$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a397532-d030-373f-b472-3aa57f7e10cd.roa File: 0a397532-d030-373f-b472-3aa57f7e10cd.roa (raw, json) Hash identifier: uNvb6fPM/XWfSVwIvuaJgK1cIZlej1jluK0s+0Igoks= Subject key identifier: 78:DB:02:79:CD:AB:DB:56:E9:71:A0:32:9C:F7:16:38:0C:16:E6:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48022E42B4DAE912C480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a397532-d030-373f-b472-3aa57f7e10cd.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.216.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:02:2e:42:b4:da:e9:12:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=2df34b4d-d79c-4903-8598-b2169d5b86a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:93:a8:98:02:cb:ac:98:89:73:53:ef:9e:ff: 31:18:20:5a:48:85:47:ea:d8:0c:b1:88:38:80:60: 86:fb:df:b6:78:4b:af:e0:4e:b0:68:e6:73:29:fc: 07:a4:e5:dc:80:97:7f:42:13:3c:8f:e0:0c:4a:59: 25:7b:a0:ac:9d:d6:d5:ad:43:c2:4f:44:db:52:e3: 2e:1c:33:83:51:3d:64:f1:14:0f:db:97:9e:b2:2a: 39:85:da:4c:5b:5b:97:1d:87:27:cb:82:15:ef:ad: cf:c0:bc:fe:35:37:39:b5:df:83:42:00:5e:8a:f0: de:9b:b9:2c:48:63:0e:8a:94:df:6d:1f:13:f8:36: 47:a4:c4:31:6d:7a:3f:13:6a:1f:cc:56:bb:b9:6e: 31:f3:71:9a:c3:e2:a1:3b:77:82:f9:fd:9f:e7:42: 70:f0:4b:13:f5:a0:a0:eb:a4:e8:08:2b:41:d5:f6: c2:12:e9:52:a6:1f:42:91:a6:2c:32:1e:40:9a:16: 37:44:de:91:4e:47:c6:4e:dc:5d:e7:49:21:89:c3: b9:41:72:76:5e:31:69:e9:47:0f:07:cb:3c:f3:85: 67:8c:da:4a:56:18:b3:f0:95:36:f6:7b:6f:80:7c: b0:ca:6a:54:a8:3e:8f:2a:a5:b8:83:0c:c6:e4:5e: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DB:02:79:CD:AB:DB:56:E9:71:A0:32:9C:F7:16:38:0C:16:E6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a397532-d030-373f-b472-3aa57f7e10cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6c:f7:ba:64:6d:04:86:83:4c:39:b0:a9:f1:15:a3:1f:f0: 4f:e3:6a:e0:df:e1:25:6f:19:1d:8b:b7:2d:06:c5:4f:46:65: 77:7b:12:bb:30:c9:f2:17:23:81:f6:29:1c:0f:3d:43:42:97: d9:34:5a:19:77:a1:75:1d:41:17:04:da:80:db:ea:18:97:ab: a6:e2:51:0a:fe:65:ed:57:89:5e:31:9a:cc:57:d4:4b:e4:ce: 79:72:db:c5:bc:30:f6:6c:d9:f5:f1:3c:ba:8d:68:7a:75:76: 62:5b:4a:07:dd:9b:e2:f4:01:8b:8f:18:2e:ff:51:c6:ff:cf: 91:83:b6:f1:10:74:e3:0c:16:fa:81:2a:af:1d:3c:4f:41:31: b3:5d:a6:3f:9c:41:2d:50:cd:a4:df:21:fe:ac:90:de:93:e4: 32:c7:09:ef:48:38:56:41:09:16:9a:15:33:b8:75:3e:23:b9: 98:6d:83:f0:ee:37:90:66:fd:8d:41:bd:05:16:e9:30:7b:5e: 66:f7:2e:3c:67:d2:aa:8f:d6:67:cd:28:ae:bc:5e:91:fb:4b: 9d:37:2a:64:05:9e:ed:86:51:58:13:ec:15:54:77:61:7a:8b: ec:f3:bb:d6:38:1a:fd:01:a5:ed:c5:d0:3d:3e:ce:90:9e:2b: ca:ce:1a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0gCLkK02ukSxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MmRmMzRiNGQtZDc5Yy00OTAzLTg1OTgtYjIxNjlkNWI4NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpOomALLrJiJc1Pvnv8xGCBaSIVH6tgMsYg4 gGCG+9+2eEuv4E6waOZzKfwHpOXcgJd/QhM8j+AMSlkle6CsndbVrUPCT0TbUuMu HDODUT1k8RQP25eesio5hdpMW1uXHYcny4IV763PwLz+NTc5td+DQgBeivDem7ks SGMOipTfbR8T+DZHpMQxbXo/E2ofzFa7uW4x83Gaw+KhO3eC+f2f50Jw8EsT9aCg 66ToCCtB1fbCEulSph9CkaYsMh5AmhY3RN6RTkfGTtxd50khicO5QXJ2XjFp6UcP B8s884VnjNpKVhiz8JU29ntvgHywympUqD6PKqW4gwzG5F47ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjbAnnNq9tW6XGgMpz3FjgMFuZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGEzOTc1MzItZDAzMC0z NzNmLWI0NzItM2FhNTdmN2UxMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1s97pkbQSGg0w5sKnxFaMf8E/jauDf4SVvGR2Lty0GxU9GZXd7Ersw yfIXI4H2KRwPPUNCl9k0Whl3oXUdQRcE2oDb6hiXq6biUQr+Ze1XiV4xmsxX1Evk znly28W8MPZs2fXxPLqNaHp1dmJbSgfdm+L0AYuPGC7/Ucb/z5GDtvEQdOMMFvqB Kq8dPE9BMbNdpj+cQS1QzaTfIf6skN6T5DLHCe9IOFZBCRaaFTO4dT4juZhtg/Du N5Bm/Y1BvQUW6TB7Xmb3Ljxn0qqP1mfNKK68XpH7S503KmQFnu2GUVgT7BVUd2F6 i+zzu9Y4Gv0Bpe3F0D0+zpCeK8rOGig= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:21 2025 by rpki-client