$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c09d1ed-e3e0-36e8-b0f3-fa548d509ead.roa File: 9c09d1ed-e3e0-36e8-b0f3-fa548d509ead.roa (raw, json) Hash identifier: S3pJgCJ3sqZVKqQvoiVqFaqJPol2p3iJaKzJevs+7nw= Subject key identifier: B1:24:7C:CB:02:AD:15:F0:53:55:15:AF:20:01:BD:35:3A:39:32:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849860474A2A6C7BCEBB3AA1300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c09d1ed-e3e0-36e8-b0f3-fa548d509ead.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.199.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:74:a2:a6:c7:bc:eb:b3:aa:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=834fb1b4-c7d1-471e-8425-d7f8344234c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:77:f6:a0:98:55:53:48:f1:5f:e3:06:07: 6a:c2:5b:85:a5:36:74:53:c3:19:78:0d:9e:54:50: de:e1:e9:f3:0f:8e:d2:b7:7f:40:ed:14:06:40:7c: 00:35:4b:5e:20:fa:32:c2:d7:dd:ae:50:c8:c8:c3: 02:1b:d1:5f:af:89:ae:e2:35:e9:56:26:85:23:94: ea:7d:d1:7d:77:78:50:fc:90:25:ec:b3:ac:d4:ba: 7b:24:09:68:4a:0c:23:d8:d8:de:ce:1f:11:f3:2b: 93:3c:96:fe:7d:47:3c:2e:b7:e7:69:81:90:e5:17: 83:5a:b7:2a:0b:90:94:02:c2:e4:38:b9:24:0b:a0: 65:73:9a:42:d0:24:f7:d3:1f:8c:5f:b8:1e:bf:8f: 88:4e:32:f6:00:60:b6:3b:45:dd:17:7e:19:36:f3: cb:d8:a5:37:cc:f9:f6:22:ca:b7:7d:da:ba:f9:5a: d5:b0:a2:49:d6:8a:cf:7d:a8:1f:dc:9e:fb:69:12: e2:ef:cc:88:fe:68:8a:f4:3b:b7:01:53:2c:55:c8: 75:cb:e7:e6:06:b5:77:99:58:98:aa:0b:10:63:db: 75:5e:bf:83:34:c0:a0:d4:6d:55:44:e0:20:d3:85: 8a:92:67:36:6a:e4:76:1b:fd:b3:1f:51:2b:d4:c9: de:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:7C:CB:02:AD:15:F0:53:55:15:AF:20:01:BD:35:3A:39:32:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c09d1ed-e3e0-36e8-b0f3-fa548d509ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:14:b4:45:98:01:fb:32:bc:26:0e:b1:e4:c9:85:2a:ef:a5: 87:91:91:e7:13:16:d2:a9:0b:e3:4c:7d:f6:63:22:6b:0d:af: a0:d2:6e:b5:da:ee:64:e5:27:1a:67:4c:85:23:8b:90:cc:c2: 47:42:7c:a1:2e:92:7e:4a:3d:08:4d:a7:f3:87:57:d2:40:7c: 93:4a:b1:de:8c:10:2f:2b:56:8f:4d:4e:fd:f6:8e:26:51:8b: f6:96:f5:2b:cf:73:ec:a2:75:37:e1:87:0d:14:d3:fa:1e:26: a5:ee:85:de:c5:fc:23:e1:b1:97:40:45:fe:75:35:3f:41:bf: 9a:cc:04:e7:8c:15:43:5b:97:f2:b3:a5:fd:fa:d0:e9:67:9e: e8:0a:74:5e:6d:15:e1:aa:74:42:29:1e:ab:47:34:71:2d:f6: 9f:a1:53:1b:0a:d9:c1:81:78:f0:7e:ca:eb:40:1e:91:11:2f: 9a:75:b9:b6:db:4f:ba:ea:b2:b6:00:47:c9:e0:a4:16:5a:60: 40:78:c6:96:d6:d9:b3:0a:53:f2:39:ba:09:af:a7:4a:7a:72: 69:67:8c:ea:33:28:23:52:43:36:be:c7:f2:b4:ee:ac:f6:23: 5a:c6:26:ec:77:6d:26:08:2b:4b:12:a8:44:26:9b:71:0a:3b: 70:af:d7:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHSipse867OqEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk ODM0ZmIxYjQtYzdkMS00NzFlLTg0MjUtZDdmODM0NDIzNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN139qCYVVNI8V/jBgdqwluFpTZ0U8MZeA2e VFDe4enzD47St39A7RQGQHwANUteIPoywtfdrlDIyMMCG9Ffr4mu4jXpViaFI5Tq fdF9d3hQ/JAl7LOs1Lp7JAloSgwj2Njezh8R8yuTPJb+fUc8LrfnaYGQ5ReDWrcq C5CUAsLkOLkkC6Blc5pC0CT30x+MX7gev4+ITjL2AGC2O0XdF34ZNvPL2KU3zPn2 Isq3fdq6+VrVsKJJ1orPfagf3J77aRLi78yI/miK9Du3AVMsVch1y+fmBrV3mViY qgsQY9t1Xr+DNMCg1G1VROAg04WKkmc2auR2G/2zH1Er1MnexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEkfMsCrRXwU1UVryABvTU6OTKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMwOWQxZWQtZTNlMC0z NmU4LWIwZjMtZmE1NDhkNTA5ZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ciMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwUtEWYAfsyvCYOseTJhSrvpYeRkecTFtKpC+NMffZjImsNr6DSbrXa 7mTlJxpnTIUji5DMwkdCfKEukn5KPQhNp/OHV9JAfJNKsd6MEC8rVo9NTv32jiZR i/aW9SvPc+yidTfhhw0U0/oeJqXuhd7F/CPhsZdARf51NT9Bv5rMBOeMFUNbl/Kz pf360OlnnugKdF5tFeGqdEIpHqtHNHEt9p+hUxsK2cGBePB+yutAHpERL5p1ubbb T7rqsrYAR8ngpBZaYEB4xpbW2bMKU/I5ugmvp0p6cmlnjOozKCNSQza+x/K07qz2 I1rGJux3bSYIK0sSqEQmm3EKO3Cv1zQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:49 2025 by rpki-client