$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa File: 864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa (raw, json) Hash identifier: NKCndjKAnIWhVf0Gsrfm/oY3BLiEba1c9iKV42UznRg= Subject key identifier: 57:C3:7B:25:36:E6:4B:BB:C7:DC:53:A1:D6:86:35:4C:C7:B5:02:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E72FFE35636A37989CF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.207.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e7:2f:fe:35:63:6a:37:98:9c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=5511b8df-9083-4418-8d25-0faeae99c901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:14:ce:dd:73:eb:7d:8a:3d:5f:c2:8e:1b:cf: 70:d1:77:7f:8e:b1:80:c4:b8:17:ff:3b:58:89:a4: d4:47:a4:da:9c:05:ac:f8:00:27:b3:83:13:3a:72: a7:2e:62:ce:b3:be:68:2e:49:3c:15:7b:15:8c:81: f7:35:90:e0:ac:93:2d:be:01:cf:dc:4f:9a:eb:68: c0:c6:01:1f:f6:25:a9:87:2b:92:30:e7:00:5a:d0: c2:59:2f:9e:6f:d2:bb:59:4f:d5:8d:05:cf:ec:64: 34:13:41:ec:22:bb:a7:7a:d7:c7:c3:7f:cb:a2:76: 28:ef:f4:04:f0:c9:e8:9c:91:eb:ab:f4:db:79:ec: 31:11:0e:de:99:b0:e2:c8:06:62:b9:f1:38:2a:21: 06:33:78:27:85:c8:ca:e7:71:ed:42:03:93:58:eb: 52:14:d7:ef:7c:69:f1:b1:21:e9:37:48:5a:18:88: fa:ff:8d:4d:62:ae:92:08:72:79:4e:6e:14:46:0e: 35:5a:24:6d:d9:4b:6c:32:a9:8c:fd:72:46:d1:ac: 74:d5:12:87:4b:cf:25:f6:39:0b:23:1c:cb:83:45: f8:33:4a:e1:d2:df:24:36:a3:f3:22:a8:dd:f7:72: 28:fb:77:ca:86:3a:f7:f1:38:c2:bf:d5:a0:35:52: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C3:7B:25:36:E6:4B:BB:C7:DC:53:A1:D6:86:35:4C:C7:B5:02:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fb:9c:db:31:10:0d:61:b5:ce:b3:6a:a4:d0:de:12:98:10: b1:40:59:e9:1c:26:7c:81:33:c2:b2:46:bf:98:8c:e6:54:99: fb:1a:e7:92:b3:87:20:4d:96:f5:e7:10:3c:f0:ce:43:08:fd: 51:53:59:3d:22:f5:ec:94:43:c9:4b:c4:d8:48:7b:70:52:5f: fc:c6:f6:6f:99:b9:70:5f:4a:a1:79:23:2b:b4:9a:4f:82:a9: dd:16:13:e3:5f:ad:83:70:4f:72:e0:33:47:8f:58:3c:16:77: 14:09:ee:6c:ef:99:72:93:58:6c:5c:07:8d:f7:2d:5f:87:11: b0:0b:34:29:aa:97:b3:f3:8c:ca:49:85:56:1b:1c:3a:93:16: 45:35:fc:9c:13:09:49:2b:4e:76:af:0a:fe:3d:20:9e:58:e0: 5e:33:ad:25:26:14:0b:4e:46:97:82:bd:6d:a8:f1:f1:22:e2: f6:73:a3:8c:2e:de:f6:c9:a5:ce:97:0f:98:6e:91:f4:70:1b: 95:18:85:01:42:d4:8e:c0:60:94:95:c7:41:56:8b:c4:6f:f6: 2c:e0:67:10:db:c8:96:f3:6c:8d:1a:a5:c4:94:6b:94:95:3a: 6c:3c:7d:bb:c1:35:f4:55:17:51:fe:71:32:3d:c3:4a:1c:bb: 49:07:90:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKecv/jVjajeYnPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NTUxMWI4ZGYtOTA4My00NDE4LThkMjUtMGZhZWFlOTljOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxTO3XPrfYo9X8KOG89w0Xd/jrGAxLgX/ztY iaTUR6TanAWs+AAns4MTOnKnLmLOs75oLkk8FXsVjIH3NZDgrJMtvgHP3E+a62jA xgEf9iWphyuSMOcAWtDCWS+eb9K7WU/VjQXP7GQ0E0HsIrunetfHw3/LonYo7/QE 8MnonJHrq/TbeewxEQ7embDiyAZiufE4KiEGM3gnhcjK53HtQgOTWOtSFNfvfGnx sSHpN0haGIj6/41NYq6SCHJ5Tm4URg41WiRt2UtsMqmM/XJG0ax01RKHS88l9jkL IxzLg0X4M0rh0t8kNqPzIqjd93Io+3fKhjr38TjCv9WgNVLQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfDeyU25ku7x9xTodaGNUzHtQLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY0ZmM0YjQtYmIyOC0z Mzg4LWIwODYtOGY2ZTJhZDA5YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH7nNsxEA1htc6zaqTQ3hKYELFAWekcJnyBM8KyRr+YjOZUmfsa55Kz hyBNlvXnEDzwzkMI/VFTWT0i9eyUQ8lLxNhIe3BSX/zG9m+ZuXBfSqF5Iyu0mk+C qd0WE+NfrYNwT3LgM0ePWDwWdxQJ7mzvmXKTWGxcB433LV+HEbALNCmql7PzjMpJ hVYbHDqTFkU1/JwTCUkrTnavCv49IJ5Y4F4zrSUmFAtORpeCvW2o8fEi4vZzo4wu 3vbJpc6XD5hukfRwG5UYhQFC1I7AYJSVx0FWi8Rv9izgZxDbyJbzbI0apcSUa5SV Omw8fbvBNfRVF1H+cTI9w0ocu0kHkD0= -----END CERTIFICATE-----Generated at Sun Apr 27 20:24:10 2025 by rpki-client