$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82bb9dac-0481-3abb-a9d4-6de9f8d91033.roa File: 82bb9dac-0481-3abb-a9d4-6de9f8d91033.roa (raw, json) Hash identifier: w1RtVJ4m/RmDYz0a+caypg5hGCG1HCg31tydVOVffuI= Subject key identifier: 6C:B2:F8:50:BD:DB:85:BF:7D:48:69:20:53:00:93:93:D7:2D:1E:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49665B87698A1618BA4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82bb9dac-0481-3abb-a9d4-6de9f8d91033.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:96:65:b8:76:98:a1:61:8b:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b15ad7ae-a057-4c33-9bb8-c16a31110eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:6c:22:d3:a6:2d:f6:4b:f8:8c:ac:d1:a0: 33:c8:b5:6c:6e:84:09:d8:22:97:d6:75:9b:1c:b3: ec:bf:89:31:5f:16:14:89:da:ec:64:1e:5b:35:de: f6:15:43:bd:4a:33:04:97:c0:ad:08:b1:61:7b:60: 46:2b:d2:52:a7:41:f6:6a:4e:a7:b9:ef:cd:e5:2a: 2e:81:da:7a:62:36:e3:82:61:e6:25:a3:cf:1d:62: 3f:9d:75:ec:5a:c3:b4:0a:39:30:8c:21:9c:92:ec: 32:ff:2e:af:8c:32:88:18:d3:fe:a6:e6:c3:05:79: 86:39:c7:4c:0b:37:38:5e:68:9c:c1:45:ac:80:78: 75:8e:d1:48:6f:db:ab:83:a7:83:a4:b9:e3:10:b8: 51:7e:f7:fd:05:21:f7:1a:8b:d7:b5:e9:fc:c2:63: 0f:41:5f:e5:7d:2d:bb:79:de:a3:9f:b6:13:92:47: c0:42:0e:e4:eb:7f:00:5c:ef:dd:60:c4:8f:d0:63: 02:d1:dc:6b:f3:20:87:d3:33:eb:b3:5f:69:36:4b: 02:0e:23:8b:83:7e:e7:a3:44:d6:8d:3f:bb:eb:a7: b4:71:b8:c7:b3:b8:1a:72:2d:eb:4a:2d:fe:23:4b: ad:c1:6a:06:7e:29:e9:34:2c:89:80:0b:7a:56:f5: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B2:F8:50:BD:DB:85:BF:7D:48:69:20:53:00:93:93:D7:2D:1E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82bb9dac-0481-3abb-a9d4-6de9f8d91033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e1:a0:c3:f6:fb:34:ed:13:63:47:f9:95:d5:b6:80:0f:d3: d6:87:f1:da:29:41:58:4b:06:ee:93:fb:bc:82:c3:3d:ee:c6: f5:ba:f3:a5:75:f9:bd:84:d2:04:33:8e:9b:01:39:14:46:37: 7c:e8:ce:d5:59:e6:b9:96:04:25:2b:df:75:a8:ae:c8:5b:f6: eb:fd:9f:b9:71:bb:9c:32:b5:6b:e3:91:ee:56:30:a3:d6:0f: e3:95:91:4e:b2:44:00:f9:1a:89:48:1b:34:fb:04:07:4e:29: 00:00:00:d0:b8:53:c6:13:8d:0f:52:6b:71:61:44:46:ef:28: 07:a0:20:f6:68:5f:47:4c:de:3e:e6:23:42:49:39:07:92:71: 70:6e:20:00:fb:ee:74:86:01:8e:12:35:d7:15:93:f0:b3:2b: 08:d4:da:80:31:8f:65:19:75:5e:be:38:4e:97:2f:c7:fb:f1: ff:94:52:b8:38:1b:0f:e8:d5:b1:4e:0c:76:cb:1d:7f:36:66: 7c:25:42:8d:20:44:c7:be:80:6c:35:aa:dc:c3:9c:b4:07:36: ef:22:45:85:63:06:7e:9b:d2:cb:28:10:f0:55:2a:6e:38:d4: 04:cd:d3:ee:83:6c:bb:f2:09:58:30:93:b9:d4:c8:9b:15:3b: 65:28:39:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JZluHaYoWGLpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjE1YWQ3YWUtYTA1Ny00YzMzLTliYjgtYzE2YTMxMTEwZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyRsItOmLfZL+Iys0aAzyLVsboQJ2CKX1nWb HLPsv4kxXxYUidrsZB5bNd72FUO9SjMEl8CtCLFhe2BGK9JSp0H2ak6nue/N5Sou gdp6YjbjgmHmJaPPHWI/nXXsWsO0CjkwjCGckuwy/y6vjDKIGNP+pubDBXmGOcdM Czc4XmicwUWsgHh1jtFIb9urg6eDpLnjELhRfvf9BSH3GovXten8wmMPQV/lfS27 ed6jn7YTkkfAQg7k638AXO/dYMSP0GMC0dxr8yCH0zPrs19pNksCDiOLg37no0TW jT+766e0cbjHs7gaci3rSi3+I0utwWoGfinpNCyJgAt6VvU0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyy+FC924W/fUhpIFMAk5PXLR6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODJiYjlkYWMtMDQ4MS0z YWJiLWE5ZDQtNmRlOWY4ZDkxMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnhoMP2+zTtE2NH+ZXVtoAP09aH8dopQVhLBu6T+7yCwz3uxvW686V1 +b2E0gQzjpsBORRGN3zoztVZ5rmWBCUr33Worshb9uv9n7lxu5wytWvjke5WMKPW D+OVkU6yRAD5GolIGzT7BAdOKQAAANC4U8YTjQ9Sa3FhREbvKAegIPZoX0dM3j7m I0JJOQeScXBuIAD77nSGAY4SNdcVk/CzKwjU2oAxj2UZdV6+OE6XL8f78f+UUrg4 Gw/o1bFODHbLHX82ZnwlQo0gRMe+gGw1qtzDnLQHNu8iRYVjBn6b0ssoEPBVKm44 1ATN0+6DbLvyCVgwk7nUyJsVO2UoOYk= -----END CERTIFICATE-----Generated at Sun Apr 27 07:27:30 2025 by rpki-client