$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc8ca71d-e7ff-3a43-be69-c6c31d5cee1f.roa File: dc8ca71d-e7ff-3a43-be69-c6c31d5cee1f.roa (raw, json) Hash identifier: ZbOhD4eV6x0dOcbIm+KVV9C5DC8UPqMwSlKw2ZbwWRY= Subject key identifier: FD:2B:74:54:BF:F5:58:6C:68:B4:B0:36:2A:4D:00:2D:83:34:BB:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497279C1B54109F1AAB5B75200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc8ca71d-e7ff-3a43-be69-c6c31d5cee1f.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.208.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c1:b5:41:09:f1:aa:b5:b7:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=7f5c8ffc-afec-4f5a-86ef-dfb02a83db13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:6f:47:5b:dc:bf:73:03:9b:53:27:cd:14: ad:5b:97:0a:56:7e:a2:ae:1d:42:8b:8d:6c:c9:46: 85:32:7f:1c:c2:3b:2d:bb:4e:da:a4:5e:ff:4c:2a: 53:47:2e:c9:b8:5b:56:4f:3d:53:27:1f:59:43:ee: 0e:2f:31:ce:ab:41:1b:b9:83:c1:8f:83:37:f0:c1: d8:0c:4b:41:d6:25:4f:d3:98:16:72:29:27:2b:b1: 7d:0c:4a:09:c1:96:dc:9d:97:f0:4c:e5:65:68:ad: ae:65:bb:7f:55:4e:b9:4c:1b:7d:1b:4e:45:ed:09: 5d:9d:9d:b2:b0:c3:87:5e:93:a3:b8:ba:7c:76:9e: 7c:b8:01:8f:40:01:60:9f:e8:41:e2:47:95:19:84: e2:50:9a:7f:2e:69:a2:eb:3d:0a:3c:5f:91:da:4e: 03:42:71:21:d4:95:a3:72:90:26:43:28:b8:50:86: fb:ef:8f:99:56:3b:0d:86:17:4b:78:0a:e0:fd:04: 32:67:4d:5e:86:c0:a4:8c:8f:b7:f8:26:97:4b:7b: d9:37:71:9f:e5:de:b3:74:40:37:b0:d6:05:38:c4: d9:91:0d:f1:41:ee:9f:47:e7:36:6b:34:26:85:7e: 98:c0:fd:ed:32:7b:de:a5:43:99:22:12:30:f8:68: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2B:74:54:BF:F5:58:6C:68:B4:B0:36:2A:4D:00:2D:83:34:BB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc8ca71d-e7ff-3a43-be69-c6c31d5cee1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:da:bb:4e:f0:31:70:d5:bc:dd:32:b6:e9:6c:b0:2e:d8:cc: a4:82:98:ab:11:e8:16:60:2c:38:8e:9c:79:4b:97:0c:74:ef: 12:1f:1a:e0:45:11:b6:dc:91:c3:61:f0:3c:0d:07:93:c6:f9: 82:4a:2a:94:57:ef:dc:06:a3:37:4e:57:41:ae:77:52:2e:b1: f1:35:88:fc:39:56:e1:b4:4b:16:4d:1d:9f:d8:65:22:e3:64: be:47:d6:7b:c4:d3:aa:4b:9c:a0:46:bf:50:48:85:cd:88:12: 36:94:24:24:bd:e8:a2:de:2e:50:2c:4e:bd:46:43:8b:36:95: e6:78:5e:9e:ad:3f:65:eb:f7:0a:26:41:8d:da:35:9d:f5:1d: 0a:d4:94:5b:f9:89:30:26:5e:a9:e2:fa:b6:c8:fe:96:a1:5a: 83:8a:da:56:42:83:ef:c4:b6:9f:de:dc:a5:a6:9a:41:22:dc: 76:79:f7:44:5e:f2:cc:3a:1f:ce:32:81:dc:4c:97:80:52:0d: 16:29:f2:1d:55:0a:9e:ae:39:83:62:fe:38:5c:53:1b:39:f3: 94:c2:d9:63:03:fc:b7:7b:21:e6:5a:d4:2f:96:7c:c6:13:7f: 5f:6a:ab:e4:d6:5b:e3:2d:a7:3b:34:ce:93:d0:8b:38:e7:ba: d8:21:47:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecG1QQnxqrW3UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk N2Y1YzhmZmMtYWZlYy00ZjVhLTg2ZWYtZGZiMDJhODNkYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NZvR1vcv3MDm1MnzRStW5cKVn6irh1Ci41s yUaFMn8cwjstu07apF7/TCpTRy7JuFtWTz1TJx9ZQ+4OLzHOq0EbuYPBj4M38MHY DEtB1iVP05gWciknK7F9DEoJwZbcnZfwTOVlaK2uZbt/VU65TBt9G05F7QldnZ2y sMOHXpOjuLp8dp58uAGPQAFgn+hB4keVGYTiUJp/Lmmi6z0KPF+R2k4DQnEh1JWj cpAmQyi4UIb774+ZVjsNhhdLeArg/QQyZ01ehsCkjI+3+CaXS3vZN3Gf5d6zdEA3 sNYFOMTZkQ3xQe6fR+c2azQmhX6YwP3tMnvepUOZIhIw+Gh58wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0rdFS/9VhsaLSwNipNAC2DNLswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGM4Y2E3MWQtZTdmZi0z YTQzLWJlNjktYzZjMzFkNWNlZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7au07wMXDVvN0ytulssC7YzKSCmKsR6BZgLDiOnHlLlwx07xIfGuBF EbbckcNh8DwNB5PG+YJKKpRX79wGozdOV0Gud1IusfE1iPw5VuG0SxZNHZ/YZSLj ZL5H1nvE06pLnKBGv1BIhc2IEjaUJCS96KLeLlAsTr1GQ4s2leZ4Xp6tP2Xr9wom QY3aNZ31HQrUlFv5iTAmXqni+rbI/pahWoOK2lZCg+/Etp/e3KWmmkEi3HZ590Re 8sw6H84ygdxMl4BSDRYp8h1VCp6uOYNi/jhcUxs585TC2WMD/Ld7IeZa1C+WfMYT f19qq+TWW+Mtpzs0zpPQizjnutghRws= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:10 2025 by rpki-client