$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3535e2-54d7-3fe8-a386-db8c5610aabe.roa File: 2e3535e2-54d7-3fe8-a386-db8c5610aabe.roa (raw, json) Hash identifier: 7JRtCxwF0rBPk+ilVpR8Hlj6Q1j0ab7/wFitVsFP4Ys= Subject key identifier: FA:95:99:A2:13:2B:5B:D4:4E:86:E4:5C:15:E2:77:1A:A5:DF:B5:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D97E417553FB70238600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3535e2-54d7-3fe8-a386-db8c5610aabe.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d9:7e:41:75:53:fb:70:23:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=09f2255d-4bab-4c48-979b-eadb7487636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:7a:69:2f:26:c2:92:45:b0:08:8c:4c:aa: 2d:92:31:96:69:aa:6c:32:6a:f8:2d:43:c0:9b:f8: d8:bb:6e:80:26:63:fb:c0:7e:43:70:0e:5b:c6:00: 47:28:4a:66:b4:35:2f:c5:55:ee:fd:da:4d:08:fa: 1b:0a:f7:26:b7:e0:2e:7a:52:96:2a:d1:13:3f:86: 3a:d6:a5:f5:5f:41:4d:99:d3:db:71:10:fe:56:15: df:9d:e0:71:95:a8:bc:80:35:a0:88:4b:0e:6c:2a: 25:24:25:54:91:50:eb:cf:3b:7f:04:70:e1:57:2b: ce:13:db:90:a0:ff:40:bf:1c:0e:f6:1d:c4:1a:a1: 88:40:a7:d9:a9:ba:88:6e:d0:71:04:e7:85:6f:ec: 93:6b:33:78:5e:79:f1:f0:99:7a:2b:d4:e5:cf:88: f2:0b:b3:1c:bb:bd:f0:61:57:d8:b5:c4:b7:0b:a5: 66:d8:54:78:65:46:04:c6:6e:84:c4:12:bd:0c:b6: 4d:22:51:c5:26:37:3e:f3:92:54:d1:e7:12:39:e9: 3d:f8:29:dc:3c:15:ba:b6:e3:91:47:2b:d8:00:69: 16:39:3d:a9:8f:62:fa:60:d2:c8:f5:cc:6c:4d:63: 1a:3f:e6:4e:f1:f1:2a:96:9f:35:66:c2:0f:c2:4c: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:95:99:A2:13:2B:5B:D4:4E:86:E4:5C:15:E2:77:1A:A5:DF:B5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3535e2-54d7-3fe8-a386-db8c5610aabe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:47:63:aa:88:fc:b0:be:7b:24:d9:c2:15:86:6a:ef:ae:62: a4:d2:c5:60:1e:aa:cf:2e:8d:26:80:28:04:d3:d9:6e:46:87: 1a:98:27:8f:b8:36:1f:e7:c7:bc:d7:59:5a:0c:bc:c5:73:bb: 79:71:b0:b4:ec:1a:69:8d:80:5c:8c:76:34:02:d1:32:e9:43: e3:2b:57:30:47:91:50:1a:44:fe:16:2b:fc:0f:61:78:31:aa: ba:9c:43:33:50:37:85:c1:ea:a5:40:55:d3:a2:d6:96:f8:dd: aa:dd:51:82:e3:12:92:91:ef:64:b4:c2:4d:3f:e9:0c:ce:00: f1:91:c3:7e:7a:42:e1:c6:80:03:f6:1a:69:86:04:56:f8:8f: 9e:a2:9f:84:3f:70:f8:4e:be:c2:fb:d4:c2:f2:da:58:9e:75: 06:46:3f:8c:00:ef:b6:7d:13:c3:a8:10:57:f2:f8:19:0b:b3: 33:0e:18:ff:9e:e2:b0:2d:ce:b2:24:ee:ea:29:91:f3:7e:65: 60:74:09:86:e6:a9:e4:fc:12:2c:52:b1:1a:61:6f:13:85:dc: 42:4f:dc:b4:89:6a:41:2f:da:a6:68:26:dd:85:8c:aa:40:be: 78:13:9b:56:65:a8:97:47:67:4f:39:a7:50:8e:2f:54:47:3c: e8:0c:b6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdl+QXVT+3AjhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDlmMjI1NWQtNGJhYi00YzQ4LTk3OWItZWFkYjc0ODc2MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHR6aS8mwpJFsAiMTKotkjGWaapsMmr4LUPA m/jYu26AJmP7wH5DcA5bxgBHKEpmtDUvxVXu/dpNCPobCvcmt+AuelKWKtETP4Y6 1qX1X0FNmdPbcRD+VhXfneBxlai8gDWgiEsObColJCVUkVDrzzt/BHDhVyvOE9uQ oP9AvxwO9h3EGqGIQKfZqbqIbtBxBOeFb+yTazN4Xnnx8Jl6K9Tlz4jyC7Mcu73w YVfYtcS3C6Vm2FR4ZUYExm6ExBK9DLZNIlHFJjc+85JU0ecSOek9+CncPBW6tuOR RyvYAGkWOT2pj2L6YNLI9cxsTWMaP+ZO8fEqlp81ZsIPwkzmsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqVmaITK1vUTobkXBXidxql37VjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUzNTM1ZTItNTRkNy0z ZmU4LWEzODYtZGI4YzU2MTBhYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtHY6qI/LC+eyTZwhWGau+uYqTSxWAeqs8ujSaAKATT2W5GhxqYJ4+4 Nh/nx7zXWVoMvMVzu3lxsLTsGmmNgFyMdjQC0TLpQ+MrVzBHkVAaRP4WK/wPYXgx qrqcQzNQN4XB6qVAVdOi1pb43ardUYLjEpKR72S0wk0/6QzOAPGRw356QuHGgAP2 GmmGBFb4j56in4Q/cPhOvsL71MLy2liedQZGP4wA77Z9E8OoEFfy+BkLszMOGP+e 4rAtzrIk7uopkfN+ZWB0CYbmqeT8EixSsRphbxOF3EJP3LSJakEv2qZoJt2FjKpA vngTm1ZlqJdHZ085p1COL1RHPOgMttk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:50:28 2025 by rpki-client