$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cdf958-21aa-381a-b875-4c27fe4c8048.roa File: 57cdf958-21aa-381a-b875-4c27fe4c8048.roa (raw, json) Hash identifier: 8UXgsn0ca9IozupNW3msElkrVfQzxSXvUkYqLwA5nvs= Subject key identifier: 87:6A:2A:27:12:94:C9:67:48:72:37:C4:42:56:AD:DE:B1:53:1B:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49C2C00F0D62FDF1A4AE8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cdf958-21aa-381a-b875-4c27fe4c8048.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.210.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9c:2c:00:f0:d6:2f:df:1a:4a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=81661feb-1957-4290-aea1-11c57952a56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:9f:ad:c1:c5:70:cd:36:78:f1:bd:ac:d0: 22:e6:77:7f:ba:dc:c1:0f:bd:bf:2d:71:3b:69:05: bd:10:7f:3e:67:36:e9:40:f2:7d:08:79:95:a8:58: bf:aa:fb:9d:97:e4:81:f4:1a:5b:98:d2:4f:77:7f: 20:33:f5:f9:c8:23:82:cb:69:ec:84:e6:a2:4a:62: 6a:4e:54:7a:c1:5b:3a:39:7c:bc:1b:08:58:58:97: 18:f0:df:4f:b6:28:01:ad:ad:9c:d5:91:19:94:8e: a2:86:41:cf:cf:a5:1b:41:70:88:e9:9f:10:28:d4: 1e:2f:bf:56:b2:9e:ed:6e:f2:ee:11:90:e6:fe:d3: e0:6b:6d:f9:2b:03:48:d4:fa:d9:7e:ed:91:0b:57: 53:27:d1:39:00:57:75:9b:65:67:db:80:17:2d:32: 62:4f:19:d7:13:f3:5c:a5:88:7b:3f:7c:4d:07:e7: b0:55:a1:c3:59:25:d6:73:5d:7c:a6:bb:9d:d4:64: 01:22:49:cc:b5:72:4b:3e:7d:15:65:f4:fa:e0:02: 4f:e0:d6:dd:e5:9c:3c:59:5e:31:73:b9:6d:d7:3a: 37:99:e5:22:19:7f:8c:d3:fe:ea:42:ba:a7:89:2b: 0e:7b:e4:a9:bf:1a:f5:0a:5c:34:66:b8:01:1a:4f: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6A:2A:27:12:94:C9:67:48:72:37:C4:42:56:AD:DE:B1:53:1B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cdf958-21aa-381a-b875-4c27fe4c8048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fd:ff:72:eb:b8:52:79:76:b1:bf:e6:7a:e4:c3:5d:07:3d: 2e:6f:d7:ff:9e:17:25:bc:58:b4:d1:14:84:aa:61:05:43:98: b3:16:46:af:db:8a:3d:e5:e3:29:4e:89:52:dd:95:2c:84:27: d1:0c:3e:a4:b3:69:e1:bb:82:13:3d:ac:bd:2b:bc:50:6d:16: 06:80:6b:ba:b6:00:bb:6d:3e:e0:d6:21:b3:8d:65:bf:e9:8d: a8:b6:4b:d8:e9:74:2e:03:07:2f:6a:83:d5:b9:40:93:01:38: 32:7f:4b:f6:e2:13:3d:d3:0e:18:db:5a:22:e0:46:cd:8a:4a: e1:22:49:26:9a:5f:0d:0e:1b:88:64:e2:69:78:be:19:fb:1b: 2d:f7:89:83:72:cf:bc:19:5c:3f:a0:c4:3f:43:c3:a5:54:4a: c2:b4:d7:9d:3c:aa:97:62:18:b8:43:cd:94:90:09:57:ca:ef: d9:fa:99:0d:52:22:ca:a5:14:9b:e3:43:6e:4f:0d:3c:95:3c: a0:cd:40:33:6e:9d:fb:03:5b:ec:cf:27:c7:df:5d:e3:06:65: 33:ec:58:82:e0:b0:f7:1c:ae:72:a5:ab:37:71:81:e7:32:6c: 09:36:c9:09:48:f3:b4:9e:58:ad:e4:c9:23:1b:61:6c:37:ea: b9:47:94:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JwsAPDWL98aSugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODE2NjFmZWItMTk1Ny00MjkwLWFlYTEtMTFjNTc5NTJhNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXWfrcHFcM02ePG9rNAi5nd/utzBD72/LXE7 aQW9EH8+ZzbpQPJ9CHmVqFi/qvudl+SB9BpbmNJPd38gM/X5yCOCy2nshOaiSmJq TlR6wVs6OXy8GwhYWJcY8N9PtigBra2c1ZEZlI6ihkHPz6UbQXCI6Z8QKNQeL79W sp7tbvLuEZDm/tPga235KwNI1PrZfu2RC1dTJ9E5AFd1m2Vn24AXLTJiTxnXE/Nc pYh7P3xNB+ewVaHDWSXWc118prud1GQBIknMtXJLPn0VZfT64AJP4Nbd5Zw8WV4x c7lt1zo3meUiGX+M0/7qQrqniSsOe+Spvxr1Clw0ZrgBGk8P3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdqKicSlMlnSHI3xEJWrd6xUxtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdjZGY5NTgtMjFhYS0z ODFhLWI4NzUtNGMyN2ZlNGM4MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL9/3LruFJ5drG/5nrkw10HPS5v1/+eFyW8WLTRFISqYQVDmLMWRq/b ij3l4ylOiVLdlSyEJ9EMPqSzaeG7ghM9rL0rvFBtFgaAa7q2ALttPuDWIbONZb/p jai2S9jpdC4DBy9qg9W5QJMBODJ/S/biEz3TDhjbWiLgRs2KSuEiSSaaXw0OG4hk 4ml4vhn7Gy33iYNyz7wZXD+gxD9Dw6VUSsK01508qpdiGLhDzZSQCVfK79n6mQ1S IsqlFJvjQ25PDTyVPKDNQDNunfsDW+zPJ8ffXeMGZTPsWILgsPccrnKlqzdxgecy bAk2yQlI87SeWK3kySMbYWw36rlHlB8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:36 2025 by rpki-client