$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa File: b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa (raw, json) Hash identifier: W5KP3Iz3+a/mgyGMZG4ecdPcAIbD7ZPy7tPhocofC0I= Subject key identifier: 37:EF:00:9E:87:B4:58:24:9C:1E:97:60:B2:A2:77:CE:07:4B:B6:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279C24D021400F4E2606400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 35994 IP address blocks: 23.209.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c2:4d:02:14:00:f4:e2:60:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=92146538-d6da-4d0b-9bf9-188b39f1642e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:74:51:25:63:fa:d2:6d:93:0a:2b:e9:89: a2:2d:b3:c3:d5:44:b6:08:39:62:96:c0:2c:b8:85: 71:93:d3:a2:14:66:27:a2:90:f9:5b:c8:80:79:57: ba:4f:72:ce:32:d7:2a:59:77:83:89:94:d1:50:18: 7d:7f:8c:d7:ca:14:52:99:14:7e:a0:cd:0e:dd:ae: e7:b9:f7:7c:ca:86:f9:90:21:27:b9:54:0d:e8:b7: dd:73:67:7b:a1:dd:56:ec:3a:46:20:d7:5e:54:30: 93:7d:3b:6d:3f:f3:e9:fc:46:f7:1b:b1:b1:ea:26: b8:60:92:25:62:d4:a6:59:e1:64:1c:02:2c:5a:ce: 1a:43:1c:d1:e9:af:fd:da:94:fc:fb:73:b2:92:a5: 56:4e:c6:26:bc:3c:3f:b3:49:80:a2:64:d9:e6:d5: 37:c7:98:3d:84:e1:31:48:45:ba:5a:3c:14:0b:d0: e1:f9:13:3d:cb:c8:18:f1:6b:48:50:87:19:dc:79: 66:a2:54:0d:76:f7:0f:f7:ca:1f:34:23:cb:44:cd: 0e:e8:3b:4a:e4:18:3c:64:f4:0f:a8:b7:65:b3:d8: 54:e2:83:d3:86:26:c1:d1:ff:d8:ed:d5:dc:21:e7: 75:18:bf:85:ff:21:a0:9e:2e:8e:c9:6e:e9:bf:de: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EF:00:9E:87:B4:58:24:9C:1E:97:60:B2:A2:77:CE:07:4B:B6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b5:3f:54:9b:90:0a:f4:d7:7f:3b:e5:bb:86:25:87:8d:fe: 25:a7:78:ea:6f:0c:96:82:75:28:05:bd:04:e1:34:79:f3:cf: 4d:40:8f:a4:b1:04:58:fa:9f:c0:e0:7a:47:28:33:e0:c8:ed: a0:2f:89:ad:49:fd:c2:18:f4:94:1f:0c:af:b4:0d:d9:4f:1c: 2a:22:cd:eb:22:bd:35:0e:4a:74:61:53:85:3b:24:a7:29:74: c1:db:dd:05:4d:f8:d2:5a:dd:38:26:fd:7e:84:37:ff:c9:ab: 10:bb:48:f9:91:ea:44:07:57:76:58:2e:c3:de:7e:22:39:32: 2a:fd:53:47:8c:66:f5:4d:fc:12:6e:92:6a:eb:28:18:4e:44: 6b:06:e5:aa:6b:9d:ef:b7:f1:74:e0:15:ea:ff:bc:97:3c:60: 65:bc:dd:7c:70:13:59:b0:25:10:90:14:63:93:ed:37:2b:30: 27:b3:fd:35:c9:35:7a:c1:a1:1b:b6:e8:fd:07:79:69:cb:f5: 26:28:26:65:29:f2:14:76:6b:03:f2:8d:c4:6d:2b:0a:db:78: e3:56:5d:8d:7b:3d:ca:76:80:89:be:7c:bd:f4:d2:7a:f4:fc: 02:f2:23:46:22:99:37:d6:5a:0f:99:34:03:70:f5:8a:eb:bc: ef:c5:f4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecJNAhQA9OJgZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk OTIxNDY1MzgtZDZkYS00ZDBiLTliZjktMTg4YjM5ZjE2NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fB0USVj+tJtkwor6YmiLbPD1US2CDlilsAs uIVxk9OiFGYnopD5W8iAeVe6T3LOMtcqWXeDiZTRUBh9f4zXyhRSmRR+oM0O3a7n ufd8yob5kCEnuVQN6Lfdc2d7od1W7DpGINdeVDCTfTttP/Pp/Eb3G7Gx6ia4YJIl YtSmWeFkHAIsWs4aQxzR6a/92pT8+3OykqVWTsYmvDw/s0mAomTZ5tU3x5g9hOEx SEW6WjwUC9Dh+RM9y8gY8WtIUIcZ3HlmolQNdvcP98ofNCPLRM0O6DtK5Bg8ZPQP qLdls9hU4oPThibB0f/Y7dXcIed1GL+F/yGgni6OyW7pv94unwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfvAJ6HtFgknB6XYLKid84HS7YYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI0YjJmMjktNzRlYy0z NGYxLTlhNzEtMmM1ZTE5ZDFlMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG1P1SbkAr013875buGJYeN/iWneOpvDJaCdSgFvQThNHnzz01Aj6Sx BFj6n8DgekcoM+DI7aAvia1J/cIY9JQfDK+0DdlPHCoizesivTUOSnRhU4U7JKcp dMHb3QVN+NJa3Tgm/X6EN//JqxC7SPmR6kQHV3ZYLsPefiI5Mir9U0eMZvVN/BJu kmrrKBhORGsG5aprne+38XTgFer/vJc8YGW83XxwE1mwJRCQFGOT7TcrMCez/TXJ NXrBoRu26P0HeWnL9SYoJmUp8hR2awPyjcRtKwrbeONWXY17Pcp2gIm+fL300nr0 /ALyI0YimTfWWg+ZNANw9YrrvO/F9CQ= -----END CERTIFICATE-----Generated at Sun Apr 27 06:27:07 2025 by rpki-client