$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24fa6e2b-042c-3c4c-827c-880d60f9310c.roa File: 24fa6e2b-042c-3c4c-827c-880d60f9310c.roa (raw, json) Hash identifier: Xo2TmYm2kFdauJUSYd/SgE92iBi8qjVZSlRezW+X+6o= Subject key identifier: 82:5B:B5:15:8B:FF:F2:E1:D6:8A:81:90:C4:48:28:B5:26:35:3B:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DE1AF1E3DE75D65F9C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24fa6e2b-042c-3c4c-827c-880d60f9310c.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.207.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:de:1a:f1:e3:de:75:d6:5f:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b5e4fc55-1f03-47ab-ac52-a170bad3d248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:93:a8:c5:69:b0:47:22:ff:c7:a0:be:04: f8:35:0d:f7:17:ab:d5:89:8a:52:1d:56:cc:d9:7f: 1b:f0:cc:28:c6:8d:38:0b:e6:5b:26:c0:69:26:e8: 30:a8:6d:c4:aa:d8:23:69:56:82:f4:1c:46:3c:63: 0f:74:b4:89:97:c8:97:37:d2:ff:dc:92:de:1b:e0: 9f:24:c7:ce:52:f6:9b:92:b8:08:ec:98:96:da:6d: c3:f0:47:1d:40:59:c4:55:ca:57:ec:1e:9d:d5:fd: 4d:36:96:b2:b8:28:f9:9d:42:d2:75:50:87:6f:0d: 11:d5:17:09:fa:89:84:65:e1:41:3f:65:89:78:55: 4f:cc:84:fb:48:96:04:8e:2a:69:e1:58:7f:56:02: ac:1e:1d:69:26:63:a3:bf:ec:16:14:75:1f:41:a0: 14:b4:2c:01:82:8d:e4:47:ef:1c:e3:30:86:9e:a1: 57:60:4a:33:17:5c:db:8f:43:10:e5:cc:75:5d:6b: 5f:fc:f4:b7:97:be:57:7e:fa:22:59:60:cb:98:9d: a0:a5:4d:e6:f7:7c:69:17:ad:9c:07:27:4a:2c:55: ae:2f:6d:98:bb:bf:c0:15:d3:ae:1f:0a:8a:cd:8a: ec:0a:02:ae:50:e3:49:2d:74:38:46:9a:40:25:02: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5B:B5:15:8B:FF:F2:E1:D6:8A:81:90:C4:48:28:B5:26:35:3B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24fa6e2b-042c-3c4c-827c-880d60f9310c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:32:39:10:e1:e9:c3:9c:04:18:d5:38:74:a1:6a:09:00:83: 38:b9:99:4d:69:ff:e7:f0:ff:46:48:7c:20:63:5a:1d:99:d9: ee:77:a2:b1:50:50:40:53:95:24:23:64:22:51:c7:09:4a:a4: d3:d5:54:ad:03:82:56:86:26:e0:ff:d8:67:a3:d9:4a:6c:6a: 36:ba:c8:35:bd:bb:61:8a:c8:1d:ce:bd:c2:a9:1e:80:43:e7: 87:d4:8e:11:35:6f:1f:32:f3:ae:db:ac:1e:0d:ab:d1:43:6e: 04:03:71:d0:62:73:1a:06:e3:46:f0:c2:0d:57:9b:c1:17:3f: 91:7a:ca:3b:34:7a:a4:d4:19:d7:e8:5b:a5:cc:96:2d:1e:b0: 86:c0:f6:cf:c2:da:5e:8e:aa:6e:da:80:b4:f5:55:cb:19:ca: d2:03:dd:eb:1d:80:b5:8b:08:32:6e:4d:ec:b2:71:2a:cf:e1: 54:2d:d9:13:76:17:8c:8e:43:d4:b3:16:57:00:86:31:42:1b: d7:a0:d0:75:db:1c:74:7d:07:7d:44:b8:b1:5d:06:73:ae:0e: 9b:83:5b:fa:65:a9:f9:28:2f:ab:39:c2:64:ca:53:4d:d2:a6: 72:38:21:ba:72:a4:f5:52:f8:0a:77:1f:b0:76:51:c9:e4:d6: 6c:aa:95:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd4a8ePeddZfnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjVlNGZjNTUtMWYwMy00N2FiLWFjNTItYTE3MGJhZDNkMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3CTqMVpsEci/8egvgT4NQ33F6vViYpSHVbM 2X8b8Mwoxo04C+ZbJsBpJugwqG3EqtgjaVaC9BxGPGMPdLSJl8iXN9L/3JLeG+Cf JMfOUvabkrgI7JiW2m3D8EcdQFnEVcpX7B6d1f1NNpayuCj5nULSdVCHbw0R1RcJ +omEZeFBP2WJeFVPzIT7SJYEjipp4Vh/VgKsHh1pJmOjv+wWFHUfQaAUtCwBgo3k R+8c4zCGnqFXYEozF1zbj0MQ5cx1XWtf/PS3l75XfvoiWWDLmJ2gpU3m93xpF62c BydKLFWuL22Yu7/AFdOuHwqKzYrsCgKuUONJLXQ4RppAJQICKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJbtRWL//Lh1oqBkMRIKLUmNTvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRmYTZlMmItMDQyYy0z YzRjLTgyN2MtODgwZDYwZjkzMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIyORDh6cOcBBjVOHShagkAgzi5mU1p/+fw/0ZIfCBjWh2Z2e53orFQ UEBTlSQjZCJRxwlKpNPVVK0DglaGJuD/2Gej2Upsaja6yDW9u2GKyB3OvcKpHoBD 54fUjhE1bx8y867brB4Nq9FDbgQDcdBicxoG40bwwg1Xm8EXP5F6yjs0eqTUGdfo W6XMli0esIbA9s/C2l6Oqm7agLT1VcsZytID3esdgLWLCDJuTeyycSrP4VQt2RN2 F4yOQ9SzFlcAhjFCG9eg0HXbHHR9B31EuLFdBnOuDpuDW/plqfkoL6s5wmTKU03S pnI4IbpypPVS+Ap3H7B2Ucnk1myqlcs= -----END CERTIFICATE-----Generated at Sat Apr 26 15:50:25 2025 by rpki-client