$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa File: 5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa (raw, json) Hash identifier: r+y5RGN7eTmg5mo3BfMPaj6TjR5bpi9r3rWlX9f3qks= Subject key identifier: 10:4A:39:BB:2B:79:AB:6E:41:C9:ED:72:B8:0D:4C:3A:C2:79:F3:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF670820F43EF9D51BA800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.202.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:67:08:20:f4:3e:f9:d5:1b:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=70f58456-7ede-4810-9e04-6191117fdf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:9d:96:6b:73:25:ee:31:65:18:47:88:bc: cf:ee:17:ed:98:95:04:a6:f4:cc:a4:81:a4:73:a6: 60:12:1a:43:ef:c9:ef:1e:c4:81:1e:d0:a6:ea:39: 93:83:28:57:d1:4b:ed:d5:21:2c:fa:1d:b2:e3:8b: ed:a3:96:d5:df:50:33:c9:fc:f0:8b:14:cc:6d:22: 0a:df:a9:2f:69:8c:6a:04:bf:d0:58:36:66:fc:ab: 96:72:35:d5:6c:4f:44:ad:a5:e6:1a:f4:1b:9a:98: 17:b4:57:06:7b:5e:be:b1:65:1e:bb:0e:ee:27:3a: 1e:10:95:aa:08:99:3f:7b:57:66:f9:41:40:ab:eb: 7f:75:57:e2:c9:2c:33:44:d9:8d:c2:88:e9:be:a0: 78:d2:08:d5:d3:30:7d:cd:3a:27:ee:8c:9f:cd:9f: 13:21:28:3a:77:be:c9:36:5d:18:77:f2:3a:9d:75: 1a:02:7b:3a:6d:fc:cb:07:5f:85:cc:f0:cf:0b:3d: 7b:59:68:66:bb:d1:f8:52:96:67:ab:55:89:47:01: a9:e1:0e:b2:3f:65:0d:b8:1b:6a:63:ac:85:6c:0b: 25:78:df:ec:ab:a7:20:15:15:a7:27:f4:42:4b:e8: 93:46:36:b1:d2:34:0f:61:95:79:86:53:b3:06:30: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4A:39:BB:2B:79:AB:6E:41:C9:ED:72:B8:0D:4C:3A:C2:79:F3:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6a:41:93:93:fa:fa:01:4b:61:47:27:02:48:dd:18:76:92: 80:72:05:b0:c0:9a:3f:a4:b6:ea:89:58:bb:2b:ad:19:df:f6: 21:e6:91:9e:b9:30:45:89:34:3b:bf:6c:1b:f1:4e:9c:8a:34: 6e:93:29:b5:49:7f:81:92:87:95:73:b9:76:48:ad:3d:4d:4a: 59:b2:40:0b:19:43:b8:b1:0c:34:51:0c:5c:fe:99:c9:79:ac: 55:0d:dd:d2:cb:26:ed:e6:95:02:d9:72:62:b1:e3:28:68:cf: 38:4e:ed:51:ae:5e:6b:9a:37:25:13:3b:07:ce:00:20:82:0b: dd:4d:58:df:53:0c:64:e8:f8:08:c1:de:59:65:56:33:2f:ee: e8:82:7a:2a:db:b0:2c:fa:31:d1:ba:17:61:f6:df:b7:2f:7b: a3:bd:63:8c:58:ae:44:1c:8c:51:ad:28:11:37:3d:a9:60:ca: f7:6c:8f:76:ce:c4:12:e9:fa:49:c4:08:95:e4:a0:32:28:85: 0b:86:d1:2a:e8:34:c8:b8:28:07:ba:3c:14:de:8e:0a:d2:d3: 7a:3f:79:39:43:e2:82:ac:c1:15:51:1c:3d:ee:b4:e4:3c:02: 81:ad:b1:35:1f:e4:9b:9f:77:0c:cf:c2:0c:54:f2:67:f7:30: ef:b9:2c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2cIIPQ++dUbqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NzBmNTg0NTYtN2VkZS00ODEwLTllMDQtNjE5MTExN2ZkZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl6dlmtzJe4xZRhHiLzP7hftmJUEpvTMpIGk c6ZgEhpD78nvHsSBHtCm6jmTgyhX0Uvt1SEs+h2y44vto5bV31AzyfzwixTMbSIK 36kvaYxqBL/QWDZm/KuWcjXVbE9EraXmGvQbmpgXtFcGe16+sWUeuw7uJzoeEJWq CJk/e1dm+UFAq+t/dVfiySwzRNmNwojpvqB40gjV0zB9zTon7oyfzZ8TISg6d77J Nl0Yd/I6nXUaAns6bfzLB1+FzPDPCz17WWhmu9H4UpZnq1WJRwGp4Q6yP2UNuBtq Y6yFbAsleN/sq6cgFRWnJ/RCS+iTRjax0jQPYZV5hlOzBjCGOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBKObsreatuQcntcrgNTDrCefM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNmYzUxMWQtYTFlZS0z ZTBiLWFkMTEtNDRhNzFmNTIzMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8qfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVqQZOT+voBS2FHJwJI3Rh2koByBbDAmj+ktuqJWLsrrRnf9iHmkZ65 MEWJNDu/bBvxTpyKNG6TKbVJf4GSh5VzuXZIrT1NSlmyQAsZQ7ixDDRRDFz+mcl5 rFUN3dLLJu3mlQLZcmKx4yhozzhO7VGuXmuaNyUTOwfOACCCC91NWN9TDGTo+AjB 3lllVjMv7uiCeirbsCz6MdG6F2H237cve6O9Y4xYrkQcjFGtKBE3Palgyvdsj3bO xBLp+knECJXkoDIohQuG0SroNMi4KAe6PBTejgrS03o/eTlD4oKswRVRHD3utOQ8 AoGtsTUf5JufdwzPwgxU8mf3MO+5LF0= -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:58 2025 by rpki-client