$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa File: 5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa (raw, json) Hash identifier: vvmyOtwPyJ5vZw/utzmEomvr0MZXHRtFBTKaGUa4m5o= Subject key identifier: BB:0E:25:4F:93:4D:A3:B7:0A:52:17:47:01:3D:B3:28:EF:63:BC:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DA7B670019D8FF4F1780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 34164 IP address blocks: 23.205.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:da:7b:67:00:19:d8:ff:4f:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=53e9d0e2-38aa-4586-9e22-997fec07edff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:63:86:4f:11:1e:75:3e:17:e1:04:6a:99: 89:f1:82:be:ff:1e:48:aa:c6:6e:c7:50:6f:55:91: 58:c4:d9:b6:49:f1:79:4e:33:90:09:0d:fe:b7:ec: ce:81:9d:ab:51:ad:52:2d:97:49:92:98:e3:14:d3: 1d:40:90:f6:34:0f:f2:e3:74:af:29:87:8e:eb:12: f1:e2:c6:0b:2a:b5:8a:68:81:dc:c3:f3:28:bb:4a: ff:1b:ef:b5:73:40:43:12:4e:04:9a:e9:e8:2e:c8: 29:dd:e8:35:7d:5b:8f:d2:3e:84:3e:1c:62:38:dd: 85:93:a2:90:4c:3b:22:78:4c:67:ff:6e:18:5d:6e: 96:3e:5f:f6:aa:d2:3c:75:d5:4f:b7:a4:0d:2b:ce: 97:77:78:9d:29:34:5a:06:94:aa:a0:34:a7:af:d4: 36:3a:3c:37:15:de:55:48:0e:64:56:df:8d:07:17: df:a3:9e:44:da:91:8b:4d:dd:31:79:64:d5:62:86: 7c:a3:ae:28:4b:e7:48:ff:e9:3d:b5:ed:a8:3d:75: 60:1c:44:c5:f6:e1:80:b8:56:07:e0:42:72:3e:a8: 66:45:b2:ec:79:9f:23:e3:59:3e:6f:3e:8e:df:9c: 95:54:8a:65:79:e3:fd:d7:20:38:0f:16:61:b8:65: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:25:4F:93:4D:A3:B7:0A:52:17:47:01:3D:B3:28:EF:63:BC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:00:23:0c:8f:90:49:7b:6d:dc:81:a0:c4:b7:a4:63:1f:de: fb:c9:7b:bc:79:5b:4f:32:e0:8c:c9:43:fd:f5:0b:a5:38:6a: 96:61:aa:81:de:0d:8c:cb:9b:24:a5:42:d0:fc:00:78:93:26: 17:be:c5:af:8a:21:d3:73:52:ce:9b:b0:74:39:7d:62:dc:19: 6d:d2:53:6c:df:5d:f7:ff:bf:f9:fc:cb:08:50:a5:a3:07:97: f1:97:31:87:3f:0d:d9:59:e1:ce:b5:88:d9:fa:65:34:eb:58: f6:93:28:bd:a2:6e:e3:0b:35:21:36:4f:4e:c3:da:03:b4:06: a0:cb:4f:c7:e4:0e:07:95:66:47:b4:15:50:da:b7:74:09:52: a7:43:cf:ba:60:78:64:6a:36:7c:31:06:fa:5c:6b:81:49:bd: 83:f3:5c:6c:4d:9f:e9:74:37:e7:29:91:32:13:eb:2b:e7:43: 2f:ff:63:80:ef:30:87:50:7f:59:ef:17:69:84:ed:04:0f:ce: 8e:10:a7:4c:db:39:94:64:86:4c:bf:d5:53:87:99:e9:b4:8c: f5:f2:98:4d:8d:14:ce:06:0b:cb:ca:5e:cb:9b:5c:66:f5:8b: 09:84:3f:fa:85:6c:72:96:0c:29:44:38:02:f5:9b:63:99:da: 2e:64:3a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdp7ZwAZ2P9PF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTNlOWQwZTItMzhhYS00NTg2LTllMjItOTk3ZmVjMDdlZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yxjhk8RHnU+F+EEapmJ8YK+/x5IqsZux1Bv VZFYxNm2SfF5TjOQCQ3+t+zOgZ2rUa1SLZdJkpjjFNMdQJD2NA/y43SvKYeO6xLx 4sYLKrWKaIHcw/Mou0r/G++1c0BDEk4EmunoLsgp3eg1fVuP0j6EPhxiON2Fk6KQ TDsieExn/24YXW6WPl/2qtI8ddVPt6QNK86Xd3idKTRaBpSqoDSnr9Q2Ojw3Fd5V SA5kVt+NBxffo55E2pGLTd0xeWTVYoZ8o64oS+dI/+k9te2oPXVgHETF9uGAuFYH 4EJyPqhmRbLseZ8j41k+bz6O35yVVIpleeP91yA4DxZhuGXrBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsOJU+TTaO3ClIXRwE9syjvY7wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1YTQxNzMtNzUwOS0z MGZjLThjMGMtOWVkNzJmMGExMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcAIwyPkEl7bdyBoMS3pGMf3vvJe7x5W08y4IzJQ/31C6U4apZhqoHe DYzLmySlQtD8AHiTJhe+xa+KIdNzUs6bsHQ5fWLcGW3SU2zfXff/v/n8ywhQpaMH l/GXMYc/DdlZ4c61iNn6ZTTrWPaTKL2ibuMLNSE2T07D2gO0BqDLT8fkDgeVZke0 FVDat3QJUqdDz7pgeGRqNnwxBvpca4FJvYPzXGxNn+l0N+cpkTIT6yvnQy//Y4Dv MIdQf1nvF2mE7QQPzo4Qp0zbOZRkhky/1VOHmem0jPXymE2NFM4GC8vKXsubXGb1 iwmEP/qFbHKWDClEOAL1m2OZ2i5kOoI= -----END CERTIFICATE-----Generated at Sun Apr 27 07:26:11 2025 by rpki-client