$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e406017-fc74-38c3-a4ed-56476faa916a.roa File: 4e406017-fc74-38c3-a4ed-56476faa916a.roa (raw, json) Hash identifier: 99cJOkBIiGjB80BW/IFkELIAqwvVVr+SHnKJ/jafyFY= Subject key identifier: DD:F8:7B:67:8D:B8:5A:0A:B4:14:6D:F5:69:3C:02:96:E9:C3:2E:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279C14AF89F1BEB952010E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e406017-fc74-38c3-a4ed-56476faa916a.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.207.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c1:4a:f8:9f:1b:eb:95:20:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=9977a545-ad2e-4aca-b20f-a1a55b8631fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:d8:36:93:8e:be:f2:a4:31:9e:40:c6:ab: b2:cc:ac:98:73:c6:bb:01:ea:0c:ed:4c:b3:0b:d2: 8b:57:16:9b:07:fd:42:20:0c:95:fc:6a:ca:ea:d6: 58:6a:16:9b:dd:96:a8:18:c0:79:d7:2b:22:d4:cb: 4f:b4:22:5f:60:aa:69:ba:bf:af:2d:8e:e3:e4:81: 46:8d:94:44:1a:85:4a:7a:37:1c:a0:f1:43:66:c4: 94:1d:5d:02:89:77:97:e5:d1:fd:c0:58:ea:fa:45: 23:17:9b:60:3b:1b:25:f0:22:cd:80:2c:1d:26:e2: 7d:1e:87:44:c1:db:03:9d:1a:f7:5b:0c:56:14:28: f3:88:fd:3b:82:dc:a6:11:7c:48:dc:bb:55:6b:5c: 7d:de:cb:6a:d4:f4:3a:95:6f:e0:c8:13:e9:21:ee: 39:3c:23:a1:49:98:84:dd:9f:6e:dd:af:10:96:be: 0c:19:d4:4d:f3:f2:b8:a8:e8:30:56:a9:bb:b8:8e: c2:3a:51:69:5f:38:0b:b3:f5:9f:64:6b:57:45:c2: ec:50:b8:8c:e4:6f:65:91:36:ef:ac:56:12:66:36: d1:be:24:4c:c5:09:98:75:53:f5:0a:e7:b2:d9:c3: 1d:ad:a8:de:65:c1:7f:0e:26:26:f4:1f:89:60:21: 36:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F8:7B:67:8D:B8:5A:0A:B4:14:6D:F5:69:3C:02:96:E9:C3:2E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e406017-fc74-38c3-a4ed-56476faa916a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:16:17:40:e3:fb:a5:cc:42:14:2f:6c:38:cc:51:cc:99:36: bb:fc:67:a5:0f:40:14:f2:49:2d:72:0e:ff:ba:5b:96:8f:1e: d1:e5:b2:fb:fc:b8:e1:3e:0c:b7:c4:f0:92:30:fd:57:92:fa: 60:cb:77:20:2b:b4:b7:bb:7d:42:ad:77:09:25:16:bd:87:29: 3a:c7:c3:ee:bc:1e:4e:6c:0a:7c:eb:47:fc:4c:ad:8c:c1:ab: aa:b7:24:1e:1e:da:a2:c6:71:9c:1d:22:82:f4:17:40:a5:17: fb:07:e7:11:17:fb:fe:21:35:45:7d:e9:c4:d2:ba:bb:7c:3b: 43:c7:08:49:53:ae:be:d3:c6:9a:27:10:fa:06:04:37:83:8c: e8:9d:55:3f:60:fe:95:78:4c:95:cf:1e:43:82:74:0b:30:96: 05:f5:e1:bd:97:db:10:3e:89:c1:2f:ae:a9:15:44:b5:db:e2: 37:62:89:38:25:1c:47:fa:49:12:d5:f6:9b:5d:84:01:4a:e5: e1:71:b7:cf:af:b3:8b:8f:72:16:ce:21:bb:1d:f2:b4:02:7d: 0f:8f:6a:0c:76:60:71:e3:8f:d4:a4:39:c9:29:e7:f1:86:40: e0:59:45:37:c2:e5:32:8b:51:98:d4:7a:bd:4b:de:7e:fb:1d: 73:41:a8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecFK+J8b65UgEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk OTk3N2E1NDUtYWQyZS00YWNhLWIyMGYtYTFhNTViODYzMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+nYNpOOvvKkMZ5AxquyzKyYc8a7AeoM7Uyz C9KLVxabB/1CIAyV/GrK6tZYahab3ZaoGMB51ysi1MtPtCJfYKppur+vLY7j5IFG jZREGoVKejccoPFDZsSUHV0CiXeX5dH9wFjq+kUjF5tgOxsl8CLNgCwdJuJ9HodE wdsDnRr3WwxWFCjziP07gtymEXxI3LtVa1x93stq1PQ6lW/gyBPpIe45PCOhSZiE 3Z9u3a8Qlr4MGdRN8/K4qOgwVqm7uI7COlFpXzgLs/WfZGtXRcLsULiM5G9lkTbv rFYSZjbRviRMxQmYdVP1Cuey2cMdrajeZcF/DiYm9B+JYCE2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN34e2eNuFoKtBRt9Wk8Apbpwy59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU0MDYwMTctZmM3NC0z OGMzLWE0ZWQtNTY0NzZmYWE5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsWF0Dj+6XMQhQvbDjMUcyZNrv8Z6UPQBTySS1yDv+6W5aPHtHlsvv8 uOE+DLfE8JIw/VeS+mDLdyArtLe7fUKtdwklFr2HKTrHw+68Hk5sCnzrR/xMrYzB q6q3JB4e2qLGcZwdIoL0F0ClF/sH5xEX+/4hNUV96cTSurt8O0PHCElTrr7Txpon EPoGBDeDjOidVT9g/pV4TJXPHkOCdAswlgX14b2X2xA+icEvrqkVRLXb4jdiiTgl HEf6SRLV9ptdhAFK5eFxt8+vs4uPchbOIbsd8rQCfQ+Pagx2YHHjj9SkOckp5/GG QOBZRTfC5TKLUZjUer1L3n77HXNBqAw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:20 2025 by rpki-client