$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cd8486f-0258-3f33-9578-cd7b19565fe7.roa File: 8cd8486f-0258-3f33-9578-cd7b19565fe7.roa (raw, json) Hash identifier: 6/B0gr1tmn8UnzYk+nyHYPzv7cGyIUnxCjroE4xm/z0= Subject key identifier: DE:4E:1E:2D:FD:89:77:1C:9A:30:74:E1:3A:05:8A:56:09:B3:6E:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF67444B8691CA0DE3DD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cd8486f-0258-3f33-9578-cd7b19565fe7.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.202.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:67:44:4b:86:91:ca:0d:e3:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=f035d46b-cb76-439d-b7ee-b3eb8a81842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:71:36:02:1f:e8:5c:ab:64:fa:51:cc:3b: dc:d2:f3:ee:83:62:b9:59:f3:b2:98:11:c6:81:f1: 80:b2:4d:80:18:7c:b9:f9:44:14:15:49:a3:d3:b1: d4:72:c3:32:19:63:67:e2:1d:2e:83:1c:6e:c5:cb: a1:19:3b:be:e4:dc:c8:99:b8:cc:e5:30:39:e6:9f: dd:26:67:33:ab:0e:23:00:96:9e:be:70:58:0c:84: 99:8b:35:f9:85:74:9a:58:84:54:fc:65:27:51:48: 35:df:67:e3:df:11:3b:b1:8c:b7:d2:74:42:80:d7: f8:cd:22:0f:ec:59:63:04:6a:21:f3:0f:c9:32:4e: 1a:d2:c1:e7:08:33:0b:4f:03:67:e4:e0:9e:de:da: 09:93:55:30:06:9d:35:5f:ed:49:1f:a4:87:24:b9: b0:37:e9:6e:bc:fe:56:10:8f:48:d3:fd:7f:4f:2d: ef:8d:04:f4:10:a9:5a:bc:69:c7:dc:fa:dc:62:9c: c9:f5:0d:d8:a0:41:8b:26:dd:4a:ab:4b:2b:e6:3a: 9b:be:40:52:f8:b9:7f:15:83:ea:1f:f6:80:9d:23: bc:28:e4:97:01:7d:18:23:29:b1:b9:5f:a9:22:28: ab:07:18:12:2a:b2:37:66:b7:13:ec:e7:d0:48:a0: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4E:1E:2D:FD:89:77:1C:9A:30:74:E1:3A:05:8A:56:09:B3:6E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cd8486f-0258-3f33-9578-cd7b19565fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:31:94:c5:ce:57:d2:2e:4b:d9:53:a3:1c:e2:be:ce:1e:b9: dc:1a:00:1e:41:05:bb:4f:7f:ee:06:1e:60:5a:b1:55:c9:71: 1a:17:1f:22:ae:05:e9:d7:d5:99:8c:30:16:12:9b:31:42:6a: 2b:fb:7f:6d:42:73:69:f3:9f:dc:2f:7f:3e:a6:1a:e7:ed:f6: a0:27:d1:bf:17:8f:01:b6:aa:5a:f9:f7:fe:71:37:ca:4f:71: b3:d9:d3:36:fc:cc:15:16:1d:12:45:15:0d:8a:be:f1:a9:4d: b6:0b:00:d2:1b:6d:7e:84:aa:24:79:35:65:be:e9:8a:1f:62: c2:36:9c:a3:03:9e:95:1d:2e:a2:80:b5:e4:63:90:04:0e:56: 3e:98:e7:48:87:0e:de:0b:d8:e1:13:6a:9d:60:72:16:b0:13: 25:ff:70:16:0d:b9:b9:1d:56:92:0c:c7:cd:b9:36:21:83:a6: 35:40:7f:a5:60:34:15:5f:31:4d:95:0c:b6:af:c6:f7:d2:b4: 5b:64:a8:c7:55:cf:77:21:d0:06:9f:18:aa:5b:cd:a5:29:cf: 69:2e:58:e8:d4:77:48:55:6d:39:c3:9b:a0:d2:97:84:a0:0a: 47:6e:3a:b8:69:f7:b7:06:c1:80:f9:45:61:f4:90:7f:5f:94: 7c:6e:65:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz2dES4aRyg3j3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZjAzNWQ0NmItY2I3Ni00MzlkLWI3ZWUtYjNlYjhhODE4NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWJxNgIf6FyrZPpRzDvc0vPug2K5WfOymBHG gfGAsk2AGHy5+UQUFUmj07HUcsMyGWNn4h0ugxxuxcuhGTu+5NzImbjM5TA55p/d Jmczqw4jAJaevnBYDISZizX5hXSaWIRU/GUnUUg132fj3xE7sYy30nRCgNf4zSIP 7FljBGoh8w/JMk4a0sHnCDMLTwNn5OCe3toJk1UwBp01X+1JH6SHJLmwN+luvP5W EI9I0/1/Ty3vjQT0EKlavGnH3PrcYpzJ9Q3YoEGLJt1Kq0sr5jqbvkBS+Ll/FYPq H/aAnSO8KOSXAX0YIymxuV+pIiirBxgSKrI3ZrcT7OfQSKCuNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5OHi39iXccmjB04ToFilYJs26pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNkODQ4NmYtMDI1OC0z ZjMzLTk1NzgtY2Q3YjE5NTY1ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkxlMXOV9IuS9lToxzivs4eudwaAB5BBbtPf+4GHmBasVXJcRoXHyKu BenX1ZmMMBYSmzFCaiv7f21Cc2nzn9wvfz6mGuft9qAn0b8XjwG2qlr59/5xN8pP cbPZ0zb8zBUWHRJFFQ2KvvGpTbYLANIbbX6EqiR5NWW+6YofYsI2nKMDnpUdLqKA teRjkAQOVj6Y50iHDt4L2OETap1gchawEyX/cBYNubkdVpIMx825NiGDpjVAf6Vg NBVfMU2VDLavxvfStFtkqMdVz3ch0AafGKpbzaUpz2kuWOjUd0hVbTnDm6DSl4Sg CkduOrhp97cGwYD5RWH0kH9flHxuZTs= -----END CERTIFICATE-----Generated at Sun Apr 27 01:21:57 2025 by rpki-client