$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa File: 20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa (raw, json) Hash identifier: 0188WrN+SqeI51SBaTwhRWVwqf6KdMHbr09NUpjmxDg= Subject key identifier: 06:90:8A:01:56:88:A2:D6:DE:C4:D1:A4:D4:BB:37:7C:7D:9B:05:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF70BFD36CC16616CEA580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.203.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:70:bf:d3:6c:c1:66:16:ce:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=bccf09cb-1e6e-4fb5-bb3a-6715e9746682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:e6:f5:17:07:f3:57:54:08:26:c9:5f:f0: 79:22:93:b7:b1:b0:7c:3c:8d:ef:8d:ff:59:42:f0: 7d:3f:6f:a3:92:5c:21:4b:00:34:aa:e9:c5:a3:21: c5:fd:56:e8:52:d1:79:1e:4a:28:a9:16:3d:f3:f2: 42:0d:91:25:b2:f2:80:23:be:63:27:41:cf:07:1e: ee:ac:8c:6b:76:bc:67:c4:21:68:14:52:16:66:50: 59:b5:5c:55:c6:e1:54:4b:dc:d7:c1:ca:35:07:31: 36:f8:63:8b:59:46:1d:fc:d7:01:31:b0:de:79:3d: 06:2d:fc:25:bf:cc:19:18:8d:ad:66:29:fb:55:30: 85:d9:79:7e:a6:bc:a4:65:0c:e1:84:1f:a7:46:0b: fd:04:b1:1a:3f:c3:5b:e8:b5:d1:9f:6c:b9:6b:61: a1:cf:7f:66:f8:9e:8a:55:64:6e:96:33:ac:8b:bb: aa:95:50:90:a6:54:af:25:6d:e2:a7:57:46:c6:69: 07:73:c1:ac:9e:90:69:83:12:45:b9:cd:d8:09:5f: 87:ac:fb:ed:df:36:b6:4f:ba:6f:6b:a6:0c:52:12: a3:3d:1c:b5:ac:70:31:61:e0:a9:37:ae:a1:d3:0f: 5d:09:b8:4c:2c:6f:66:23:22:49:b9:66:7a:35:14: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:90:8A:01:56:88:A2:D6:DE:C4:D1:A4:D4:BB:37:7C:7D:9B:05:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:31:7d:da:73:aa:89:3e:b9:0f:41:a1:67:d8:68:c5:b0:3e: 4d:35:e0:90:b7:a3:07:57:dd:7d:3b:84:e5:f1:76:33:ba:2a: 9b:a8:10:5d:84:45:96:ca:ab:b5:ec:c1:d3:da:03:f3:db:b2: 7a:01:40:b0:c6:37:ed:aa:76:6b:da:2b:43:37:8b:6f:e4:7c: 71:00:9f:be:88:26:b8:4e:95:93:3a:88:4d:44:7a:58:40:a3: 45:09:6d:75:06:67:be:cd:f5:3c:4d:d5:83:8e:90:1b:6c:7e: 4f:f2:58:db:75:ba:38:33:8e:55:be:17:2e:2b:8c:6c:0e:0a: 17:e8:c9:80:48:a4:81:b6:69:e4:87:04:73:1f:09:c5:1b:f1: 44:7c:b4:2f:40:0c:76:61:ea:09:0d:d4:5b:a8:c7:93:dc:29: 96:d6:12:87:aa:3c:53:83:59:ec:84:66:33:a6:82:56:2b:eb: 36:78:de:3d:86:3a:33:33:90:e5:27:fd:63:6c:ed:1c:c3:c9: 0d:d8:bc:d8:75:9f:57:5c:0b:f5:29:65:62:32:eb:16:63:0e: 38:42:46:2c:61:b8:5f:54:5b:c1:0e:75:0d:27:2a:e8:ef:94: 87:66:33:f8:24:77:78:d7:b0:b1:02:21:89:0b:8b:fa:42:ff: c5:8f:eb:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz3C/02zBZhbOpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmNjZjA5Y2ItMWU2ZS00ZmI1LWJiM2EtNjcxNWU5NzQ2NjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwDm9RcH81dUCCbJX/B5IpO3sbB8PI3vjf9Z QvB9P2+jklwhSwA0qunFoyHF/VboUtF5HkooqRY98/JCDZElsvKAI75jJ0HPBx7u rIxrdrxnxCFoFFIWZlBZtVxVxuFUS9zXwco1BzE2+GOLWUYd/NcBMbDeeT0GLfwl v8wZGI2tZin7VTCF2Xl+prykZQzhhB+nRgv9BLEaP8Nb6LXRn2y5a2Ghz39m+J6K VWRuljOsi7uqlVCQplSvJW3ip1dGxmkHc8GsnpBpgxJFuc3YCV+HrPvt3za2T7pv a6YMUhKjPRy1rHAxYeCpN66h0w9dCbhMLG9mIyJJuWZ6NRSw7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaQigFWiKLW3sTRpNS7N3x9mwVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBkMTFmOTUtNWUzNS0z ZjA0LWFkOWQtNGRmZTc1NGQ1YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgxfdpzqok+uQ9BoWfYaMWwPk014JC3owdX3X07hOXxdjO6KpuoEF2E RZbKq7XswdPaA/PbsnoBQLDGN+2qdmvaK0M3i2/kfHEAn76IJrhOlZM6iE1EelhA o0UJbXUGZ77N9TxN1YOOkBtsfk/yWNt1ujgzjlW+Fy4rjGwOChfoyYBIpIG2aeSH BHMfCcUb8UR8tC9ADHZh6gkN1Fuox5PcKZbWEoeqPFODWeyEZjOmglYr6zZ43j2G OjMzkOUn/WNs7RzDyQ3YvNh1n1dcC/UpZWIy6xZjDjhCRixhuF9UW8EOdQ0nKujv lIdmM/gkd3jXsLECIYkLi/pC/8WP6wE= -----END CERTIFICATE-----Generated at Sun Apr 27 06:31:21 2025 by rpki-client