$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa File: b5523cd5-104d-3011-b66d-ba564b4e42aa.roa (raw, json) Hash identifier: iRXCqXET1hY2AT1SFh++LOOMO7wKbgYkKovXoRK5I/A= Subject key identifier: CB:69:5F:37:2E:1D:EB:5A:1E:6F:D0:3B:21:83:CF:52:A7:9E:67:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF48A210978513A83E4AA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:48:a2:10:97:85:13:a8:3e:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=0ebf07d1-8b7f-4832-8075-b63309cdabf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:eb:3b:bd:36:ec:30:d6:24:f5:c0:c0:26: 0d:f6:05:a4:01:2b:7e:e7:e9:f0:3c:1c:bf:8b:62: fd:0b:01:14:e3:45:44:99:92:a4:31:1f:d9:cc:4d: c6:fc:00:76:d2:8d:b9:98:6d:51:50:2c:ba:bb:be: ba:9e:50:fc:2c:bf:97:37:31:b5:be:1a:dd:ee:37: c3:bd:be:60:ec:82:30:8f:07:9e:20:21:89:35:74: 16:7c:eb:09:14:16:a2:7c:a4:73:7c:a9:64:07:0a: c1:0a:bc:69:63:f6:56:7c:e7:30:34:df:8e:a6:c3: 2c:bc:d5:ab:58:bb:48:81:93:72:c9:73:91:2a:1b: dc:16:e2:1d:15:3e:5a:dc:9a:9d:85:7f:c9:b4:75: 86:8c:50:f3:0a:66:6e:9b:01:6f:83:3b:21:33:33: 24:cc:26:0b:35:77:c6:38:f9:73:2b:87:5c:9b:fc: cf:ee:fa:03:d3:dd:dd:cf:ca:39:1e:f4:b5:a4:e8: 58:be:9a:4b:d4:b2:7c:54:40:83:dd:4a:bd:99:af: f2:16:e0:09:21:3a:8f:c2:f2:bb:eb:2d:82:98:5e: 49:0a:7b:17:a9:62:7c:2c:fd:2e:dd:51:e0:60:6b: e0:3b:0b:5c:11:14:2b:5b:3c:6d:e6:1e:7d:90:44: fd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:5F:37:2E:1D:EB:5A:1E:6F:D0:3B:21:83:CF:52:A7:9E:67:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:55:50:4d:3f:cf:7e:d1:4b:32:42:d1:f8:9a:d7:ce:d4:67: 59:52:9f:b7:da:cc:ab:43:8b:41:f7:bd:6c:62:48:ca:57:da: f1:6d:6f:db:2d:a2:01:45:c4:4a:b2:db:07:fe:ee:a4:40:07: 84:8d:55:a0:f7:a7:65:62:2a:7a:ea:70:81:d9:67:2e:34:62: b1:f9:1a:36:b0:ab:14:62:63:c2:e0:e5:f3:94:c7:7b:28:b8: 49:9e:22:c7:d2:2c:c0:31:62:7c:57:c6:6f:e1:fd:a7:fe:76: ce:9a:d0:72:8b:f4:8d:28:df:28:fc:9a:a9:40:cb:88:1d:f1: 30:cb:a1:d9:0f:28:49:04:bb:27:9d:81:dc:38:6e:2f:9f:7d: 30:a9:15:d3:b8:6a:e3:2c:98:07:77:34:be:c7:7a:ed:0b:9d: be:bb:79:e7:35:3f:11:31:f0:57:f1:60:ce:57:6d:85:f4:5c: 1c:d3:a0:61:c5:ea:aa:67:07:79:7b:a2:e3:1d:90:4d:02:6c: c1:b0:e7:ee:22:74:a2:92:f3:06:3c:29:a7:6d:92:bf:70:48: ce:bc:f0:4f:17:17:04:83:8c:8e:3a:0e:fd:8a:58:ea:b5:10: ff:c8:d7:a3:97:72:1b:f6:70:5b:f7:84:73:e9:eb:a0:36:5d: 8b:ce:a0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0iiEJeFE6g+SqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MGViZjA3ZDEtOGI3Zi00ODMyLTgwNzUtYjYzMzA5Y2RhYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQXrO7027DDWJPXAwCYN9gWkASt+5+nwPBy/ i2L9CwEU40VEmZKkMR/ZzE3G/AB20o25mG1RUCy6u766nlD8LL+XNzG1vhrd7jfD vb5g7IIwjweeICGJNXQWfOsJFBaifKRzfKlkBwrBCrxpY/ZWfOcwNN+OpsMsvNWr WLtIgZNyyXORKhvcFuIdFT5a3JqdhX/JtHWGjFDzCmZumwFvgzshMzMkzCYLNXfG OPlzK4dcm/zP7voD093dz8o5HvS1pOhYvppL1LJ8VECD3Uq9ma/yFuAJITqPwvK7 6y2CmF5JCnsXqWJ8LP0u3VHgYGvgOwtcERQrWzxt5h59kET9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtpXzcuHetaHm/QOyGDz1KnnmdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU1MjNjZDUtMTA0ZC0z MDExLWI2NmQtYmE1NjRiNGU0MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9llMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9VUE0/z37RSzJC0fia187UZ1lSn7fazKtDi0H3vWxiSMpX2vFtb9st ogFFxEqy2wf+7qRAB4SNVaD3p2ViKnrqcIHZZy40YrH5GjawqxRiY8Lg5fOUx3so uEmeIsfSLMAxYnxXxm/h/af+ds6a0HKL9I0o3yj8mqlAy4gd8TDLodkPKEkEuyed gdw4bi+ffTCpFdO4auMsmAd3NL7Heu0Lnb67eec1PxEx8FfxYM5XbYX0XBzToGHF 6qpnB3l7ouMdkE0CbMGw5+4idKKS8wY8Kadtkr9wSM688E8XFwSDjI46Dv2KWOq1 EP/I16OXchv2cFv3hHPp66A2XYvOoGM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:40 2025 by rpki-client