$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa File: 4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa (raw, json) Hash identifier: mWiCJ1mBl3CIedrrRGEFcCY0CsoeLU5BPeD+0VyYtv0= Subject key identifier: 49:46:62:07:08:DF:35:6B:58:2C:4E:78:72:53:5B:1F:E1:1C:17:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA39F02E68B08D062F680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.222.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a3:9f:02:e6:8b:08:d0:62:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=8407de92-973f-4987-afe8-5b31445878bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ed:58:55:e5:3e:b2:55:61:18:34:a4:7a:e2: 9c:0c:05:6c:19:66:6f:f1:d4:49:f3:43:a8:a1:ac: 34:6e:f7:0a:67:da:dc:8b:82:5e:3a:be:d5:a5:14: 62:f4:20:0b:91:b5:e4:e9:87:d4:43:6b:bf:92:17: d8:21:f5:e5:35:b7:df:c4:5e:02:a4:dc:40:f6:79: d9:25:95:fd:b2:bf:af:46:6f:39:47:d0:44:72:ce: 23:c9:2b:9e:80:c4:6f:3c:43:d1:2c:ff:7c:82:5b: 68:fe:dd:65:c9:bd:04:7c:1b:b2:97:25:b7:02:79: 5e:c5:5a:98:1b:4b:c7:58:2b:08:99:b7:bd:d2:85: 7a:61:e8:60:80:ee:98:d4:18:11:8e:dc:33:52:6f: 92:30:6b:9b:85:f0:e3:0f:d3:94:66:18:ea:4c:9d: d8:15:90:fe:2c:ed:a0:53:17:d9:dc:da:c0:97:b3: 91:4c:1c:65:57:74:f7:68:be:ea:c7:17:76:fb:db: 88:8e:da:e9:94:03:e7:a4:0d:15:49:ab:7e:6f:50: f9:9d:a3:2a:c0:51:59:76:45:c2:18:df:e6:f6:e0: 3b:81:7b:ad:90:52:fc:07:73:3b:d6:34:81:68:10: 0c:fd:da:f6:65:8b:0f:05:8a:10:61:fe:16:34:9c: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:62:07:08:DF:35:6B:58:2C:4E:78:72:53:5B:1F:E1:1C:17:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c3:69:6f:9d:fb:cf:28:f4:85:d2:6c:28:16:dd:25:26:de: 30:6d:1b:31:b5:69:b5:76:18:cb:f9:06:02:8e:0c:cd:c5:8c: 00:32:a0:bd:ec:9d:23:6c:6f:b0:b6:ed:3a:a0:8d:45:24:ba: 85:ee:0e:27:b0:e1:b4:16:8a:94:3d:57:10:4b:05:19:8a:1e: 7c:39:1b:ea:9b:d0:cf:12:69:ad:4a:12:a8:9f:ae:4f:be:d8: 23:7f:cd:ef:a1:c1:5f:42:04:36:51:f0:d4:16:95:ec:13:4b: 55:a3:8f:84:62:1c:f1:ed:1f:8f:48:f2:b3:30:b1:5d:d2:c8: 83:d2:5c:ff:eb:57:ab:c3:61:8a:cd:23:f2:29:75:ca:11:8c: ef:26:18:fc:0a:72:19:d6:c8:cf:fd:e6:68:d4:b1:76:ea:5d: 8d:f2:de:df:01:84:fd:27:7e:dc:b6:2c:cd:d3:22:70:72:70: 0f:86:b7:da:02:94:a0:40:a1:27:a4:b6:bd:59:fb:ab:bd:ba: 1b:94:43:44:93:93:12:7a:77:89:9a:30:30:d5:95:16:ec:2d: ae:e1:26:ec:8a:c3:9d:0f:59:a9:66:b9:8d:97:92:56:a5:ed: eb:63:a8:4d:b1:5c:05:78:02:d5:39:5e:5c:85:46:29:c4:8d: f0:ff:f4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6OfAuaLCNBi9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ODQwN2RlOTItOTczZi00OTg3LWFmZTgtNWIzMTQ0NTg3OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO1YVeU+slVhGDSkeuKcDAVsGWZv8dRJ80Oo oaw0bvcKZ9rci4JeOr7VpRRi9CALkbXk6YfUQ2u/khfYIfXlNbffxF4CpNxA9nnZ JZX9sr+vRm85R9BEcs4jySuegMRvPEPRLP98glto/t1lyb0EfBuylyW3AnlexVqY G0vHWCsImbe90oV6YehggO6Y1BgRjtwzUm+SMGubhfDjD9OUZhjqTJ3YFZD+LO2g UxfZ3NrAl7ORTBxlV3T3aL7qxxd2+9uIjtrplAPnpA0VSat+b1D5naMqwFFZdkXC GN/m9uA7gXutkFL8B3M71jSBaBAM/dr2ZYsPBYoQYf4WNJx2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElGYgcI3zVrWCxOeHJTWx/hHBeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE1OGViOWMtMjUzMC0z MDViLThhNGEtZmMyNThiYTExZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnDaW+d+88o9IXSbCgW3SUm3jBtGzG1abV2GMv5BgKODM3FjAAyoL3s nSNsb7C27TqgjUUkuoXuDiew4bQWipQ9VxBLBRmKHnw5G+qb0M8Saa1KEqifrk++ 2CN/ze+hwV9CBDZR8NQWlewTS1Wjj4RiHPHtH49I8rMwsV3SyIPSXP/rV6vDYYrN I/IpdcoRjO8mGPwKchnWyM/95mjUsXbqXY3y3t8BhP0nfty2LM3TInBycA+Gt9oC lKBAoSektr1Z+6u9uhuUQ0STkxJ6d4maMDDVlRbsLa7hJuyKw50PWalmuY2Xklal 7etjqE2xXAV4AtU5XlyFRinEjfD/9JQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:40 2025 by rpki-client