$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cace450-ed7e-3167-8fc1-6043700eec8e.roa File: 6cace450-ed7e-3167-8fc1-6043700eec8e.roa (raw, json) Hash identifier: CNowhrnVwFe1PhuGAgFsdMpv1QqnRhXVIER0bnG8690= Subject key identifier: 0F:76:19:3E:CE:24:9A:E1:9C:32:A3:64:E0:C8:F9:52:23:C9:D9:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4904EA7C75185EEE17400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cace450-ed7e-3167-8fc1-6043700eec8e.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.209.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:90:4e:a7:c7:51:85:ee:e1:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0bd2a1e6-a4c3-4b33-856d-b7186618cde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:fc:f5:fe:d6:44:8d:5b:61:c3:0c:61:94: 54:69:82:10:37:03:27:04:f9:f5:45:c4:2f:33:0b: db:fd:26:f7:18:24:e6:08:47:6c:34:f3:c9:8c:8c: ef:07:5e:6e:5d:d5:63:d4:b5:30:4b:f1:3a:5c:98: 74:79:4f:f1:59:1b:82:58:bb:36:d8:4f:28:5d:0d: e9:66:6b:45:ad:82:51:63:8e:e1:f5:ad:15:83:ea: b8:99:e0:5e:df:16:86:19:56:a5:4a:39:4c:4b:5e: ba:16:fc:1a:eb:3d:a0:84:52:57:7f:3f:02:3d:5e: a4:5d:b8:69:c1:c3:de:c2:96:45:48:67:2e:4e:c0: 8a:03:b5:76:9b:ab:1a:38:ea:74:bd:6e:3a:96:45: 44:01:55:4b:35:bd:37:6d:9e:78:be:e4:d7:95:88: 8f:40:fd:84:f4:4c:fd:93:2a:8c:90:c9:75:3f:6c: b3:81:1f:49:86:c9:43:b4:b5:e0:6b:b7:9f:82:08: 91:60:3a:93:a1:cb:eb:77:82:a8:cd:a0:4a:9e:47: 9b:e0:24:31:8b:2e:f0:03:3f:dc:9d:44:41:fc:13: 9a:4f:d9:1a:2b:70:f1:25:63:b8:72:47:a2:77:53: ee:99:f9:76:ce:dd:30:33:ca:66:a4:9e:06:ad:e3: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:76:19:3E:CE:24:9A:E1:9C:32:A3:64:E0:C8:F9:52:23:C9:D9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cace450-ed7e-3167-8fc1-6043700eec8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3e:77:89:a4:9c:40:72:95:b6:3a:0c:b0:33:bd:f6:f1:3c: fc:e9:ec:72:41:cc:5e:0c:3d:d5:19:3b:fa:a2:cb:3c:82:88: 05:6c:b1:82:1b:94:94:f2:4c:a2:d3:fd:3e:3c:76:bc:fb:be: f6:9e:fc:74:2b:d6:d2:96:69:42:bd:b5:ba:86:68:8f:42:51: 8e:b2:61:3c:b9:84:c4:86:ab:e3:58:14:73:c7:7c:72:bb:8d: 16:c8:44:3a:20:58:20:3a:4f:06:e9:80:47:73:a4:89:0d:e5: a6:fb:0c:37:ac:12:a7:db:e0:02:9e:a4:74:e0:21:7e:53:4d: 2c:a3:0d:c5:67:74:f1:cd:dd:46:7d:d3:aa:b9:d9:c7:94:41: 18:3a:41:38:07:c1:aa:59:da:ea:88:75:92:af:05:08:b2:a2: 91:6a:41:90:db:0b:19:e5:ec:a8:b3:15:34:3c:b5:b3:e1:ec: 28:8d:0d:79:32:af:45:df:33:e8:35:fb:d1:15:ea:8e:81:4c: cc:ab:76:28:e6:20:52:0e:b4:84:c7:7b:64:66:0f:68:20:4c: 90:1f:22:bf:e4:e6:d2:e8:cc:a9:ce:24:1f:40:da:83:4c:e2: 05:78:e1:f9:a8:38:a2:fd:e4:b6:14:bb:5b:c8:b2:c1:3f:c3: 38:88:57:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JBOp8dRhe7hdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MGJkMmExZTYtYTRjMy00YjMzLTg1NmQtYjcxODY2MThjZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEr89f7WRI1bYcMMYZRUaYIQNwMnBPn1RcQv Mwvb/Sb3GCTmCEdsNPPJjIzvB15uXdVj1LUwS/E6XJh0eU/xWRuCWLs22E8oXQ3p ZmtFrYJRY47h9a0Vg+q4meBe3xaGGValSjlMS166Fvwa6z2ghFJXfz8CPV6kXbhp wcPewpZFSGcuTsCKA7V2m6saOOp0vW46lkVEAVVLNb03bZ54vuTXlYiPQP2E9Ez9 kyqMkMl1P2yzgR9JhslDtLXga7efggiRYDqTocvrd4KozaBKnkeb4CQxiy7wAz/c nURB/BOaT9kaK3DxJWO4ckeid1Pumfl2zt0wM8pmpJ4GreP/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA92GT7OJJrhnDKjZODI+VIjydklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNhY2U0NTAtZWQ3ZS0z MTY3LThmYzEtNjA0MzcwMGVlYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0+d4mknEBylbY6DLAzvfbxPPzp7HJBzF4MPdUZO/qiyzyCiAVssYIb lJTyTKLT/T48drz7vvae/HQr1tKWaUK9tbqGaI9CUY6yYTy5hMSGq+NYFHPHfHK7 jRbIRDogWCA6TwbpgEdzpIkN5ab7DDesEqfb4AKepHTgIX5TTSyjDcVndPHN3UZ9 06q52ceUQRg6QTgHwapZ2uqIdZKvBQiyopFqQZDbCxnl7KizFTQ8tbPh7CiNDXky r0XfM+g1+9EV6o6BTMyrdijmIFIOtITHe2RmD2ggTJAfIr/k5tLozKnOJB9A2oNM 4gV44fmoOKL95LYUu1vIssE/wziIV/Y= -----END CERTIFICATE-----Generated at Sun Apr 27 16:30:17 2025 by rpki-client