$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5c3318b-daff-3498-a9ce-60ae67838f48.roa File: e5c3318b-daff-3498-a9ce-60ae67838f48.roa (raw, json) Hash identifier: baLBIkLSWpqd99BKxSJ0fa6OfRw8VT3AZHO7XAZG6zY= Subject key identifier: A4:B5:9E:38:8D:36:F5:95:96:C4:E4:FC:90:F4:C1:AA:BC:11:07:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF491DA63390574569BC380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5c3318b-daff-3498-a9ce-60ae67838f48.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.210.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:91:da:63:39:05:74:56:9b:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=77fd8743-9342-4510-80fa-40fb25c8012a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:ea:84:5f:62:34:9f:e1:dd:44:fc:eb:74: 3f:af:8f:1e:00:69:97:2d:67:cb:b5:55:ec:87:f7: a3:64:d7:f3:99:1f:67:f1:70:3b:e9:30:98:06:9b: 9e:a3:6d:68:6b:f7:6c:fa:00:3e:dc:30:55:12:b2: f2:08:3a:4a:65:ef:38:10:5b:6b:d3:1c:ee:a1:4e: 2f:2a:f2:e3:39:dd:21:e1:88:f4:fc:45:95:b7:d4: 48:fb:23:d3:4c:82:d8:7d:d2:55:e9:a7:57:4c:a8: bc:fe:3b:94:31:2b:51:9f:af:d1:e4:74:a1:6d:a1: 1a:83:b2:73:d2:e1:c6:e9:99:a2:1b:b4:1b:8e:66: 87:be:78:07:e6:66:bd:5e:3a:66:ce:41:d3:58:d2: 39:b5:cf:8e:0c:7e:53:4a:64:1d:a1:33:3f:03:31: 69:92:4a:d3:0f:87:ed:71:ee:aa:7f:c6:84:55:f5: a9:58:de:d1:3a:99:b1:0e:b0:ab:ba:dd:3b:36:f0: bc:83:cd:7a:ba:00:ec:50:a9:92:a3:5d:47:13:54: 82:d3:fe:fa:21:e4:2e:da:a9:26:d2:1f:56:b2:d0: f1:5f:ba:dd:70:08:e8:c1:fd:46:04:a5:fc:97:60: 82:9c:20:f8:1c:87:1e:73:64:89:b2:91:00:ef:f3: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:9E:38:8D:36:F5:95:96:C4:E4:FC:90:F4:C1:AA:BC:11:07:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5c3318b-daff-3498-a9ce-60ae67838f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9c:b5:47:ce:cd:47:a2:ce:ad:c4:e3:76:92:99:01:41:e3: 24:4f:9d:b8:59:b8:64:d6:8d:93:b7:dd:d2:f2:4a:2b:93:e4: 8d:86:09:67:94:6c:09:ed:bc:7f:42:4e:e0:9e:06:8a:c6:d3: 85:2c:e4:a1:64:f6:1b:ce:84:70:b8:12:bf:97:be:1c:48:1e: 52:c1:8c:e2:2a:14:33:f9:14:c4:32:91:91:7d:37:37:4e:fa: ed:d1:0d:9a:dc:dc:66:4f:e0:0f:cb:2d:80:8c:e3:66:02:ec: 46:15:7d:c1:18:1e:c3:6b:99:a9:87:19:43:65:ea:c9:3a:8a: 81:60:64:39:ab:e2:4e:0a:13:00:58:7b:ac:2c:9f:4b:3a:10: c0:4d:a4:a1:a2:e9:58:78:a1:48:95:c8:17:6d:74:5a:c4:da: ae:71:f3:af:5d:bc:8d:4a:98:7a:02:a4:6a:dc:99:a4:f8:ea: e2:22:dc:82:d4:72:04:58:dd:b4:cb:30:56:c3:41:04:c5:2a: 2d:05:57:cb:17:4f:6a:32:de:25:60:7a:89:74:b9:1a:dc:07: aa:58:5d:ca:d1:68:09:f7:15:3b:66:1f:93:5e:bb:8c:15:dc: 14:68:56:57:a8:68:b9:9b:54:67:b0:8b:9a:0d:ef:4a:3e:55: ce:3f:2a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JHaYzkFdFabw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NzdmZDg3NDMtOTM0Mi00NTEwLTgwZmEtNDBmYjI1YzgwMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnszqhF9iNJ/h3UT863Q/r48eAGmXLWfLtVXs h/ejZNfzmR9n8XA76TCYBpueo21oa/ds+gA+3DBVErLyCDpKZe84EFtr0xzuoU4v KvLjOd0h4Yj0/EWVt9RI+yPTTILYfdJV6adXTKi8/juUMStRn6/R5HShbaEag7Jz 0uHG6ZmiG7QbjmaHvngH5ma9XjpmzkHTWNI5tc+ODH5TSmQdoTM/AzFpkkrTD4ft ce6qf8aEVfWpWN7ROpmxDrCrut07NvC8g816ugDsUKmSo11HE1SC0/76IeQu2qkm 0h9WstDxX7rdcAjowf1GBKX8l2CCnCD4HIcec2SJspEA7/MwrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS1njiNNvWVlsTk/JD0waq8EQdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTVjMzMxOGItZGFmZi0z NDk4LWE5Y2UtNjBhZTY3ODM4ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9JWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6ctUfOzUeizq3E43aSmQFB4yRPnbhZuGTWjZO33dLySiuT5I2GCWeU bAntvH9CTuCeBorG04Us5KFk9hvOhHC4Er+XvhxIHlLBjOIqFDP5FMQykZF9NzdO +u3RDZrc3GZP4A/LLYCM42YC7EYVfcEYHsNrmamHGUNl6sk6ioFgZDmr4k4KEwBY e6wsn0s6EMBNpKGi6Vh4oUiVyBdtdFrE2q5x869dvI1KmHoCpGrcmaT46uIi3ILU cgRY3bTLMFbDQQTFKi0FV8sXT2oy3iVgeol0uRrcB6pYXcrRaAn3FTtmH5Neu4wV 3BRoVleoaLmbVGewi5oN70o+Vc4/KtQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:36 2025 by rpki-client