$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30fdcd5e-94ad-351b-a7d4-e7fb68a61aa4.roa File: 30fdcd5e-94ad-351b-a7d4-e7fb68a61aa4.roa (raw, json) Hash identifier: sVL8pRRnVCC+7s4Ruii8v9VYQ+KoyGlk97OeX5UkTXo= Subject key identifier: F2:50:5C:F1:8A:92:42:E5:81:E1:45:72:10:9D:DD:76:F5:57:9F:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D78A731F596237690D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30fdcd5e-94ad-351b-a7d4-e7fb68a61aa4.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d7:8a:73:1f:59:62:37:69:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=c03272b5-bbd3-4df7-94a4-269cfe5a0a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:21:c1:a6:08:13:c7:1b:79:74:0c:6e:dc: 8a:c3:fe:e5:56:ee:fb:e2:eb:78:13:a8:1f:7a:b1: 5d:71:cc:f0:31:52:8f:27:6a:31:84:f9:d4:cb:b1: 8d:c8:55:d1:fc:13:39:60:36:8c:23:4d:6a:69:b1: 40:5a:8a:1f:ca:06:9a:71:26:3a:90:ea:ea:d6:aa: 28:8f:aa:74:7f:11:da:1d:03:bc:27:2f:b4:13:72: 66:22:72:6a:97:4a:12:18:1d:c1:61:ab:5c:d0:fb: a7:f6:19:72:13:cc:7d:fa:1b:76:fb:0b:7e:1b:e5: 2e:4d:79:81:92:5f:3b:4e:dd:f4:4c:a2:8a:06:c1: bd:be:b1:54:88:23:f0:57:b6:1d:7b:73:62:f9:d4: 38:29:2c:f9:a1:df:5d:75:16:17:75:64:50:e2:02: d0:77:14:77:fe:d2:6a:31:f6:62:66:72:09:aa:21: dd:b0:78:49:fb:c2:84:5f:0b:d4:c3:77:af:5d:6b: f2:6e:a4:f2:93:28:07:ad:45:d5:62:d1:48:a3:25: 47:70:27:d3:89:e2:44:f2:d4:5c:fd:6c:5f:d4:f6: c5:18:50:9b:16:21:e5:b6:9e:37:2e:fa:c9:d1:12: f3:bb:b2:51:57:6a:9a:b8:c1:40:b1:ab:e8:95:6f: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:50:5C:F1:8A:92:42:E5:81:E1:45:72:10:9D:DD:76:F5:57:9F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30fdcd5e-94ad-351b-a7d4-e7fb68a61aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2d:65:49:10:f4:08:79:7b:3f:3f:63:e2:6a:e0:09:a8:81: e8:61:b1:3b:7f:45:98:bc:30:e1:f2:24:2d:e6:27:c5:17:28: c2:cc:2e:78:9c:d2:8f:cf:f5:f6:38:42:0c:cc:c9:1d:9a:ac: 29:3e:07:7c:b5:1e:b4:52:33:02:d5:5f:09:cb:0d:5e:41:96: d1:d2:3d:cd:2c:08:28:fb:e9:8a:8f:41:cb:ef:37:9a:bc:b0: 8a:e5:5a:01:54:cb:2c:93:77:b3:3b:b3:2b:4c:43:5f:c1:5f: b0:fa:02:28:9b:b3:99:e2:72:d8:2b:42:8a:3f:4c:e2:43:79: d4:ba:d0:68:79:3b:8f:0a:35:7d:79:c6:93:41:94:bd:ec:76: 21:0e:3b:4a:4c:f1:25:ae:33:8a:e8:5a:9a:71:11:32:75:e4: 71:be:69:10:ab:9f:97:5d:69:64:22:a8:39:a0:4f:cc:cf:01: da:dc:00:f6:a2:78:d9:e5:aa:36:83:e5:11:4f:f1:25:c5:38: 17:37:70:6e:6e:11:1b:b8:35:0c:ca:55:55:47:65:0d:ba:6e: 93:3c:03:2e:62:fe:6f:2a:d3:33:48:d3:21:d0:b8:ea:86:22: 51:ed:39:be:6f:d0:82:9a:e5:e9:03:2f:b2:45:0b:e4:19:c7: a9:c2:ad:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdeKcx9ZYjdpDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YzAzMjcyYjUtYmJkMy00ZGY3LTk0YTQtMjY5Y2ZlNWEwYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwUhwaYIE8cbeXQMbtyKw/7lVu774ut4E6gf erFdcczwMVKPJ2oxhPnUy7GNyFXR/BM5YDaMI01qabFAWoofygaacSY6kOrq1qoo j6p0fxHaHQO8Jy+0E3JmInJql0oSGB3BYatc0Pun9hlyE8x9+ht2+wt+G+UuTXmB kl87Tt30TKKKBsG9vrFUiCPwV7Yde3Ni+dQ4KSz5od9ddRYXdWRQ4gLQdxR3/tJq MfZiZnIJqiHdsHhJ+8KEXwvUw3evXWvybqTykygHrUXVYtFIoyVHcCfTieJE8tRc /Wxf1PbFGFCbFiHltp43LvrJ0RLzu7JRV2qauMFAsavolW/+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJQXPGKkkLlgeFFchCd3Xb1V5+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzBmZGNkNWUtOTRhZC0z NTFiLWE3ZDQtZTdmYjY4YTYxYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4tZUkQ9Ah5ez8/Y+Jq4AmogehhsTt/RZi8MOHyJC3mJ8UXKMLMLnic 0o/P9fY4QgzMyR2arCk+B3y1HrRSMwLVXwnLDV5BltHSPc0sCCj76YqPQcvvN5q8 sIrlWgFUyyyTd7M7sytMQ1/BX7D6Aiibs5nictgrQoo/TOJDedS60Gh5O48KNX15 xpNBlL3sdiEOO0pM8SWuM4roWppxETJ15HG+aRCrn5ddaWQiqDmgT8zPAdrcAPai eNnlqjaD5RFP8SXFOBc3cG5uERu4NQzKVVVHZQ26bpM8Ay5i/m8q0zNI0yHQuOqG IlHtOb5v0IKa5ekDL7JFC+QZx6nCrUE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:17 2025 by rpki-client