$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa File: 731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa (raw, json) Hash identifier: JRhX2j/DnvVAqtjtrDVOriN0h8huWZNE2cvU0sYX26A= Subject key identifier: 61:59:DD:77:C7:22:30:D4:BE:B1:70:22:6E:03:11:AB:9E:5C:DE:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279C20692BBF8C1E7E0D900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.209.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c2:06:92:bb:f8:c1:e7:e0:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=9899bbf9-7755-48ae-a9d0-2f1049b2d58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:6b:ca:8e:00:bb:a6:e3:03:2c:d5:75:31: 6a:ce:e4:38:c3:a2:ae:a8:2e:03:b6:bc:7b:de:5e: b3:27:32:46:30:3d:d3:aa:db:62:22:0d:16:1e:81: 5c:69:2c:ad:14:e2:d6:18:1f:08:64:63:f4:c5:7f: aa:cc:78:3a:44:01:23:63:37:53:df:8c:e0:d8:bd: dc:df:e2:d4:ed:fe:57:ee:d8:fc:8b:91:16:4d:dc: c0:38:b6:af:29:60:e9:93:b2:e6:80:55:49:d3:1d: 83:93:89:56:c5:63:9e:f6:12:89:f6:c2:52:0c:79: f3:0d:c2:88:e7:86:94:48:2e:3d:94:d5:41:fe:1d: c7:d8:da:e4:14:5b:14:4b:36:24:94:1e:1e:37:c4: 66:f5:c6:87:0c:b9:f9:90:3d:e6:49:ba:0c:53:6e: 44:80:74:ab:84:c8:51:f3:08:2e:18:58:f1:c3:17: b5:0f:7f:a5:2f:2f:57:20:2b:e1:96:ce:25:5c:07: fc:0e:0d:fb:b0:52:c2:58:f2:35:6e:d1:da:9b:02: d6:15:09:44:fb:61:a5:d8:db:c6:c7:1d:47:d8:00: c0:86:95:db:aa:80:b9:9f:bd:4b:d8:de:5f:1d:87: 08:6f:57:e0:e0:ba:37:8c:46:29:54:94:14:95:20: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:59:DD:77:C7:22:30:D4:BE:B1:70:22:6E:03:11:AB:9E:5C:DE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7b:d3:79:8a:f4:00:19:6c:b2:80:32:1c:80:22:26:9b:1f: aa:30:a1:03:93:e7:47:a1:d5:80:f0:77:ed:20:32:90:8f:bc: 2d:8e:72:c0:fa:ec:c8:3e:e1:b8:a8:15:8d:e4:9f:0e:44:d4: c3:20:30:7e:a9:b5:af:1a:69:44:49:f5:fa:31:fd:41:f6:d0: 8e:d4:26:1a:59:96:f9:e8:af:d6:32:72:19:e4:3c:cc:5c:77: 0c:52:cc:1a:54:d0:52:2d:76:10:c9:4a:cc:f9:2a:02:0a:58: 71:34:60:0f:89:4a:0e:f4:db:09:9b:77:57:ff:ef:46:00:8e: 53:9f:a8:2a:cc:3c:17:ec:e3:b7:e2:20:80:dd:9b:51:3a:dc: 95:20:f6:c6:20:b8:f4:91:6a:55:11:34:9d:50:91:db:82:18: 2c:a6:47:86:b1:f9:d7:85:45:a2:1c:ce:34:40:43:5d:70:66: 6f:f5:b9:ae:06:de:f5:02:db:54:9a:4c:3b:39:f3:04:f8:9e: ab:d4:27:6a:e0:b1:c3:51:30:a5:c7:56:5a:83:79:a2:dd:22: dc:92:f3:b8:45:b5:16:df:c1:38:e5:02:7a:6d:85:14:2e:dc: f1:ca:85:2a:cb:3e:3e:7f:ba:0e:df:67:df:26:bc:d6:1f:f7: b8:87:2d:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecIGkrv4wefg2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk OTg5OWJiZjktNzc1NS00OGFlLWE5ZDAtMmYxMDQ5YjJkNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojNryo4Au6bjAyzVdTFqzuQ4w6KuqC4Dtrx7 3l6zJzJGMD3TqttiIg0WHoFcaSytFOLWGB8IZGP0xX+qzHg6RAEjYzdT34zg2L3c 3+LU7f5X7tj8i5EWTdzAOLavKWDpk7LmgFVJ0x2Dk4lWxWOe9hKJ9sJSDHnzDcKI 54aUSC49lNVB/h3H2NrkFFsUSzYklB4eN8Rm9caHDLn5kD3mSboMU25EgHSrhMhR 8wguGFjxwxe1D3+lLy9XICvhls4lXAf8Dg37sFLCWPI1btHamwLWFQlE+2Gl2NvG xx1H2ADAhpXbqoC5n71L2N5fHYcIb1fg4Lo3jEYpVJQUlSDYSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFZ3XfHIjDUvrFwIm4DEaueXN6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzMxZmMyZWUtNDgwYi0z ZTY0LThlZjEtNDMwMWZlNGRkMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh703mK9AAZbLKAMhyAIiabH6owoQOT50eh1YDwd+0gMpCPvC2OcsD6 7Mg+4bioFY3knw5E1MMgMH6pta8aaURJ9fox/UH20I7UJhpZlvnor9YychnkPMxc dwxSzBpU0FItdhDJSsz5KgIKWHE0YA+JSg702wmbd1f/70YAjlOfqCrMPBfs47fi IIDdm1E63JUg9sYguPSRalURNJ1QkduCGCymR4ax+deFRaIczjRAQ11wZm/1ua4G 3vUC21SaTDs58wT4nqvUJ2rgscNRMKXHVlqDeaLdItyS87hFtRbfwTjlAnpthRQu 3PHKhSrLPj5/ug7fZ98mvNYf97iHLS0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:12 2025 by rpki-client