$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd0aa6a-73cb-3ef2-b752-88983a4258fd.roa File: 0bd0aa6a-73cb-3ef2-b752-88983a4258fd.roa (raw, json) Hash identifier: TPqI5aOB8AQiUp3qvRjk6CHkrIJq8er7TLoDSTS1c4c= Subject key identifier: C0:FD:43:41:44:10:3B:3D:58:2F:CE:31:75:0D:33:76:B5:A3:46:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF675C259C41FFFDCC4280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd0aa6a-73cb-3ef2-b752-88983a4258fd.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.202.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:67:5c:25:9c:41:ff:fd:cc:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=3ae7771f-f383-4be3-98b5-366c850869b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:37:1c:b9:95:10:4f:1c:f0:af:9f:b5:cb:1a: 52:10:83:68:b6:d0:8c:ef:79:6a:af:bb:0d:74:ea: 35:7e:3b:b5:0c:3a:94:e8:5f:91:c1:b9:f6:de:68: ed:95:22:b3:3f:30:3b:10:29:1c:a5:a8:56:be:28: 3e:63:79:4b:ca:f9:e6:79:01:74:e1:b5:de:f3:7c: 05:36:40:2e:9f:4b:f4:fe:0e:4c:23:2e:94:19:33: b9:2c:f7:95:9c:2f:6d:c6:11:19:30:09:7e:17:ee: 3a:3b:2c:be:ef:b9:58:a9:d8:b9:f2:b5:8a:6d:c0: 7e:0d:aa:34:76:3f:45:04:4f:22:12:a0:66:0c:8b: b1:69:79:e5:52:a0:2d:71:3c:8b:0b:ed:a9:9c:a3: 8d:9a:61:d6:85:0b:2e:44:25:75:77:75:7d:ca:b4: c9:21:ec:9e:56:ee:89:ff:88:0a:38:43:ea:06:f8: 3f:ce:4d:5f:f7:9e:72:06:92:f1:91:9f:98:fe:1e: 40:ad:e8:56:30:2a:52:2b:ec:c6:7f:2b:fb:2d:d8: f5:84:14:20:cd:4a:c1:74:a3:2f:9f:cd:18:92:0a: 5b:72:b8:c6:f1:a5:fe:8f:f1:3c:d2:64:ca:3c:39: d6:01:5b:5e:56:c2:ee:ed:72:28:20:3b:8a:66:6e: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:43:41:44:10:3B:3D:58:2F:CE:31:75:0D:33:76:B5:A3:46:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd0aa6a-73cb-3ef2-b752-88983a4258fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:95:bc:05:59:f0:20:58:62:f6:f5:e4:dd:e4:4e:ad:d3:6e: 57:b1:e6:be:a3:51:da:ac:fc:cf:fb:36:7e:83:ab:49:0f:4d: ea:5e:47:0b:b5:0e:ad:18:15:bc:a0:b3:8e:ce:c9:4e:a6:db: 7b:ea:b2:bf:53:b5:8b:98:15:6b:ae:f2:5d:b1:48:74:85:23: 7c:4e:6c:a4:51:d6:e7:80:78:0a:2e:dc:9f:67:67:c8:58:83: a3:dc:2d:69:81:9a:0e:6b:6c:c1:d0:9f:b2:b4:7c:28:ae:13: 4f:52:42:98:70:af:f9:2c:b7:b8:ec:ce:21:eb:db:0b:5f:1d: c7:c2:a9:f6:e6:95:7b:7d:1a:df:e4:ce:55:38:6f:f0:89:e3: 7b:02:65:46:0e:b6:b4:ec:4d:e5:2c:9a:c3:09:69:35:51:ee: ae:f5:8a:17:16:a6:eb:f1:e1:bf:56:60:f8:fa:48:b6:dd:3f: 10:2b:a4:34:67:d6:64:e0:24:8b:98:b7:cc:69:68:51:60:62: 01:1d:d6:12:f0:1c:dc:16:7d:15:4f:6e:b0:45:8b:d8:a8:73: 26:d5:8a:74:bc:fb:01:21:22:ef:7e:e1:ff:be:c1:ed:33:46: 4e:81:2a:37:f6:83:22:80:5f:05:57:67:3f:ff:47:36:6b:7b: 3a:a9:96:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2dcJZxB//3MQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk M2FlNzc3MWYtZjM4My00YmUzLTk4YjUtMzY2Yzg1MDg2OWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTccuZUQTxzwr5+1yxpSEINottCM73lqr7sN dOo1fju1DDqU6F+Rwbn23mjtlSKzPzA7ECkcpahWvig+Y3lLyvnmeQF04bXe83wF NkAun0v0/g5MIy6UGTO5LPeVnC9txhEZMAl+F+46Oyy+77lYqdi58rWKbcB+Dao0 dj9FBE8iEqBmDIuxaXnlUqAtcTyLC+2pnKONmmHWhQsuRCV1d3V9yrTJIeyeVu6J /4gKOEPqBvg/zk1f955yBpLxkZ+Y/h5ArehWMCpSK+zGfyv7Ldj1hBQgzUrBdKMv n80YkgpbcrjG8aX+j/E80mTKPDnWAVteVsLu7XIoIDuKZm7ZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD9Q0FEEDs9WC/OMXUNM3a1o0b0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJkMGFhNmEtNzNjYi0z ZWYyLWI3NTItODg5ODNhNDI1OGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaVvAVZ8CBYYvb15N3kTq3Tblex5r6jUdqs/M/7Nn6Dq0kPTepeRwu1 Dq0YFbygs47OyU6m23vqsr9TtYuYFWuu8l2xSHSFI3xObKRR1ueAeAou3J9nZ8hY g6PcLWmBmg5rbMHQn7K0fCiuE09SQphwr/kst7jsziHr2wtfHcfCqfbmlXt9Gt/k zlU4b/CJ43sCZUYOtrTsTeUsmsMJaTVR7q71ihcWpuvx4b9WYPj6SLbdPxArpDRn 1mTgJIuYt8xpaFFgYgEd1hLwHNwWfRVPbrBFi9iocybVinS8+wEhIu9+4f++we0z Rk6BKjf2gyKAXwVXZz//RzZrezqplic= -----END CERTIFICATE-----Generated at Sun Apr 27 01:55:45 2025 by rpki-client