$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa File: 7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa (raw, json) Hash identifier: u3OodP2LkTV62isc5cpY86yWp54FewCgZxhvG/SDUUA= Subject key identifier: D0:31:37:08:B6:46:5D:80:EC:E7:8B:B2:F6:1A:34:AC:0D:41:6E:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF41638DCE094FED0CCEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.216.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:41:63:8d:ce:09:4f:ed:0c:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=2f1835ae-be81-4533-b2c7-5c2b13594553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:63:f1:1f:be:16:e4:a8:e6:6d:b9:b0:fd: 62:ea:cf:96:81:ad:04:0b:33:59:84:be:83:0e:02: 8d:38:12:8d:eb:84:ff:ee:a9:c2:29:32:ce:5f:2a: 6b:4f:2a:48:24:f5:20:fa:23:5e:28:23:b4:61:8a: 13:b6:24:1b:cd:61:fa:26:4c:93:70:ee:90:7e:86: 54:2f:4a:0c:44:d6:4a:40:0c:90:4e:68:ae:42:2a: 38:b6:e4:a8:d3:44:76:4d:8e:95:fe:4a:d6:4c:86: c4:f7:8a:a4:c9:4b:62:83:cb:7c:c5:8b:2a:bb:2a: 5e:59:af:6b:67:77:fe:8a:fc:bc:b1:16:19:4b:31: fc:cd:3f:35:66:2b:70:43:90:11:95:ed:aa:f6:66: 66:47:a5:1d:e0:a5:75:62:65:0f:d8:ea:7c:cf:3f: 39:00:44:fe:54:e4:7d:da:b7:0e:09:c8:3d:33:ed: 28:2e:f5:0c:05:fb:c4:7d:bf:bc:7a:6c:e9:1f:09: bf:81:94:1d:dd:6e:af:c2:32:54:cb:62:d1:83:54: 9f:2c:33:80:c1:e3:18:d3:46:50:8d:09:b6:50:f7: a9:ac:e0:64:97:a1:8b:9e:ba:82:2b:19:e9:13:d0: b6:f1:41:bf:15:b0:b0:bf:a0:f0:5e:97:f7:40:9e: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:31:37:08:B6:46:5D:80:EC:E7:8B:B2:F6:1A:34:AC:0D:41:6E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ae37cbf-0ca8-3541-80ad-f8d80ee9076d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:60:56:41:ba:a0:b7:87:45:8a:a1:f5:f5:21:8a:c0:9c:bb: 7a:78:78:ba:8a:a5:1e:6a:d8:52:bf:65:cc:5e:78:47:cb:66: db:6f:1a:82:8a:86:ab:da:39:d2:64:65:c0:b9:2d:d9:04:b3: a9:46:55:41:9b:b3:a0:64:7b:a6:aa:7f:5d:b0:44:ba:5a:65: 2c:89:e6:60:87:ea:42:eb:42:e6:b1:77:99:c9:bf:4f:96:f2: 9a:e7:a6:ac:22:08:63:cb:f7:f7:af:bf:a1:a7:27:54:4c:1e: a1:8f:55:ce:87:cf:a1:0a:c3:f1:fb:cc:50:31:cb:2a:a8:e0: 01:26:95:9a:2a:f7:f4:ca:90:cd:b2:0e:bb:53:3f:2a:84:18: 9a:6a:0c:32:f7:0c:9e:0c:d2:75:ec:80:1a:17:40:81:1c:4c: cb:7a:38:9d:a9:15:8f:b6:52:c1:aa:f3:69:4e:9c:c4:8e:93: 1b:f8:e1:9e:6a:73:91:68:34:2a:3d:a1:d8:d6:58:79:a8:f8: b1:65:73:a0:e1:bd:4a:2d:fd:22:38:3e:1a:08:1d:14:d2:d4: e6:6a:d3:48:be:9e:73:71:08:9f:3f:56:78:f0:3b:2b:81:57: fa:e3:6f:3d:59:be:27:04:d0:0e:c2:1c:44:a9:49:ad:51:d9: f1:c8:1f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0Fjjc4JT+0MzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MmYxODM1YWUtYmU4MS00NTMzLWIyYzctNWMyYjEzNTk0NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/dj8R++FuSo5m25sP1i6s+Wga0ECzNZhL6D DgKNOBKN64T/7qnCKTLOXyprTypIJPUg+iNeKCO0YYoTtiQbzWH6JkyTcO6QfoZU L0oMRNZKQAyQTmiuQio4tuSo00R2TY6V/krWTIbE94qkyUtig8t8xYsquypeWa9r Z3f+ivy8sRYZSzH8zT81ZitwQ5ARle2q9mZmR6Ud4KV1YmUP2Op8zz85AET+VOR9 2rcOCcg9M+0oLvUMBfvEfb+8emzpHwm/gZQd3W6vwjJUy2LRg1SfLDOAweMY00ZQ jQm2UPeprOBkl6GLnrqCKxnpE9C28UG/FbCwv6DwXpf3QJ6uhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAxNwi2Rl2A7OeLsvYaNKwNQW4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FlMzdjYmYtMGNhOC0z NTQxLTgwYWQtZjhkODBlZTkwNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdgVkG6oLeHRYqh9fUhisCcu3p4eLqKpR5q2FK/ZcxeeEfLZttvGoKK hqvaOdJkZcC5LdkEs6lGVUGbs6Bke6aqf12wRLpaZSyJ5mCH6kLrQuaxd5nJv0+W 8prnpqwiCGPL9/evv6GnJ1RMHqGPVc6Hz6EKw/H7zFAxyyqo4AEmlZoq9/TKkM2y DrtTPyqEGJpqDDL3DJ4M0nXsgBoXQIEcTMt6OJ2pFY+2UsGq82lOnMSOkxv44Z5q c5FoNCo9odjWWHmo+LFlc6DhvUot/SI4PhoIHRTS1OZq00i+nnNxCJ8/VnjwOyuB V/rjbz1ZvicE0A7CHESpSa1R2fHIH1A= -----END CERTIFICATE-----Generated at Sun Apr 27 12:55:50 2025 by rpki-client