$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16f4070a-6108-3b18-a692-61105928a2f1.roa File: 16f4070a-6108-3b18-a692-61105928a2f1.roa (raw, json) Hash identifier: hNvSfMD9kE1DksCaqaCT3mB3aRl4rB/0kG9PGmJpSl0= Subject key identifier: BF:E5:23:13:EF:49:BD:17:3C:F4:93:5D:DD:E7:0E:38:D9:FF:B5:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769D52E4147EFC7E2EBF180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16f4070a-6108-3b18-a692-61105928a2f1.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 9498 IP address blocks: 23.200.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:d5:2e:41:47:ef:c7:e2:eb:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=8270f22e-48bd-4fcc-a16e-358f8ceb004c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:66:a3:31:b5:06:06:37:10:c9:18:91:46:cc: 15:a9:75:68:c5:e3:d0:99:1a:45:1d:86:ba:fe:2e: cc:27:44:72:26:f9:30:96:9c:fc:06:41:7b:c0:ee: 74:56:4e:0d:37:64:1a:ad:a5:c5:a1:4d:73:44:56: 3b:81:75:d9:2c:cd:0c:81:7b:00:1f:d1:56:13:b5: a1:cf:25:f7:49:09:0c:c0:d2:1d:09:01:2c:7d:fa: 80:10:00:07:93:91:f1:db:f2:d5:b7:a9:c7:9c:bd: 37:ba:c9:d4:32:d5:0a:d8:e5:ee:bf:7e:92:52:ae: 5f:5f:38:bc:6e:92:46:63:42:c5:ee:a3:7f:28:03: 3d:b9:61:5c:da:40:6b:26:db:86:a4:9e:2d:a4:f3: 94:8c:61:b5:6b:72:76:a2:0d:9f:f9:e3:fa:e6:14: 1c:4d:2a:ab:19:ba:da:2b:02:58:b2:5d:4f:d0:e2: d2:32:0e:3c:36:6b:03:e3:03:92:50:c6:41:a0:ce: cb:e3:d8:53:c6:36:14:99:c8:fc:69:9a:5f:b0:b6: c9:1b:81:73:d7:d8:46:07:31:80:77:8b:64:ac:51: d4:82:2e:95:9a:f2:7f:fd:59:14:a0:61:9a:e5:87: 72:24:a5:7e:3d:e6:3f:0a:72:2e:67:8d:3a:f0:9c: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E5:23:13:EF:49:BD:17:3C:F4:93:5D:DD:E7:0E:38:D9:FF:B5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16f4070a-6108-3b18-a692-61105928a2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:33:43:47:19:1c:fb:e0:c5:63:2e:f8:7e:45:74:9c:d9:71: f5:55:1a:4e:71:dd:0f:a1:94:b7:8c:8d:bb:fd:6f:a6:61:1a: b4:ad:30:a8:9b:e6:74:58:84:e1:f5:34:4b:79:e9:36:59:a3: 22:a4:b5:31:7b:f0:0f:8e:fe:37:51:42:13:9d:fb:7d:90:7b: 04:7a:7d:f5:16:87:b1:5a:e4:bb:7d:b7:8c:60:ab:6e:87:8c: 3d:25:b8:29:35:38:c2:0d:dd:81:c7:27:b4:e2:80:c9:63:1e: df:33:ea:ba:de:c0:7e:f9:0b:b9:75:20:6b:0b:9d:79:ea:64: dc:14:92:1d:92:d5:59:16:f7:f3:5f:80:f7:82:33:00:4e:ee: b0:bd:eb:24:07:80:a3:5b:f0:95:99:62:c5:6a:52:9d:fb:89: 26:b4:9d:a5:10:ca:4e:9a:10:b5:b3:2d:13:5e:96:af:6e:b0: ad:7d:48:71:a6:26:bd:9f:3f:df:95:51:54:dc:da:01:ff:10: 96:39:b5:24:a6:08:a7:35:70:ee:6c:e8:7c:47:6f:3c:b4:59: 4c:21:aa:ac:36:73:02:1b:b5:fd:ad:32:b8:0d:bc:25:56:24: f9:26:92:30:52:57:ba:68:12:c9:07:71:50:af:e4:27:62:1e: b4:b7:4c:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadUuQUfvx+Lr8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ODI3MGYyMmUtNDhiZC00ZmNjLWExNmUtMzU4ZjhjZWIwMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGajMbUGBjcQyRiRRswVqXVoxePQmRpFHYa6 /i7MJ0RyJvkwlpz8BkF7wO50Vk4NN2QaraXFoU1zRFY7gXXZLM0MgXsAH9FWE7Wh zyX3SQkMwNIdCQEsffqAEAAHk5Hx2/LVt6nHnL03usnUMtUK2OXuv36SUq5fXzi8 bpJGY0LF7qN/KAM9uWFc2kBrJtuGpJ4tpPOUjGG1a3J2og2f+eP65hQcTSqrGbra KwJYsl1P0OLSMg48NmsD4wOSUMZBoM7L49hTxjYUmcj8aZpfsLbJG4Fz19hGBzGA d4tkrFHUgi6VmvJ//VkUoGGa5YdyJKV+PeY/CnIuZ4068Jw5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/lIxPvSb0XPPSTXd3nDjjZ/7X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZmNDA3MGEtNjEwOC0z YjE4LWE2OTItNjExMDU5MjhhMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8juMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIzQ0cZHPvgxWMu+H5FdJzZcfVVGk5x3Q+hlLeMjbv9b6ZhGrStMKib 5nRYhOH1NEt56TZZoyKktTF78A+O/jdRQhOd+32QewR6ffUWh7Fa5Lt9t4xgq26H jD0luCk1OMIN3YHHJ7TigMljHt8z6rrewH75C7l1IGsLnXnqZNwUkh2S1VkW9/Nf gPeCMwBO7rC96yQHgKNb8JWZYsVqUp37iSa0naUQyk6aELWzLRNelq9usK19SHGm Jr2fP9+VUVTc2gH/EJY5tSSmCKc1cO5s6HxHbzy0WUwhqqw2cwIbtf2tMrgNvCVW JPkmkjBSV7poEskHcVCv5CdiHrS3TH8= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:46 2025 by rpki-client