$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d17730-4799-38dc-8924-aa83c8308018.roa File: b3d17730-4799-38dc-8924-aa83c8308018.roa (raw, json) Hash identifier: 1ffrKSzbTV+BjJqVpN+gF9GAaKEk5qSMz0Q4BXuYlUQ= Subject key identifier: 48:54:52:09:5D:C1:81:EC:56:E4:5C:36:CB:DE:A8:E1:DB:C5:28:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498769BFA400638E745CC41880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d17730-4799-38dc-8924-aa83c8308018.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.200.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bf:a4:00:63:8e:74:5c:c4:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=94a0ff3d-dd72-401c-a83f-493c05cf8f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:7f:6f:cb:04:a2:1e:11:7b:c2:2d:ba:f2: a6:94:af:ac:18:e2:34:85:64:b9:ed:7a:3a:74:06: f8:27:30:4e:7d:53:d7:d1:58:fd:8b:20:9b:d5:15: 1c:65:25:c1:61:f3:94:a7:af:1c:d7:b8:7d:d9:a1: 99:89:2a:1c:bf:ec:c9:4e:d1:30:1f:04:a3:0d:18: 2e:37:60:ab:09:c8:9f:b8:24:5b:4e:33:b3:e6:88: 51:81:98:5e:8c:ac:df:e3:64:34:8f:ab:ab:8c:69: 1f:53:2f:53:a0:e8:64:e7:6b:bd:5d:cc:f3:7f:34: 89:55:b7:8e:d9:16:d9:55:2c:7e:a4:8b:8b:f1:45: ce:53:60:db:f1:58:ed:58:53:46:79:17:c4:7c:2c: 45:a1:7d:ae:f9:9c:ea:71:9a:4e:84:aa:45:9c:bb: 15:9c:a7:03:ed:9e:78:89:fe:2e:e0:fa:60:e1:9e: 05:63:3f:37:4a:d3:4e:56:b3:82:6c:96:95:9b:44: 74:90:bf:f0:16:a2:22:e8:ba:9b:ac:b8:d3:67:01: 01:27:69:8f:17:43:03:dd:24:b1:cf:eb:a4:a2:cc: 9e:64:a0:44:30:f9:dc:7d:d2:88:56:23:26:0e:2a: ac:62:99:88:be:55:dd:61:53:fd:9f:4c:bf:b3:c0: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:54:52:09:5D:C1:81:EC:56:E4:5C:36:CB:DE:A8:E1:DB:C5:28:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d17730-4799-38dc-8924-aa83c8308018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a5:a6:91:68:2b:a3:19:59:01:b7:fd:36:16:3f:8d:27:55: de:c2:01:d2:d2:69:68:20:1b:e8:de:04:0c:40:26:e6:dd:a5: 8d:89:01:b6:02:9b:e6:e5:da:f6:8a:eb:6b:e5:ac:da:95:46: a6:34:94:24:fb:3c:20:e8:45:35:3b:51:c5:2d:39:45:05:92: 50:2a:19:de:69:cf:6b:3b:93:c0:2c:15:ad:49:1d:9c:20:df: 11:a7:33:2b:f0:d4:c5:67:78:5b:4f:ac:68:10:fe:43:48:03: 3d:08:a5:87:70:0e:ff:da:5f:9c:58:4e:2d:21:33:02:f2:9b: 50:79:26:bc:e0:b8:a6:80:a1:77:40:bf:11:10:d5:8f:f1:5f: eb:02:b9:49:4f:97:c4:db:df:ee:30:85:17:6f:6c:3c:e5:e8: 25:de:40:51:49:60:38:00:3a:19:c8:00:44:8e:49:82:63:b1: f9:99:88:36:c5:66:46:1c:bb:e0:bd:86:da:8a:92:84:b7:30: 05:d9:c1:7f:0d:d7:f3:86:90:be:bd:7a:0a:36:1d:db:1f:de: eb:14:ed:e0:39:0f:d3:1a:00:77:47:16:e4:15:87:ef:90:10: 0e:5e:66:67:db:31:76:2c:30:6f:2c:2a:c1:6a:d8:c2:02:91: 25:ed:53:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab+kAGOOdFzEGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OTRhMGZmM2QtZGQ3Mi00MDFjLWE4M2YtNDkzYzA1Y2Y4ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMV/b8sEoh4Re8ItuvKmlK+sGOI0hWS57Xo6 dAb4JzBOfVPX0Vj9iyCb1RUcZSXBYfOUp68c17h92aGZiSocv+zJTtEwHwSjDRgu N2CrCcifuCRbTjOz5ohRgZhejKzf42Q0j6urjGkfUy9ToOhk52u9XczzfzSJVbeO 2RbZVSx+pIuL8UXOU2Db8VjtWFNGeRfEfCxFoX2u+ZzqcZpOhKpFnLsVnKcD7Z54 if4u4Ppg4Z4FYz83StNOVrOCbJaVm0R0kL/wFqIi6LqbrLjTZwEBJ2mPF0MD3SSx z+ukosyeZKBEMPncfdKIViMmDiqsYpmIvlXdYVP9n0y/s8A38QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhUUgldwYHsVuRcNsveqOHbxSjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNkMTc3MzAtNDc5OS0z OGRjLTg5MjQtYWE4M2M4MzA4MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADylppFoK6MZWQG3/TYWP40nVd7CAdLSaWggG+jeBAxAJubdpY2JAbYC m+bl2vaK62vlrNqVRqY0lCT7PCDoRTU7UcUtOUUFklAqGd5pz2s7k8AsFa1JHZwg 3xGnMyvw1MVneFtPrGgQ/kNIAz0IpYdwDv/aX5xYTi0hMwLym1B5JrzguKaAoXdA vxEQ1Y/xX+sCuUlPl8Tb3+4whRdvbDzl6CXeQFFJYDgAOhnIAESOSYJjsfmZiDbF ZkYcu+C9htqKkoS3MAXZwX8N1/OGkL69ego2Hdsf3usU7eA5D9MaAHdHFuQVh++Q EA5eZmfbMXYsMG8sKsFq2MICkSXtUws= -----END CERTIFICATE-----Generated at Sun Apr 27 00:11:38 2025 by rpki-client