$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f308965b-3330-3e97-9c45-84b4760bb918.roa File: f308965b-3330-3e97-9c45-84b4760bb918.roa (raw, json) Hash identifier: /KD0Q65qRxi13hxmFLaJaU0iW3ec+e5X5U6LICa5Gh4= Subject key identifier: AA:87:D5:83:EC:66:92:60:7B:8D:E6:87:42:26:70:F1:FE:D4:0C:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4A00DB9851675015EDF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f308965b-3330-3e97-9c45-84b4760bb918.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.213.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:a0:0d:b9:85:16:75:01:5e:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=da2ebd86-04ea-4c03-b6eb-aad9f7f51888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:41:5c:3e:50:cb:fd:49:81:3b:e1:4d:91:86: 20:89:fc:49:aa:95:a5:82:94:0b:fc:5b:88:af:30: e5:e4:02:3c:37:48:4a:aa:68:ff:2d:02:75:8a:b9: 67:9c:d4:18:99:bf:ae:4b:8b:a8:18:68:47:10:cc: 1d:4f:ed:91:69:99:ed:b0:c3:e6:f9:60:3b:97:a6: bd:3e:18:1a:18:7e:08:86:f7:8f:16:00:c4:a6:02: f2:e7:ad:70:8f:d4:ec:54:3a:d4:fb:82:2b:92:c5: b1:f8:92:3a:ac:17:81:06:fa:34:8b:70:d8:34:07: 16:7c:67:8c:c5:d7:e5:eb:8f:45:f1:54:05:eb:4f: 1b:c2:7e:e6:51:0f:44:36:1f:6e:e7:a6:b0:98:e9: 16:ba:d3:e5:53:f9:1f:03:7a:bf:cd:f4:b0:62:fa: 86:30:5c:0b:1d:73:e8:1c:db:18:40:23:41:4c:ee: 9d:68:6b:c3:9b:61:ca:7f:4f:4d:e1:4a:a7:0a:8c: 91:9f:93:59:31:59:39:35:81:20:b9:52:dd:be:54: 66:02:e0:54:4e:81:14:b6:92:f6:57:9f:5c:9c:dc: 99:b9:61:e3:a0:d7:d9:a3:63:98:62:7d:11:d9:64: 1e:71:8c:22:ac:71:cd:59:71:57:39:5e:32:fb:27: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:87:D5:83:EC:66:92:60:7B:8D:E6:87:42:26:70:F1:FE:D4:0C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f308965b-3330-3e97-9c45-84b4760bb918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e9:78:29:98:fc:c0:44:1d:ee:6b:a2:d5:ca:ca:91:bd:98: ce:62:a8:f2:86:9b:5a:02:79:ad:db:f5:ad:d3:0f:06:95:29: 4f:da:ed:b2:ac:54:2e:c5:62:12:51:ce:4b:92:86:e6:9b:32: cd:23:94:f6:60:f7:9d:50:2c:1f:b8:12:4f:7f:0c:fb:5f:db: f9:f9:c9:1a:4d:cc:95:b4:d8:13:10:f2:1a:67:93:c8:65:f9: 4f:83:8f:67:37:72:44:f5:73:a9:65:bb:ac:07:b1:c2:4c:76: b2:dc:23:d9:e0:f0:d4:18:7d:0c:2a:8f:38:ba:b2:e5:21:a6: 1f:97:e2:22:9f:4e:be:36:8b:98:aa:60:36:76:6a:0a:e9:8b: df:d8:6c:ec:40:d4:34:a1:18:d3:d6:85:0c:2d:fd:43:69:10: 8b:23:4f:2c:cf:3b:f3:01:53:dc:71:f7:25:6d:97:bf:4d:9d: 21:81:76:af:9b:db:fd:9d:74:fc:8b:80:10:d7:7b:14:59:8f: f2:cf:80:cb:fe:59:09:96:7b:a1:1e:6e:ee:6d:fa:99:dc:c0: cc:65:38:63:ae:0b:1b:9f:3a:e1:b8:6e:35:3b:0d:6f:a1:52: 3c:c8:76:11:b2:1e:59:f3:5f:53:88:49:75:38:38:ed:86:50: f5:7b:4a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9KANuYUWdQFe3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGEyZWJkODYtMDRlYS00YzAzLWI2ZWItYWFkOWY3ZjUxODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEFcPlDL/UmBO+FNkYYgifxJqpWlgpQL/FuI rzDl5AI8N0hKqmj/LQJ1irlnnNQYmb+uS4uoGGhHEMwdT+2RaZntsMPm+WA7l6a9 PhgaGH4IhvePFgDEpgLy561wj9TsVDrU+4IrksWx+JI6rBeBBvo0i3DYNAcWfGeM xdfl649F8VQF608bwn7mUQ9ENh9u56awmOkWutPlU/kfA3q/zfSwYvqGMFwLHXPo HNsYQCNBTO6daGvDm2HKf09N4UqnCoyRn5NZMVk5NYEguVLdvlRmAuBUToEUtpL2 V59cnNyZuWHjoNfZo2OYYn0R2WQecYwirHHNWXFXOV4y+ycJLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqH1YPsZpJge43mh0ImcPH+1Aw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjMwODk2NWItMzMzMC0z ZTk3LTljNDUtODRiNDc2MGJiOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvpeCmY/MBEHe5rotXKypG9mM5iqPKGm1oCea3b9a3TDwaVKU/a7bKs VC7FYhJRzkuShuabMs0jlPZg951QLB+4Ek9/DPtf2/n5yRpNzJW02BMQ8hpnk8hl +U+Dj2c3ckT1c6llu6wHscJMdrLcI9ng8NQYfQwqjzi6suUhph+X4iKfTr42i5iq YDZ2agrpi9/YbOxA1DShGNPWhQwt/UNpEIsjTyzPO/MBU9xx9yVtl79NnSGBdq+b 2/2ddPyLgBDXexRZj/LPgMv+WQmWe6Eebu5t+pncwMxlOGOuCxufOuG4bjU7DW+h UjzIdhGyHlnzX1OISXU4OO2GUPV7Spo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:16 2025 by rpki-client