$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0817be32-d174-32d2-932b-fc0e7c7d10a8.roa File: 0817be32-d174-32d2-932b-fc0e7c7d10a8.roa (raw, json) Hash identifier: g+B/Q9GZzBJu5zDA+9SS2rTYn/hoR7dHxTlGgs2jM4Q= Subject key identifier: B6:3E:12:4D:91:74:38:F6:28:14:D1:D2:66:28:5A:2C:65:6A:5E:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4923574401FEE34E7F180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0817be32-d174-32d2-932b-fc0e7c7d10a8.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.210.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:92:35:74:40:1f:ee:34:e7:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=4b1cd7e9-b739-40b7-ab66-13d59a090be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:c9:6b:68:7d:d3:69:ba:9c:52:1d:f4:05: 49:34:2f:87:2c:58:42:46:62:1e:24:2c:9a:29:6d: 81:ce:8a:64:03:c3:fb:87:96:e0:44:56:f7:6b:86: 65:f3:14:b6:dd:ea:7d:07:fc:5c:f2:e8:c5:be:92: 67:e2:8b:f1:3d:a3:d4:63:21:e8:c0:db:35:cc:11: 60:a0:0b:7d:e5:dc:af:f1:0c:5d:24:2f:ea:1e:dd: 58:12:94:c8:fe:63:d3:e1:a3:47:c5:29:f4:f8:93: a0:8b:24:2a:2a:5d:90:ac:c9:d6:f4:53:6a:a7:ad: 13:06:f9:32:95:51:7e:c2:3b:aa:19:01:f7:e1:a5: 21:99:5e:7c:d6:39:b4:3c:56:09:0d:cd:5e:7c:2d: 1a:1d:f1:77:10:0e:52:73:fa:38:e8:81:24:6b:f5: 67:79:5e:02:14:df:43:76:7b:46:78:d8:29:b0:7e: 13:40:70:32:1d:0f:4f:5d:29:e2:7b:07:3f:91:d8: 40:e7:ab:3e:dc:b8:b7:78:c5:f0:63:47:5e:30:7a: 75:bb:6f:47:9b:f3:1e:40:7b:f7:ba:57:d8:2b:26: 68:9a:85:19:18:99:43:f1:29:9b:6b:cf:36:a9:9f: 43:b1:f8:61:f7:58:11:d3:c0:98:08:b9:3a:95:51: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:12:4D:91:74:38:F6:28:14:D1:D2:66:28:5A:2C:65:6A:5E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0817be32-d174-32d2-932b-fc0e7c7d10a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8c:27:dd:79:53:40:9c:71:68:91:aa:b0:84:73:44:eb:06: 3a:3a:ed:d2:13:2f:c7:2d:49:28:46:63:ac:0d:06:84:ba:e0: 8b:04:7f:d5:d2:36:33:94:06:dd:5a:81:66:ac:4a:35:96:31: 08:9e:d7:d4:96:36:4e:bd:80:5b:9b:ef:53:62:51:8f:56:ba: 6f:dc:94:66:63:43:17:13:ae:ba:be:1f:79:a8:0b:ae:df:3f: 54:1d:31:f4:b4:19:5d:02:d4:5a:f4:e4:98:d9:b4:46:97:a2: 5d:85:52:8a:d2:ce:2d:eb:53:ee:3a:a2:d3:79:c9:5a:38:b1: 61:f8:64:b4:fe:7d:39:05:72:bc:10:4e:86:c0:45:11:07:9f: 90:67:3f:2a:53:1e:5e:fb:8d:5b:09:44:c4:5b:9b:c1:74:25: e4:ed:cd:ff:c6:0c:17:73:fd:fa:e9:66:8f:37:82:e8:39:fd: ef:a7:ea:54:e5:35:ed:16:d8:25:b4:1c:df:1e:73:e5:53:7d: 72:21:c2:84:55:bb:e6:c8:f0:58:ac:d9:1e:e8:f9:3c:21:0e: bb:08:89:1a:97:4e:52:2b:53:db:35:19:83:94:48:51:0e:f3: 04:c6:08:57:b7:09:3f:d0:30:22:2b:f3:a4:cc:08:7f:1e:4c: d4:9c:de:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JI1dEAf7jTn8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NGIxY2Q3ZTktYjczOS00MGI3LWFiNjYtMTNkNTlhMDkwYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGzJa2h902m6nFId9AVJNC+HLFhCRmIeJCya KW2BzopkA8P7h5bgRFb3a4Zl8xS23ep9B/xc8ujFvpJn4ovxPaPUYyHowNs1zBFg oAt95dyv8QxdJC/qHt1YEpTI/mPT4aNHxSn0+JOgiyQqKl2QrMnW9FNqp60TBvky lVF+wjuqGQH34aUhmV581jm0PFYJDc1efC0aHfF3EA5Sc/o46IEka/VneV4CFN9D dntGeNgpsH4TQHAyHQ9PXSniewc/kdhA56s+3Li3eMXwY0deMHp1u29Hm/MeQHv3 ulfYKyZomoUZGJlD8Smba882qZ9Dsfhh91gR08CYCLk6lVGVeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY+Ek2RdDj2KBTR0mYoWixlal7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDgxN2JlMzItZDE3NC0z MmQyLTkzMmItZmMwZTdjN2QxMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9KgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWMJ915U0CccWiRqrCEc0TrBjo67dITL8ctSShGY6wNBoS64IsEf9XS NjOUBt1agWasSjWWMQie19SWNk69gFub71NiUY9Wum/clGZjQxcTrrq+H3moC67f P1QdMfS0GV0C1Fr05JjZtEaXol2FUorSzi3rU+46otN5yVo4sWH4ZLT+fTkFcrwQ TobARREHn5BnPypTHl77jVsJRMRbm8F0JeTtzf/GDBdz/frpZo83gug5/e+n6lTl Ne0W2CW0HN8ec+VTfXIhwoRVu+bI8Fis2R7o+TwhDrsIiRqXTlIrU9s1GYOUSFEO 8wTGCFe3CT/QMCIr86TMCH8eTNSc3hs= -----END CERTIFICATE-----Generated at Sun Apr 27 22:33:06 2025 by rpki-client