$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa File: 23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa (raw, json) Hash identifier: RJRX5NYP5EQqSDU26umeTPhKU04lL3iAKzDGAp6VDa8= Subject key identifier: 57:8C:0E:93:8E:E1:05:75:86:91:BD:8A:46:62:49:91:C7:7B:F6:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF48FE8B82EA18C03E997C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8f:e8:b8:2e:a1:8c:03:e9:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b2830760-9d2e-482e-bf75-c9a0a18c1e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:3a:21:eb:19:12:31:cf:4e:25:e0:5d:d8: 38:c5:52:0b:39:b5:8f:59:3e:89:cc:26:dd:71:a1: f8:68:5e:58:04:c3:84:ec:ca:4e:fc:6d:57:32:ba: 2a:3c:20:b3:a3:be:66:33:7f:71:0b:ff:e2:98:70: d8:a8:e3:17:2d:0f:5d:2a:81:5e:b7:17:7d:9a:bb: c8:93:35:15:0d:7b:02:2d:54:6e:28:28:a9:63:c5: 38:d8:f5:c1:17:61:22:ab:08:98:0b:be:68:ad:4c: f2:13:7c:47:d5:72:1d:0b:78:82:c6:1c:20:4a:1a: 9b:be:60:99:a9:ce:d5:ac:07:a8:fc:b8:58:43:c7: 1d:f6:52:15:2c:06:94:0d:ac:bb:b6:f4:ed:a4:68: 94:dd:e7:c9:b5:66:b8:34:c7:24:a3:03:c7:3b:01: 4e:ee:ef:b5:94:c8:a2:f6:be:52:99:1f:49:4c:98: a2:74:8c:17:aa:fc:2b:fe:33:da:2a:ed:b4:76:0b: 53:53:de:dc:1b:db:7c:88:c7:00:a3:38:23:de:b0: f6:6c:93:7d:08:2b:c0:8c:b2:ad:2d:09:7b:a1:30: 84:23:aa:69:4a:8f:43:6d:13:fd:9a:62:38:f6:42: 56:dd:08:28:c1:da:d8:b5:4d:1e:03:ce:95:4c:87: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:0E:93:8E:E1:05:75:86:91:BD:8A:46:62:49:91:C7:7B:F6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:23:27:b9:88:17:71:1e:cf:7f:68:fa:1e:b7:0b:55:2e:8e: 3e:88:c6:74:f0:c6:a9:de:3e:99:48:00:dc:fc:4a:85:2f:a1: ef:5e:12:f3:bb:0c:6c:27:47:5e:f6:60:e3:7e:33:7a:9b:67: 3a:5f:30:dc:3c:82:87:e1:93:f2:f4:33:05:f9:84:26:8d:7f: 44:58:36:80:90:86:3e:03:99:db:c8:2d:c4:6a:9a:75:93:cb: b5:94:4f:a5:e2:bb:42:13:c2:83:52:0a:dc:13:0f:e2:7d:8a: 7b:14:b1:4e:d0:10:a8:e3:6e:d8:21:d0:cb:6c:bc:3b:c5:fd: b0:b1:94:70:b1:62:5d:66:7b:15:5b:92:ad:d9:cd:b5:e6:ba: 7c:5a:06:d5:9d:ce:23:7f:3f:f9:61:8b:53:c1:8e:dd:3b:4d: 83:a0:2b:5a:53:7d:e3:a2:57:98:e5:40:d5:ad:27:5a:89:43: c6:84:84:d3:1e:84:43:9b:11:38:f1:30:ae:01:e3:5d:a8:a4: f2:ee:23:1e:bf:0c:81:b8:46:c4:06:3b:f2:c7:80:7a:b4:6f: 5e:da:34:1a:cf:91:2b:94:1a:57:f0:0d:8a:da:57:f4:90:81: e7:33:e1:d7:fe:6e:85:bf:75:c1:c2:f8:d8:fe:66:35:9f:06: fe:3c:a3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9I/ouC6hjAPpl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjI4MzA3NjAtOWQyZS00ODJlLWJmNzUtYzlhMGExOGMxZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLM6IesZEjHPTiXgXdg4xVILObWPWT6JzCbd caH4aF5YBMOE7MpO/G1XMroqPCCzo75mM39xC//imHDYqOMXLQ9dKoFetxd9mrvI kzUVDXsCLVRuKCipY8U42PXBF2EiqwiYC75orUzyE3xH1XIdC3iCxhwgShqbvmCZ qc7VrAeo/LhYQ8cd9lIVLAaUDay7tvTtpGiU3efJtWa4NMckowPHOwFO7u+1lMii 9r5SmR9JTJiidIwXqvwr/jPaKu20dgtTU97cG9t8iMcAozgj3rD2bJN9CCvAjLKt LQl7oTCEI6ppSo9DbRP9mmI49kJW3QgowdrYtU0eA86VTIcdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeMDpOO4QV1hpG9ikZiSZHHe/ZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlODNlY2EtZGU1MS0z YjZjLWI1YTAtYmJkMWI3NmM4ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8jJ7mIF3Eez39o+h63C1Uujj6IxnTwxqnePplIANz8SoUvoe9eEvO7 DGwnR172YON+M3qbZzpfMNw8gofhk/L0MwX5hCaNf0RYNoCQhj4DmdvILcRqmnWT y7WUT6Xiu0ITwoNSCtwTD+J9insUsU7QEKjjbtgh0MtsvDvF/bCxlHCxYl1mexVb kq3ZzbXmunxaBtWdziN/P/lhi1PBjt07TYOgK1pTfeOiV5jlQNWtJ1qJQ8aEhNMe hEObETjxMK4B412opPLuIx6/DIG4RsQGO/LHgHq0b17aNBrPkSuUGlfwDYraV/SQ gecz4df+boW/dcHC+Nj+ZjWfBv48o1s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:08 2025 by rpki-client