$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa File: 8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa (raw, json) Hash identifier: KO3fbzz0PVKoqqGxCOg4q5FJ7D4xPQuwdS9g1foQw+I= Subject key identifier: C6:27:AF:03:7E:C7:A7:1D:45:9D:A9:95:3B:BF:B9:34:73:56:71:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849833A0FB916B22B91ACAA5E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 55836 IP address blocks: 23.196.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:0f:b9:16:b2:2b:91:ac:aa:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=99459c68-35b8-4f24-a104-dab13e996eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:87:46:e4:8d:81:85:2c:d9:99:70:d5:c6:42: 0f:47:74:42:8e:eb:c4:65:e6:da:de:4c:9f:0d:08: dc:d4:cd:41:75:b0:27:59:55:a0:43:4b:92:06:07: 32:be:84:13:4b:f4:75:82:e1:ee:92:92:59:a1:fa: 77:93:dc:86:a6:18:5b:08:c1:8c:eb:25:88:dc:ff: 30:e5:8f:5d:df:a7:bb:8a:09:6d:bc:5e:f3:1f:86: 6f:e9:d8:fb:09:b9:40:93:21:cf:17:5c:b6:92:2b: e4:49:16:94:ed:da:3f:4f:d5:07:e7:4c:89:1b:d9: cb:e7:25:43:24:01:b3:97:e4:c9:b5:02:87:1c:5b: 9a:1f:9b:37:32:f9:ed:30:27:7c:65:1c:cc:89:1e: c4:0d:cc:85:de:5d:92:2e:5b:23:dd:24:c7:ea:f0: ae:be:a4:50:4d:5d:ff:25:01:d9:51:66:7b:8c:bc: 34:94:e0:5a:6f:1f:ed:2e:dd:6a:e3:de:68:5e:21: 16:db:a8:1f:31:06:00:c2:7a:fe:8c:21:62:11:02: 58:3b:a9:2d:0f:3a:a9:39:cb:9a:fb:b4:4c:5c:15: d4:c3:34:ed:5a:7a:37:7f:59:bb:45:c0:1c:25:44: 29:aa:24:3a:e5:b4:f5:d7:1f:5f:b5:75:f4:28:a3: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:AF:03:7E:C7:A7:1D:45:9D:A9:95:3B:BF:B9:34:73:56:71:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d1db9b3-ffb0-3495-8523-e3ca9557bd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a7:6b:af:d1:18:dd:53:cc:f8:a1:24:46:90:7e:e7:75:49: 09:ba:b4:aa:c5:10:b7:ed:2f:27:99:34:65:7e:d4:28:b1:26: 7c:b6:6b:7a:6e:c9:2d:69:bd:9a:7c:91:8d:08:dd:e7:3b:c8: ff:a1:43:a2:ff:fa:b4:1f:fa:44:8d:d7:22:45:c5:42:28:3e: b0:09:b7:3c:b6:4f:ec:64:c9:67:ac:96:84:d7:a3:0f:fd:30: d1:01:1a:a1:dc:8f:28:7a:a1:24:b8:cb:89:ed:bf:85:a2:96: 9e:ee:75:58:e0:7e:41:bc:1a:62:e8:9b:7c:7b:c0:96:7d:b8: 82:47:11:b4:4f:0f:9d:4a:7f:f1:a0:20:91:6a:e3:a9:dd:92: 05:35:ff:75:f3:53:19:4e:c3:a7:56:0e:95:ce:f3:a6:6a:e0: 3c:fa:1f:5e:21:86:c4:d7:20:c7:ca:ed:ac:2d:1e:a2:2d:09: 47:24:e8:cb:8b:18:05:e8:fa:19:57:95:44:ee:5c:e7:47:69: ea:3b:4c:5c:4c:5f:46:9a:ee:6d:9a:ab:e2:be:a2:ba:dc:0b: c8:f1:38:e5:7b:45:7f:35:3f:de:2f:c5:9c:20:05:4a:04:51: 3c:f9:66:cd:9f:fd:09:3d:06:92:dd:f4:87:00:93:23:47:7b: d4:3e:4a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOg+5FrIrkayqXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk OTk0NTljNjgtMzViOC00ZjI0LWExMDQtZGFiMTNlOTk2ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIdG5I2BhSzZmXDVxkIPR3RCjuvEZeba3kyf DQjc1M1BdbAnWVWgQ0uSBgcyvoQTS/R1guHukpJZofp3k9yGphhbCMGM6yWI3P8w 5Y9d36e7igltvF7zH4Zv6dj7CblAkyHPF1y2kivkSRaU7do/T9UH50yJG9nL5yVD JAGzl+TJtQKHHFuaH5s3MvntMCd8ZRzMiR7EDcyF3l2SLlsj3STH6vCuvqRQTV3/ JQHZUWZ7jLw0lOBabx/tLt1q495oXiEW26gfMQYAwnr+jCFiEQJYO6ktDzqpOcua +7RMXBXUwzTtWno3f1m7RcAcJUQpqiQ65bT11x9ftXX0KKMKGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYnrwN+x6cdRZ2plTu/uTRzVnHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQxZGI5YjMtZmZiMC0z NDk1LTg1MjMtZTNjYTk1NTdiZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8T4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSna6/RGN1TzPihJEaQfud1SQm6tKrFELftLyeZNGV+1CixJny2a3pu yS1pvZp8kY0I3ec7yP+hQ6L/+rQf+kSN1yJFxUIoPrAJtzy2T+xkyWesloTXow/9 MNEBGqHcjyh6oSS4y4ntv4Wilp7udVjgfkG8GmLom3x7wJZ9uIJHEbRPD51Kf/Gg IJFq46ndkgU1/3XzUxlOw6dWDpXO86Zq4Dz6H14hhsTXIMfK7awtHqItCUck6MuL GAXo+hlXlUTuXOdHaeo7TFxMX0aa7m2aq+K+orrcC8jxOOV7RX81P94vxZwgBUoE UTz5Zs2f/Qk9BpLd9IcAkyNHe9Q+Sjo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:37 2025 by rpki-client