$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa File: 784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa (raw, json) Hash identifier: Iz+X92xhoG4FXUTX4wmtrD/1vZTxf/nuBDWUSLSc5T4= Subject key identifier: 6D:81:BE:DA:32:F7:DD:DD:F5:04:ED:F0:39:F1:6B:8A:FF:D5:82:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF3E3FA0529171F2429100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.214.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3e:3f:a0:52:91:71:f2:42:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=15da0b88-a6c5-4efc-baed-72f81dd08ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:91:2e:95:19:45:e0:f9:85:46:e2:f3:46: ec:a5:7f:06:ce:7c:9b:f3:35:2e:dc:63:4e:9a:ac: bc:15:97:a7:47:3c:0c:2b:05:f5:9b:04:8f:aa:83: 06:a5:c6:2e:ae:2a:4f:d4:e3:15:8a:47:35:fe:48: da:8a:4a:9c:09:fa:94:06:e6:c4:a3:74:92:20:01: 66:f6:fa:a9:79:ba:85:67:6a:f4:77:ba:ee:ab:60: ba:ab:59:33:17:3d:16:1e:99:82:38:92:de:94:fe: 17:04:8e:43:b7:c8:7d:6b:3d:e6:bc:16:ac:13:77: 75:47:7d:68:0f:56:3e:46:4e:df:d6:c8:42:df:bb: d1:94:a7:4c:65:9f:0a:3a:2a:63:28:78:98:0b:a1: 76:d2:51:be:d2:69:01:af:48:3a:f4:ab:73:8c:59: 50:ef:01:9e:78:0e:c2:32:99:ed:38:a1:8b:d6:b7: a8:fc:77:de:db:2d:c7:f5:c0:47:63:a7:44:c5:85: 2c:07:85:a6:a7:85:fa:8e:39:89:d3:18:17:89:eb: 34:00:99:7c:01:34:63:e7:14:c5:d8:9f:62:45:13: e7:37:57:8f:45:3c:24:27:13:3f:14:dd:86:ac:ed: a5:8f:58:f6:e9:b7:e8:a6:ac:2d:76:79:d6:46:37: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:81:BE:DA:32:F7:DD:DD:F5:04:ED:F0:39:F1:6B:8A:FF:D5:82:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:18:de:44:d4:18:2b:3a:56:2c:4b:6f:db:c6:e9:1d:f3:32: 06:8e:b4:a3:19:48:41:bf:64:30:f9:2b:65:3a:47:54:64:92: 8d:fc:8f:19:ec:ff:82:9e:92:dd:f8:c5:8e:27:67:cb:21:78: c2:90:91:f7:7f:0f:e8:9d:c9:a5:46:3f:8f:2b:ac:64:df:86: c1:b9:71:09:d6:c2:4e:f5:ba:c0:b6:1d:48:5e:2a:33:b5:c9: 66:24:90:f9:4d:ae:d7:a0:6e:ee:5e:32:52:96:f7:8d:4b:3f: 48:67:af:c5:1c:68:3f:bc:82:95:87:1f:70:75:e4:c6:58:4e: 43:65:0c:8c:23:48:c4:04:4a:93:b6:82:ba:09:66:36:b3:be: aa:8c:c0:b8:8a:00:93:35:5b:0f:22:2b:65:86:20:1e:3f:5f: 68:86:60:c0:f6:12:30:02:d3:42:f6:b3:a4:14:94:20:a2:8c: 52:de:fa:19:f1:d6:6c:51:27:cd:25:7d:ef:e3:cc:22:54:50: 7d:0e:b3:99:ab:89:96:de:1c:1e:36:3b:72:59:27:1a:e5:90: 8c:6f:d5:b1:82:00:a5:5d:48:e2:f4:5f:d9:bd:85:8b:73:c4: e3:81:cd:d0:f3:28:44:96:66:7b:30:fb:e0:79:f6:95:6f:78: d8:a4:79:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvz4/oFKRcfJCkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTVkYTBiODgtYTZjNS00ZWZjLWJhZWQtNzJmODFkZDA4ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJSRLpUZReD5hUbi80bspX8Gznyb8zUu3GNO mqy8FZenRzwMKwX1mwSPqoMGpcYuripP1OMVikc1/kjaikqcCfqUBubEo3SSIAFm 9vqpebqFZ2r0d7ruq2C6q1kzFz0WHpmCOJLelP4XBI5Dt8h9az3mvBasE3d1R31o D1Y+Rk7f1shC37vRlKdMZZ8KOipjKHiYC6F20lG+0mkBr0g69KtzjFlQ7wGeeA7C MpntOKGL1reo/Hfe2y3H9cBHY6dExYUsB4Wmp4X6jjmJ0xgXies0AJl8ATRj5xTF 2J9iRRPnN1ePRTwkJxM/FN2GrO2lj1j26bfopqwtdnnWRjcroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2Bvtoy993d9QTt8Dnxa4r/1YJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg0YTRhM2MtY2Q4Yy0z M2Q2LWE1NTMtODBiZTJhMzI1ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAY3kTUGCs6VixLb9vG6R3zMgaOtKMZSEG/ZDD5K2U6R1Rkko38jxns /4Kekt34xY4nZ8sheMKQkfd/D+idyaVGP48rrGTfhsG5cQnWwk71usC2HUheKjO1 yWYkkPlNrtegbu5eMlKW941LP0hnr8UcaD+8gpWHH3B15MZYTkNlDIwjSMQESpO2 groJZjazvqqMwLiKAJM1Ww8iK2WGIB4/X2iGYMD2EjAC00L2s6QUlCCijFLe+hnx 1mxRJ80lfe/jzCJUUH0Os5mriZbeHB42O3JZJxrlkIxv1bGCAKVdSOL0X9m9hYtz xOOBzdDzKESWZnsw++B59pVveNiked4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:47:15 2025 by rpki-client