$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa File: 2149f387-6400-383b-bc89-e70cdbcca4c8.roa (raw, json) Hash identifier: +nRQm6xYhGoobTqLrO/mCqTSEw3FU4wyO3+XtCmfK/g= Subject key identifier: 73:D6:BF:90:0E:B6:FF:A6:64:08:39:2A:FF:80:50:62:47:67:86:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769C05BC0872867050BCB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.200.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:c0:5b:c0:87:28:67:05:0b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=45d37db9-6803-47e1-b6fd-9695eb9e6c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:63:ef:9e:81:92:7c:6c:0c:4f:92:25:79: e2:42:93:41:d5:c4:6f:8d:d0:ab:c3:b1:b3:10:7a: 55:b7:3d:6e:36:1d:86:f4:c7:ad:b9:a2:c3:f2:b3: 16:f9:15:45:6d:b3:35:fe:78:ae:ee:5c:5c:4f:d8: 8a:ec:d2:f1:e2:f0:da:83:f4:42:4a:db:51:61:42: d6:32:f4:74:56:98:f1:e7:05:43:a3:8d:c5:20:6e: b5:31:64:4c:44:13:05:a1:d5:61:b9:1b:37:52:14: 54:71:94:e4:8c:af:a8:b2:c5:06:2a:7a:cf:7d:15: 37:0c:98:f2:02:1f:9b:b4:f0:45:1c:aa:71:9a:ef: 81:f4:7d:b8:8d:48:6e:78:f0:12:82:3a:93:30:88: 29:e9:1e:c6:ba:06:c3:7d:62:e6:2f:cf:94:50:91: b1:57:a4:d0:41:b8:1c:89:35:87:db:21:9f:4b:09: 05:8f:47:40:4a:60:44:b1:ca:fe:12:ce:9a:de:ff: 3b:58:fd:55:ef:a6:52:09:94:5e:df:1d:19:b4:b0: 27:57:66:df:c8:bb:19:4e:aa:f4:5b:c6:8f:86:19: 8e:0f:76:f0:7e:83:d6:c3:0c:69:8c:1d:b8:ac:4f: c0:5d:cc:74:c6:48:2d:2d:98:e2:56:a4:30:f8:11: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D6:BF:90:0E:B6:FF:A6:64:08:39:2A:FF:80:50:62:47:67:86:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f6:dc:c0:56:01:bd:53:91:e7:c0:1e:a8:79:b8:f5:69:7b: f5:43:00:ec:90:0f:22:e8:75:40:92:67:a9:c0:da:37:e1:24: 89:68:05:e6:5a:99:f2:20:8d:13:11:8c:57:d3:1a:16:e9:9a: 44:e7:8d:88:4f:e5:fd:73:a3:8d:da:3b:ab:d2:36:a5:c2:60: 0c:a4:c8:12:b9:dd:55:81:7b:74:d4:c5:81:35:c7:b9:38:6a: ea:f4:29:31:51:37:9b:e3:17:8d:66:26:7f:66:82:a1:07:cd: 28:4a:9d:ec:66:88:b9:e2:08:b5:d9:a0:f5:39:33:a5:e8:09: 68:24:5a:23:a8:1f:45:57:91:28:1d:fa:40:b9:fe:41:a2:8c: e2:e8:6a:a4:59:01:84:4a:f6:b9:9e:d9:d8:c9:98:7b:40:89: 32:73:63:10:4f:fe:08:d5:a8:32:57:f6:2d:a2:1f:ae:76:07: a9:72:86:ec:e3:92:1a:95:ad:94:34:36:21:51:10:ad:05:68: 26:dc:78:e9:d5:27:f8:a8:17:31:4c:d2:c9:d4:36:85:1e:f4: 50:93:0c:98:68:b7:60:9b:a2:bf:71:a6:73:84:61:d7:c8:e0: a7:55:f4:1f:3c:40:85:f3:c3:15:e5:b8:d4:7c:c5:f0:71:20: b1:dc:70:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHacBbwIcoZwULywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NDVkMzdkYjktNjgwMy00N2UxLWI2ZmQtOTY5NWViOWU2YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDBj756BknxsDE+SJXniQpNB1cRvjdCrw7Gz EHpVtz1uNh2G9MetuaLD8rMW+RVFbbM1/niu7lxcT9iK7NLx4vDag/RCSttRYULW MvR0Vpjx5wVDo43FIG61MWRMRBMFodVhuRs3UhRUcZTkjK+ossUGKnrPfRU3DJjy Ah+btPBFHKpxmu+B9H24jUhuePASgjqTMIgp6R7GugbDfWLmL8+UUJGxV6TQQbgc iTWH2yGfSwkFj0dASmBEscr+Es6a3v87WP1V76ZSCZRe3x0ZtLAnV2bfyLsZTqr0 W8aPhhmOD3bwfoPWwwxpjB24rE/AXcx0xkgtLZjiVqQw+BFyZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPWv5AOtv+mZAg5Kv+AUGJHZ4adMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE0OWYzODctNjQwMC0z ODNiLWJjODktZTcwY2RiY2NhNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8jaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv23MBWAb1TkefAHqh5uPVpe/VDAOyQDyLodUCSZ6nA2jfhJIloBeZa mfIgjRMRjFfTGhbpmkTnjYhP5f1zo43aO6vSNqXCYAykyBK53VWBe3TUxYE1x7k4 aur0KTFRN5vjF41mJn9mgqEHzShKnexmiLniCLXZoPU5M6XoCWgkWiOoH0VXkSgd +kC5/kGijOLoaqRZAYRK9rme2djJmHtAiTJzYxBP/gjVqDJX9i2iH652B6lyhuzj khqVrZQ0NiFREK0FaCbceOnVJ/ioFzFM0snUNoUe9FCTDJhot2Cbor9xpnOEYdfI 4KdV9B88QIXzwxXluNR8xfBxILHccDI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:08 2025 by rpki-client