$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/909e6753-c3d4-36a2-9048-b11aaf40d7be.roa File: 909e6753-c3d4-36a2-9048-b11aaf40d7be.roa (raw, json) Hash identifier: Nz1ZduSwJOOlAoeiC8ZhMhnq4/mt32qWnhoEShyKqio= Subject key identifier: DE:87:E2:0E:59:11:25:E7:E7:FF:25:3E:EA:5E:37:01:1F:E3:0B:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF48FDA14CCB9A3BA6BB9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/909e6753-c3d4-36a2-9048-b11aaf40d7be.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8f:da:14:cc:b9:a3:ba:6b:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=ef8ce9f8-1d97-48a2-8886-88b194ca61ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:a6:dc:23:26:25:bd:63:ef:9d:db:39:25: 1e:66:63:ad:51:15:02:c6:88:4f:7a:fc:c5:f2:09: c7:65:91:06:14:c1:38:16:dc:f0:99:53:03:b1:7c: 94:fb:53:bb:17:63:6f:09:a6:44:bb:67:b4:d2:63: 52:8e:7d:76:2d:28:af:60:98:59:ea:7d:e8:a8:d5: e0:54:5e:18:fc:b7:f7:7e:e9:6b:3f:91:d8:9e:b1: 01:b2:2d:53:68:34:d5:f3:b6:4a:8f:d2:20:14:37: 6b:df:ac:f2:5c:2c:cd:ef:b5:26:c7:cf:59:69:cf: 94:5e:74:c6:97:92:be:1c:d5:89:d1:28:40:4a:e4: 09:85:de:7d:a8:6c:b3:fa:20:39:06:51:1a:6c:84: fb:2e:b5:13:47:36:c8:19:ce:02:ab:81:6c:7a:27: 85:d8:6d:9c:e8:d0:f5:4a:a0:6b:35:2b:74:77:99: 6f:8d:2b:12:8a:28:3f:b5:5c:30:b0:6b:22:9f:a0: 8b:64:b2:98:c1:e0:d1:b1:38:2c:7c:7f:b4:92:1e: a3:05:64:1b:54:a7:d6:03:a5:af:03:49:dc:9a:2e: 1c:08:68:fa:4f:24:a6:ad:1d:37:5d:42:77:c2:2d: 5e:60:cd:98:94:c6:a0:ab:88:8c:63:37:a9:3a:69: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:E2:0E:59:11:25:E7:E7:FF:25:3E:EA:5E:37:01:1F:E3:0B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/909e6753-c3d4-36a2-9048-b11aaf40d7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7e:1f:a5:dd:05:d3:cf:89:bd:a6:bd:98:26:62:4a:62:f6: 11:ad:8c:1c:5e:1b:2d:7f:51:1e:0f:a7:b2:6f:05:05:57:2a: 88:e0:73:0f:33:eb:57:b6:e5:5c:9e:70:ea:a2:13:d1:a7:1e: 96:d5:90:6c:9d:5f:c2:77:b9:74:b6:63:55:ab:c2:a3:4f:bb: cf:e5:4a:6b:3a:94:96:46:15:1d:dd:69:fb:54:68:83:35:04: 39:09:4b:b2:6e:94:03:e0:09:bf:01:d4:1a:7b:16:94:76:b4: df:25:f7:c8:62:73:ef:f7:38:89:9d:4d:9e:5f:61:55:59:5b: 13:eb:32:70:4f:0f:93:62:44:0d:a1:97:29:59:ec:dc:39:51: 9b:11:00:d5:94:04:c5:5c:d1:58:b4:69:cd:7d:ba:10:fc:e7: a1:5d:66:39:8d:31:88:99:18:77:0f:23:7e:74:44:79:f7:0d: 8f:df:4a:32:b4:13:1f:1c:02:de:fd:ac:f2:9e:bc:74:78:7d: da:bd:68:86:b2:00:c9:73:9c:ad:ee:92:fb:50:20:14:01:b6: 45:90:0f:c3:53:90:32:18:d9:ae:36:42:6f:66:07:09:c6:da: d8:a1:bd:ae:e1:1e:4a:d8:93:0b:9f:ff:a0:7c:d6:2b:6b:4d: 15:51:36:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9I/aFMy5o7prucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWY4Y2U5ZjgtMWQ5Ny00OGEyLTg4ODYtODhiMTk0Y2E2MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Gm3CMmJb1j753bOSUeZmOtURUCxohPevzF 8gnHZZEGFME4FtzwmVMDsXyU+1O7F2NvCaZEu2e00mNSjn12LSivYJhZ6n3oqNXg VF4Y/Lf3fulrP5HYnrEBsi1TaDTV87ZKj9IgFDdr36zyXCzN77Umx89Zac+UXnTG l5K+HNWJ0ShASuQJhd59qGyz+iA5BlEabIT7LrUTRzbIGc4Cq4FseieF2G2c6ND1 SqBrNSt0d5lvjSsSiig/tVwwsGsin6CLZLKYweDRsTgsfH+0kh6jBWQbVKfWA6Wv A0ncmi4cCGj6TySmrR03XUJ3wi1eYM2YlMagq4iMYzepOmkfZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6H4g5ZESXn5/8lPupeNwEf4wsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA5ZTY3NTMtYzNkNC0z NmEyLTkwNDgtYjExYWFmNDBkN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF+H6XdBdPPib2mvZgmYkpi9hGtjBxeGy1/UR4Pp7JvBQVXKojgcw8z 61e25VyecOqiE9GnHpbVkGydX8J3uXS2Y1WrwqNPu8/lSms6lJZGFR3daftUaIM1 BDkJS7JulAPgCb8B1Bp7FpR2tN8l98hic+/3OImdTZ5fYVVZWxPrMnBPD5NiRA2h lylZ7Nw5UZsRANWUBMVc0Vi0ac19uhD856FdZjmNMYiZGHcPI350RHn3DY/fSjK0 Ex8cAt79rPKevHR4fdq9aIayAMlznK3ukvtQIBQBtkWQD8NTkDIY2a42Qm9mBwnG 2tihva7hHkrYkwuf/6B81itrTRVRNow= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:13 2025 by rpki-client