$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa File: 5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa (raw, json) Hash identifier: yYto28kY4U4nNG1irnjp1bABsvS2h/CWQK4jJgjkpak= Subject key identifier: 57:5E:D4:55:56:B3:36:EC:38:76:42:6F:9D:DD:6B:77:1E:87:C1:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A09C4521FDFF9E04FBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a0:9c:45:21:fd:ff:9e:04:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=81a2cf91-02dd-47ae-a008-de32f0d34269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:11:43:8c:48:04:87:f2:c2:88:4b:2a:33: 27:be:94:cc:99:f4:2b:4e:84:85:56:dd:d6:17:9c: 40:87:92:40:38:f6:28:1e:7b:78:48:b8:42:9e:b1: a8:2d:94:e8:3c:f5:2e:7a:f2:a5:b7:01:eb:21:c0: dc:00:ab:b6:d1:4d:77:dc:79:88:51:6d:8b:ab:fc: 17:9a:fe:25:88:b1:58:11:b4:11:5a:c7:19:69:04: 3e:11:91:5a:90:3f:f7:09:aa:e5:9b:6c:36:18:22: 2b:3d:0a:61:0a:ca:32:e1:02:93:fc:f1:f9:e3:19: 67:09:cc:94:b2:9c:a7:9f:75:34:1c:fc:71:ac:38: 12:99:38:81:0e:31:94:ea:48:0f:7b:06:25:73:4e: cc:df:de:ac:a0:9e:d9:aa:3a:6c:12:49:d3:38:94: 86:aa:52:b6:94:cb:89:aa:8a:d1:5a:91:d6:9c:65: d1:25:05:ae:4d:68:51:a4:81:c4:a5:5c:6d:6a:75: 15:a6:f5:22:87:bc:05:a7:99:2e:bf:ad:c5:8f:d2: 66:7e:cf:74:85:b8:7c:b1:91:f7:70:18:75:c6:b3: 60:b9:22:90:e5:91:d9:0d:ba:c0:e0:d2:f2:6c:3f: 6a:85:3f:20:a0:a2:b0:00:0b:4b:71:69:a2:8b:3d: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5E:D4:55:56:B3:36:EC:38:76:42:6F:9D:DD:6B:77:1E:87:C1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:43:3d:d5:e5:29:a5:bf:1f:7d:58:d5:15:35:77:86:dc:34: 87:65:45:46:45:33:4e:f1:83:cc:33:b3:2a:33:c5:df:8b:37: 29:a6:87:aa:d8:ad:e9:0e:28:85:67:23:7f:45:ea:75:5e:82: 71:6c:a5:49:cd:69:c7:8d:6e:1e:aa:c8:de:28:0e:91:ed:eb: 34:ce:92:75:6c:81:97:a1:73:69:e4:9f:8f:69:c8:d4:61:7a: ac:90:0b:99:da:d5:1d:53:5e:5a:d5:8b:a5:29:5a:d9:80:88: a1:50:fa:28:91:0b:20:f6:a8:0d:9c:32:68:34:ce:80:af:d3: cb:99:30:33:a0:97:bd:b9:19:b2:b7:ae:5e:15:d9:8f:ec:32: 82:83:c0:e1:a6:87:29:23:70:21:b5:95:fb:03:ec:23:64:67: 71:4f:1d:28:91:40:36:b8:e1:bc:08:94:41:a4:15:dc:d5:db: 29:c6:1a:bd:d7:99:e1:c0:4b:fe:57:76:a4:52:94:65:f6:89: 12:70:8f:5a:5e:50:ac:8b:dc:15:76:cc:3d:03:cb:01:3c:e2: 65:8f:23:03:c9:7a:93:1a:df:65:63:17:77:9f:8b:df:26:52: 8c:cd:df:b9:45:d9:c3:a4:12:86:26:c0:5b:58:91:91:2a:bf: 84:75:be:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KCcRSH9/54E+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ODFhMmNmOTEtMDJkZC00N2FlLWEwMDgtZGUzMmYwZDM0MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL0RQ4xIBIfywohLKjMnvpTMmfQrToSFVt3W F5xAh5JAOPYoHnt4SLhCnrGoLZToPPUuevKltwHrIcDcAKu20U133HmIUW2Lq/wX mv4liLFYEbQRWscZaQQ+EZFakD/3Carlm2w2GCIrPQphCsoy4QKT/PH54xlnCcyU spynn3U0HPxxrDgSmTiBDjGU6kgPewYlc07M396soJ7ZqjpsEknTOJSGqlK2lMuJ qorRWpHWnGXRJQWuTWhRpIHEpVxtanUVpvUih7wFp5kuv63Fj9Jmfs90hbh8sZH3 cBh1xrNguSKQ5ZHZDbrA4NLybD9qhT8goKKwAAtLcWmiiz3KDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFde1FVWszbsOHZCb53da3ceh8ExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNlMDdlZjQtMmExNS0z ODFlLTg5YWYtOGMwNTFkMmNhYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5DPdXlKaW/H31Y1RU1d4bcNIdlRUZFM07xg8wzsyozxd+LNymmh6rY rekOKIVnI39F6nVegnFspUnNaceNbh6qyN4oDpHt6zTOknVsgZehc2nkn49pyNRh eqyQC5na1R1TXlrVi6UpWtmAiKFQ+iiRCyD2qA2cMmg0zoCv08uZMDOgl725GbK3 rl4V2Y/sMoKDwOGmhykjcCG1lfsD7CNkZ3FPHSiRQDa44bwIlEGkFdzV2ynGGr3X meHAS/5XdqRSlGX2iRJwj1peUKyL3BV2zD0DywE84mWPIwPJepMa32VjF3efi98m UozN37lF2cOkEoYmwFtYkZEqv4R1vqw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:17 2025 by rpki-client