$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c568d8ba-2546-327e-abf1-083691caf276.roa File: c568d8ba-2546-327e-abf1-083691caf276.roa (raw, json) Hash identifier: g+7A5pIWDSIOEaQtCrZJ2hRkTi9AlavSFCq/r5h7tYA= Subject key identifier: E6:4A:2F:A5:74:5C:60:B6:7D:D2:4A:38:DF:7B:37:42:45:B0:28:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4901B27F4653DF3596900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c568d8ba-2546-327e-abf1-083691caf276.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:90:1b:27:f4:65:3d:f3:59:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=281932e8-6957-48b4-8503-0b1856660934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:35:01:20:d1:e7:5e:27:ff:67:82:73:71: 10:2a:e3:e7:55:7d:33:6d:29:a3:3f:f9:57:04:20: 13:7a:72:d5:11:67:d8:c1:ff:5f:f2:f1:61:d0:6f: c8:34:2d:77:a5:42:67:67:9c:c8:e8:e5:d3:cb:02: f2:b6:be:fd:be:4b:e8:3c:4b:33:e9:ad:d9:5a:0e: a8:dd:53:08:06:f2:87:87:05:ad:55:e8:02:9d:8d: 3d:40:80:6b:12:13:87:c8:50:3b:d9:c4:ed:a6:8e: fd:99:00:c1:67:f2:8f:ed:39:e1:e6:7b:f4:28:95: 88:c0:8b:4e:95:94:60:b6:f1:cc:b8:5a:7f:7e:a0: e5:e4:b5:f1:12:3e:fe:8e:7e:cb:b0:44:47:91:b1: f2:ab:8a:e8:7e:d5:55:1b:d2:4d:fd:c4:29:49:49: 00:25:aa:3c:80:48:74:37:71:e9:4b:62:17:6f:f5: 69:e7:06:16:f1:e7:10:3a:3a:38:44:18:8e:01:ae: 89:63:2a:76:b9:6d:3c:03:29:b9:fb:26:43:c4:ae: e7:fd:d1:4b:15:05:58:84:47:7e:ab:44:a9:34:57: bc:f2:d1:47:8e:9b:16:b0:ae:a7:b2:cd:6e:98:e6: d2:f7:95:bf:1a:ac:d0:ad:97:2d:90:d3:f0:84:d3: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4A:2F:A5:74:5C:60:B6:7D:D2:4A:38:DF:7B:37:42:45:B0:28:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c568d8ba-2546-327e-abf1-083691caf276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0d:a6:c1:68:6d:5a:26:c4:eb:ea:1a:90:20:47:9a:5c:6f: 66:a5:e3:d1:b1:1a:6a:f4:cc:e8:8d:1c:07:c0:05:31:93:13: ee:2c:6f:e2:4b:c5:db:ed:1c:5c:39:3e:98:94:9f:9d:2c:f8: 68:1f:b3:77:3a:42:15:de:64:51:0f:53:2e:8a:f5:31:c8:16: a7:01:a3:b4:d3:74:8b:2c:6c:0f:55:8d:85:a2:ee:d3:9a:21: 2c:45:e5:02:5b:4d:9d:06:74:b9:2f:92:0e:9e:26:12:7e:08: 84:81:84:9e:e0:ad:a0:ef:b8:be:f4:aa:ae:a8:0e:69:aa:7c: a4:bd:1c:03:9b:24:2f:7a:2a:9e:eb:88:b7:62:92:a9:f9:a6: 57:62:03:57:d2:10:c9:fb:16:c6:79:6d:f5:36:58:80:da:a0: bf:f8:a7:fa:67:32:70:b9:7c:a4:7e:e5:74:b8:50:db:95:da: e9:65:d5:14:0b:2e:a9:5a:ba:bf:a9:82:a7:9a:92:79:28:41: 2a:b0:64:8b:6d:66:90:51:f3:99:fc:0c:51:86:c4:f3:7a:e5: a4:46:e1:e5:86:b4:3d:83:3c:d3:90:8f:4e:29:5d:83:b4:39: 75:b9:3f:62:5a:e8:62:72:ba:a9:82:83:a9:03:c2:58:35:3e: f5:9f:f4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JAbJ/RlPfNZaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MjgxOTMyZTgtNjk1Ny00OGI0LTg1MDMtMGIxODU2NjYwOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib81ASDR514n/2eCc3EQKuPnVX0zbSmjP/lX BCATenLVEWfYwf9f8vFh0G/INC13pUJnZ5zI6OXTywLytr79vkvoPEsz6a3ZWg6o 3VMIBvKHhwWtVegCnY09QIBrEhOHyFA72cTtpo79mQDBZ/KP7Tnh5nv0KJWIwItO lZRgtvHMuFp/fqDl5LXxEj7+jn7LsERHkbHyq4roftVVG9JN/cQpSUkAJao8gEh0 N3HpS2IXb/Vp5wYW8ecQOjo4RBiOAa6JYyp2uW08Aym5+yZDxK7n/dFLFQVYhEd+ q0SpNFe88tFHjpsWsK6nss1umObS95W/GqzQrZctkNPwhNOqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZKL6V0XGC2fdJKON97N0JFsCh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU2OGQ4YmEtMjU0Ni0z MjdlLWFiZjEtMDgzNjkxY2FmMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUNpsFobVomxOvqGpAgR5pcb2al49GxGmr0zOiNHAfABTGTE+4sb+JL xdvtHFw5PpiUn50s+Ggfs3c6QhXeZFEPUy6K9THIFqcBo7TTdIssbA9VjYWi7tOa ISxF5QJbTZ0GdLkvkg6eJhJ+CISBhJ7graDvuL70qq6oDmmqfKS9HAObJC96Kp7r iLdikqn5pldiA1fSEMn7FsZ5bfU2WIDaoL/4p/pnMnC5fKR+5XS4UNuV2ull1RQL Lqlaur+pgqeaknkoQSqwZIttZpBR85n8DFGGxPN65aRG4eWGtD2DPNOQj04pXYO0 OXW5P2Ja6GJyuqmCg6kDwlg1PvWf9BQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:59 2025 by rpki-client