$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa File: 83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa (raw, json) Hash identifier: /MahkyyoodUyLh5KDSObf0wwpCWRl6UaaNWHY37iAAo= Subject key identifier: A7:1A:2A:F4:9C:29:3D:A0:BB:6D:02:02:EE:8D:35:AF:DB:40:A9:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4989E625B1BDF4E430F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:98:9e:62:5b:1b:df:4e:43:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=d90c810b-82d2-49eb-9d1a-5bbf4094f0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:4c:7a:b0:26:81:be:b1:5d:1c:34:ec:30: 6a:00:98:3d:10:88:c7:9f:2f:d7:67:87:17:64:5e: ae:84:a6:f6:8e:03:28:3d:ec:8e:75:8e:4b:f4:72: f6:df:e7:ce:3c:96:62:be:ef:31:41:78:88:6c:fa: 43:60:c9:b5:98:b4:85:b3:b8:22:0e:94:0d:38:e5: d9:43:82:60:57:2a:15:a0:54:15:77:1f:14:6d:26: 5d:d4:e3:60:6d:6f:ec:48:90:af:ab:91:30:f4:f9: ba:78:75:ce:b2:a1:d0:01:95:b9:01:1f:b3:89:a0: 7a:fc:f9:ae:63:eb:ce:eb:b5:5a:e3:1b:5f:32:e1: a4:82:07:9c:1c:81:d5:5b:12:9a:ef:ac:5f:83:bd: a9:a8:63:67:a6:31:38:dd:18:ec:85:49:ba:93:08: ea:38:ea:bd:be:70:a6:e9:65:b0:59:13:57:37:2a: 60:9c:0d:1e:cf:6f:d6:0b:57:19:87:2e:e1:c5:96: 01:72:c0:ed:03:d6:2e:38:11:e3:b7:98:a2:99:23: fb:98:61:05:25:20:33:01:e6:26:6c:a7:6e:d8:2c: ce:3d:c9:49:16:81:6f:de:3a:74:9c:34:cb:45:11: 4d:57:f7:6d:4f:85:1d:64:44:7c:c6:0e:00:31:99: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:2A:F4:9C:29:3D:A0:BB:6D:02:02:EE:8D:35:AF:DB:40:A9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2d:aa:84:25:a9:8b:9c:ac:78:b9:31:a2:db:0c:46:ad:78: 5c:64:ec:7e:30:aa:40:d3:fc:b3:75:e6:f2:e1:74:8c:b8:ff: 46:13:62:21:65:0a:f6:12:85:dd:26:13:9d:61:31:37:a3:74: 82:64:be:e6:93:da:10:fa:48:f4:d5:ef:b9:3a:93:19:95:9b: f1:e8:d0:f5:70:e6:5d:62:94:c3:27:66:9f:93:5f:4e:c9:37: c6:aa:32:43:07:b1:72:5d:dd:5c:33:e2:44:07:06:bf:52:3a: 24:99:8a:f4:1e:56:71:45:0f:fc:a4:32:e7:3e:0c:e9:33:e1: 28:a7:28:ae:cf:1c:47:a6:ad:25:9c:36:49:54:94:54:e7:cc: bd:a4:0d:09:89:b4:fa:69:38:51:cb:a5:7b:76:85:5a:4c:e5: 29:cd:a1:e3:0f:86:21:7e:36:a4:18:7f:5f:f2:89:be:a3:98: 01:f3:b9:3f:0b:be:a2:6f:d8:cd:e0:85:5d:f6:b0:21:12:6c: b9:6f:a5:9d:05:d2:c0:e5:86:7e:e6:29:d2:e2:d0:91:06:1a: ef:eb:33:fc:e2:10:76:b3:1a:2f:6f:33:a7:f9:64:dc:63:a9: e7:31:84:09:15:75:40:fe:7d:b2:d8:b7:39:ec:07:e1:84:33: e4:19:88:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JieYlsb305DD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDkwYzgxMGItODJkMi00OWViLTlkMWEtNWJiZjQwOTRmMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZNMerAmgb6xXRw07DBqAJg9EIjHny/XZ4cX ZF6uhKb2jgMoPeyOdY5L9HL23+fOPJZivu8xQXiIbPpDYMm1mLSFs7giDpQNOOXZ Q4JgVyoVoFQVdx8UbSZd1ONgbW/sSJCvq5Ew9Pm6eHXOsqHQAZW5AR+ziaB6/Pmu Y+vO67Va4xtfMuGkggecHIHVWxKa76xfg72pqGNnpjE43RjshUm6kwjqOOq9vnCm 6WWwWRNXNypgnA0ez2/WC1cZhy7hxZYBcsDtA9YuOBHjt5iimSP7mGEFJSAzAeYm bKdu2CzOPclJFoFv3jp0nDTLRRFNV/dtT4UdZER8xg4AMZmPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcaKvScKT2gu20CAu6NNa/bQKlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODNmZDBjZmMtZGJhZC0z YzQwLTlmNzctMjM5ZTkwYjM1MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEstqoQlqYucrHi5MaLbDEateFxk7H4wqkDT/LN15vLhdIy4/0YTYiFl CvYShd0mE51hMTejdIJkvuaT2hD6SPTV77k6kxmVm/Ho0PVw5l1ilMMnZp+TX07J N8aqMkMHsXJd3Vwz4kQHBr9SOiSZivQeVnFFD/ykMuc+DOkz4SinKK7PHEemrSWc NklUlFTnzL2kDQmJtPppOFHLpXt2hVpM5SnNoeMPhiF+NqQYf1/yib6jmAHzuT8L vqJv2M3ghV32sCESbLlvpZ0F0sDlhn7mKdLi0JEGGu/rM/ziEHazGi9vM6f5ZNxj qecxhAkVdUD+fbLYtznsB+GEM+QZiDo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:29:48 2025 by rpki-client