$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb1957fc-cc25-3245-84bf-8b9b55201737.roa File: fb1957fc-cc25-3245-84bf-8b9b55201737.roa (raw, json) Hash identifier: KvmnqVgKx8Taf1MR255s+xw9lo02YiyYpWuzXtEMCWU= Subject key identifier: 72:B4:AA:B2:9C:D9:78:5F:27:26:A7:32:31:5E:6E:CA:40:91:15:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49A74684FC3FA41DE3100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb1957fc-cc25-3245-84bf-8b9b55201737.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9a:74:68:4f:c3:fa:41:de:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fef2545f-1e4b-42ae-ac6d-a4d7fec502b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:5b:48:03:d6:c9:bc:c2:f6:f9:ac:b3:cb: d4:3d:97:ee:ee:13:b8:24:4a:ce:59:e3:98:34:8d: ee:e8:5d:28:13:8e:47:f3:45:42:26:bc:7d:36:9e: f6:e2:70:85:75:19:d1:5a:a1:4f:49:9e:f1:f4:6b: 7f:12:bc:91:b3:7b:90:ed:5a:12:ad:fe:9a:d3:9c: 41:ab:29:a9:8a:d8:67:34:7e:96:40:ba:62:ce:06: 96:fe:50:0a:da:96:38:04:e7:bf:26:86:63:6a:d6: 06:2b:ba:9e:99:8e:e4:e8:74:72:43:44:3d:cb:a8: f5:69:1d:e2:49:25:73:68:34:80:b1:1a:7b:d2:77: 1a:9e:eb:2d:5c:29:07:a9:e0:30:a4:55:f7:d0:61: bc:56:9b:4e:ce:c4:ad:c9:c0:fb:ba:5a:b1:ab:1a: 37:74:74:c5:83:af:4c:a8:54:cb:aa:44:7f:bf:0e: 1c:71:41:f9:ef:95:f9:ef:7c:08:7a:5c:12:67:bc: 08:33:c9:b3:6f:6f:23:22:90:13:e6:59:77:c6:de: d0:63:d7:81:b6:cc:41:14:cd:7c:bd:a3:f1:b8:85: ea:fe:fe:0c:28:dd:65:70:34:e4:2e:a2:3b:7b:a4: 19:b0:8a:a4:06:08:e2:29:bb:7c:0e:1a:cb:7c:6e: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B4:AA:B2:9C:D9:78:5F:27:26:A7:32:31:5E:6E:CA:40:91:15:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb1957fc-cc25-3245-84bf-8b9b55201737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:80:17:c3:06:29:dc:15:d5:a1:96:aa:26:8f:67:b4:a6:f3: 4f:70:7b:13:14:09:19:a5:a4:7c:d0:3d:99:c4:f3:1b:e5:78: fc:c2:5f:4e:d5:04:3b:af:93:b2:f0:58:f7:34:67:77:57:20: 8d:6c:d0:d4:bb:57:93:86:b9:5c:fd:0b:a3:75:db:0a:48:cb: 0b:bc:1a:91:24:2f:af:6d:ae:ab:3a:0a:0e:ed:80:33:72:ec: 41:dd:32:be:45:89:4e:c4:f5:2a:5c:0f:80:6b:2a:e8:f8:a9: e9:f5:1a:f2:d4:1a:68:04:00:5e:4b:61:1f:cc:6f:e7:b5:c4: 10:9e:f8:bd:99:7a:c6:11:10:21:1f:7a:e0:32:0f:66:49:26: db:6f:e5:88:c9:c4:1b:b4:a5:a7:5f:27:ef:22:55:90:99:d3: 22:ec:17:dd:b3:49:ba:de:11:a3:7c:0e:9e:94:72:ba:1b:84: 53:04:57:75:25:46:fa:cb:5d:18:41:13:06:c5:21:3f:32:7f: ad:82:28:a5:76:fb:99:5b:c3:9c:52:e2:3b:87:f0:42:c5:da: 48:7c:87:bb:23:5f:c1:5a:8f:f2:ca:5f:1a:d5:2e:8b:50:c2: 4c:83:d8:f1:c9:c8:1e:2a:84:d6:0a:a0:ac:85:66:7b:75:4f: 0a:bd:b3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Jp0aE/D+kHeMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmVmMjU0NWYtMWU0Yi00MmFlLWFjNmQtYTRkN2ZlYzUwMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA245bSAPWybzC9vmss8vUPZfu7hO4JErOWeOY NI3u6F0oE45H80VCJrx9Np724nCFdRnRWqFPSZ7x9Gt/EryRs3uQ7VoSrf6a05xB qympithnNH6WQLpizgaW/lAK2pY4BOe/JoZjatYGK7qemY7k6HRyQ0Q9y6j1aR3i SSVzaDSAsRp70ncanustXCkHqeAwpFX30GG8VptOzsStycD7ulqxqxo3dHTFg69M qFTLqkR/vw4ccUH575X573wIelwSZ7wIM8mzb28jIpAT5ll3xt7QY9eBtsxBFM18 vaPxuIXq/v4MKN1lcDTkLqI7e6QZsIqkBgjiKbt8DhrLfG5kfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK0qrKc2XhfJyanMjFebspAkRWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmIxOTU3ZmMtY2MyNS0z MjQ1LTg0YmYtOGI5YjU1MjAxNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOAF8MGKdwV1aGWqiaPZ7Sm809wexMUCRmlpHzQPZnE8xvlePzCX07V BDuvk7LwWPc0Z3dXII1s0NS7V5OGuVz9C6N12wpIywu8GpEkL69trqs6Cg7tgDNy 7EHdMr5FiU7E9SpcD4BrKuj4qen1GvLUGmgEAF5LYR/Mb+e1xBCe+L2ZesYRECEf euAyD2ZJJttv5YjJxBu0padfJ+8iVZCZ0yLsF92zSbreEaN8Dp6UcrobhFMEV3Ul RvrLXRhBEwbFIT8yf62CKKV2+5lbw5xS4juH8ELF2kh8h7sjX8Faj/LKXxrVLotQ wkyD2PHJyB4qhNYKoKyFZnt1Twq9s0k= -----END CERTIFICATE-----Generated at Sat Apr 26 18:10:22 2025 by rpki-client