Hljo2EpopDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENjkHDsP+aE4vhtweaLGECu/0hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDVhZjc1NWEtYTI1NC0z YmQ2LWJhMDEtN2I1MjMyNTUwZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN2u2ihZWeFwSizYF6W+c1qSpp0n4oPXgZxtQV4oO55S8GbFiJzD9YO Zg7HBvBmxSHk8EsZ8UoguBnUnKc7Kv4GBoLN64nWud4sKbSLu30p+0ilLViJrPlG B3/yDZLLdwaZGis2GKIo/5UUnp2o8lMTvbdB4v3g+zppJdX9L14cJbjF/6V+oimv /fh+Ih8etSjn2Z7WyMjt3VaV4tFB3b1Dc6xBSEQX+SJ3WwbtRpgEmFlPNQo/k91v tWV4wCP5/ojxhZJE8qZV/BSbgLOybZyoo85D0E2UvcYc3JwZT4BRW/tb0IeWRn41 lSUmkfphcSOVQmBgHImnsBFhgeivBmg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:46 2025 by rpki-client