$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b0f3299-ecc1-3ba6-bcac-6d5153c3903f.roa File: 4b0f3299-ecc1-3ba6-bcac-6d5153c3903f.roa (raw, json) Hash identifier: xbekxKDtanrHSTLWmHWQcxBjRgdAEsFHRxaPNGXobPE= Subject key identifier: 72:1B:86:12:D6:97:35:BA:1C:01:C9:55:1F:DF:1B:2D:99:68:41:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849998F4080DBB1461EA7A63410 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b0f3299-ecc1-3ba6-bcac-6d5153c3903f.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.208.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:40:80:db:b1:46:1e:a7:a6:34:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=b5a358ed-d2f0-4925-a17e-5fcdd408656a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:b5:3e:2b:4d:c8:bf:ee:d1:07:89:c5:d7: 97:19:e8:94:1b:22:25:16:fd:8a:9d:9e:b6:99:41: a4:21:e1:be:25:1f:35:b3:b5:16:5c:f4:60:88:5e: 12:86:74:ed:08:1a:1d:13:0f:e6:38:f1:91:b4:90: 95:a3:55:03:00:d5:62:e4:96:bf:37:88:69:91:8d: 3d:95:c1:d4:29:0f:6e:76:e4:96:2d:1b:e4:bb:bd: d6:6f:24:c5:92:dc:81:48:78:51:14:41:fd:42:1a: 03:ab:50:0e:5f:c9:9e:4f:e5:68:e3:3b:eb:14:52: 75:b8:04:81:ad:81:c4:ce:6f:09:b8:7b:c7:54:b5: d3:a5:97:fd:b9:5c:5e:28:60:a9:55:89:88:7a:ef: cf:b7:4f:d9:9d:c3:8b:a6:e6:3a:d5:39:72:fb:eb: 3a:f1:f6:c2:35:80:61:e3:6a:7d:9a:fe:1e:79:1c: f1:84:98:f6:61:a1:22:8e:5a:92:75:db:c0:a5:9a: b9:b0:f7:4c:3a:d5:94:29:c0:2d:8f:df:0e:7a:6a: 26:6d:8a:b2:c2:c7:c6:05:f5:c4:35:92:dd:c5:76: b5:4e:5b:ff:4f:47:4a:c7:2e:9a:1b:53:22:a2:23: e4:77:a0:cb:41:54:c9:53:b6:95:2e:02:31:ff:b8: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1B:86:12:D6:97:35:BA:1C:01:C9:55:1F:DF:1B:2D:99:68:41:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b0f3299-ecc1-3ba6-bcac-6d5153c3903f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:41:6e:37:4b:c1:85:7d:72:41:bc:86:37:7a:ad:48:93:88: f7:75:16:83:4e:2c:04:75:19:97:71:5e:ac:46:d5:82:85:c6: 1a:6e:6e:4d:df:d1:2f:e9:87:b7:79:21:d6:10:bc:bd:85:12: 58:94:77:18:34:c1:3f:c1:e0:6d:12:52:27:50:c6:a4:45:4a: 6d:9a:54:69:53:a3:0a:35:da:73:b2:68:32:c5:db:d6:83:b4: a7:1a:fd:5a:44:ac:01:89:06:12:98:94:3d:ee:9f:b3:cb:3e: 4a:68:13:ef:31:b1:8f:a9:c3:2f:99:da:c6:14:db:62:a3:fc: 0a:c0:80:9f:43:c9:1c:7c:0e:57:74:a0:fc:c8:f5:cb:72:21: 42:6b:9f:3f:b8:d9:d5:32:e1:46:ad:52:df:f6:b9:17:54:c9: 25:62:c2:48:58:fc:bf:c9:21:04:e4:c2:91:5d:cd:27:8d:12: 38:2b:12:18:27:50:1c:d6:cf:06:cf:7c:51:89:d6:38:7e:1c: dc:97:0f:83:8d:8c:08:06:af:17:1e:b3:5e:dc:1d:25:00:ec: 64:38:b9:d0:82:cd:75:93:81:fb:0c:19:72:85:a2:2f:86:63: 82:5d:0b:a9:aa:68:98:50:9e:7c:75:a0:50:8e:13:53:a9:96: 27:21:96:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZj0CA27FGHqemNBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YjVhMzU4ZWQtZDJmMC00OTI1LWExN2UtNWZjZGQ0MDg2NTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2+1PitNyL/u0QeJxdeXGeiUGyIlFv2KnZ62 mUGkIeG+JR81s7UWXPRgiF4ShnTtCBodEw/mOPGRtJCVo1UDANVi5Ja/N4hpkY09 lcHUKQ9uduSWLRvku73WbyTFktyBSHhRFEH9QhoDq1AOX8meT+Vo4zvrFFJ1uASB rYHEzm8JuHvHVLXTpZf9uVxeKGCpVYmIeu/Pt0/ZncOLpuY61Tly++s68fbCNYBh 42p9mv4eeRzxhJj2YaEijlqSddvApZq5sPdMOtWUKcAtj98OemombYqywsfGBfXE NZLdxXa1Tlv/T0dKxy6aG1MioiPkd6DLQVTJU7aVLgIx/7gvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIbhhLWlzW6HAHJVR/fGy2ZaEE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIwZjMyOTktZWNjMS0z YmE2LWJjYWMtNmQ1MTUzYzM5MDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9CmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1BbjdLwYV9ckG8hjd6rUiTiPd1FoNOLAR1GZdxXqxG1YKFxhpubk3f 0S/ph7d5IdYQvL2FEliUdxg0wT/B4G0SUidQxqRFSm2aVGlTowo12nOyaDLF29aD tKca/VpErAGJBhKYlD3un7PLPkpoE+8xsY+pwy+Z2sYU22Kj/ArAgJ9DyRx8Dld0 oPzI9ctyIUJrnz+42dUy4UatUt/2uRdUySViwkhY/L/JIQTkwpFdzSeNEjgrEhgn UBzWzwbPfFGJ1jh+HNyXD4ONjAgGrxces17cHSUA7GQ4udCCzXWTgfsMGXKFoi+G Y4JdC6mqaJhQnnx1oFCOE1OplichlnY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:30 2025 by rpki-client