$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff01b934-071a-3ff0-90cc-0f27218f3423.roa File: ff01b934-071a-3ff0-90cc-0f27218f3423.roa (raw, json) Hash identifier: kaJRKdsyaH+CaFlgDzMFiBl4bDE4PL/3+7NYIYvfKnQ= Subject key identifier: 64:31:41:D6:B4:9F:B3:10:B9:E5:3F:F8:EB:10:D7:79:0F:61:46:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849860474207F6C1B011335F228 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff01b934-071a-3ff0-90cc-0f27218f3423.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.199.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:74:20:7f:6c:1b:01:13:35:f2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=e0999b0d-22b0-4921-a7b2-9c8952f28de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:18:81:ef:fb:76:cf:70:2d:29:c4:37:6b: 08:83:6f:84:c8:3d:18:88:ce:ef:1d:57:42:01:b5: e6:1d:b6:84:0f:ea:e3:81:6b:77:59:3e:cc:78:6f: e8:76:4b:84:01:d0:fb:ca:82:5a:79:60:b3:73:9c: 30:1e:43:a8:50:cb:e8:3f:c5:6c:4d:6e:8d:f7:70: 1a:59:f4:67:0b:ad:1e:4e:04:ac:b6:bc:91:60:01: 25:b5:f8:60:e9:95:25:ef:f6:b8:9c:22:1f:71:b9: ff:1a:8a:21:00:5e:d7:6f:5a:a9:50:cd:61:4c:d9: 03:fc:8b:db:6e:bc:5e:ed:66:21:64:6b:ab:37:ba: a7:5a:8f:71:ef:e0:e6:95:a4:36:47:7a:0c:d2:79: 67:f0:ba:b0:c8:f7:33:73:17:f1:2c:30:59:6a:21: cc:3a:15:ec:f5:77:fa:bc:9e:8b:c3:20:7a:09:93: e6:07:b5:ec:99:08:ec:fb:1f:74:e0:9a:25:6f:19: 9b:54:ba:ae:2e:60:9c:91:7d:bb:0d:1e:80:e8:c8: b1:44:6d:dd:e3:fc:21:12:f2:64:42:1a:33:77:0e: 80:e9:b3:43:e5:e0:72:ff:9e:b0:01:36:68:9b:fe: fe:a9:88:bc:cf:00:c0:a4:3e:3e:67:81:3e:7c:22: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:41:D6:B4:9F:B3:10:B9:E5:3F:F8:EB:10:D7:79:0F:61:46:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff01b934-071a-3ff0-90cc-0f27218f3423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7b:30:fe:71:17:a2:b3:b1:73:e1:49:fa:df:b4:9d:7b:ea: 32:12:75:e7:75:26:91:36:4c:b5:e1:40:ea:bf:94:94:82:ea: 98:c4:4f:e3:ce:0f:6f:55:57:00:64:44:f1:6b:6b:68:41:2e: 42:66:30:dc:23:72:a0:cb:f6:85:dc:f9:2d:80:fd:82:54:39: 4a:a0:6b:8b:3f:7c:85:9e:bc:be:0d:2f:b9:f9:a7:7d:9f:37: f6:98:43:c9:96:3e:b8:1d:63:29:90:bd:d9:87:36:06:3e:fc: c6:2f:28:23:4f:c0:64:d5:57:08:20:a1:05:6c:6d:fb:88:5f: 56:59:ab:5f:87:81:53:08:01:69:c6:0f:31:f4:59:d2:df:3d: e5:02:fd:0d:aa:71:9a:35:35:ca:fb:a7:ac:ab:19:3a:fd:0d: 86:83:1e:0c:87:61:24:6b:28:d3:f3:84:72:60:20:42:65:a4: 38:26:ff:56:a4:37:22:d1:0e:3a:fd:9a:87:99:59:29:a7:e1: 67:99:13:b3:1e:aa:13:19:18:f7:39:90:ed:42:0f:84:ce:fb: 7e:7e:b5:85:b8:ae:11:e3:bb:ad:73:d9:5a:b2:a7:a4:eb:3a: c7:9f:12:58:bb:c3:f9:ec:42:6f:c8:c9:d6:b1:c2:ce:e2:25: 1c:ba:cb:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHQgf2wbARM18igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk ZTA5OTliMGQtMjJiMC00OTIxLWE3YjItOWM4OTUyZjI4ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM0Yge/7ds9wLSnEN2sIg2+EyD0YiM7vHVdC AbXmHbaED+rjgWt3WT7MeG/odkuEAdD7yoJaeWCzc5wwHkOoUMvoP8VsTW6N93Aa WfRnC60eTgSstryRYAEltfhg6ZUl7/a4nCIfcbn/GoohAF7Xb1qpUM1hTNkD/Ivb brxe7WYhZGurN7qnWo9x7+DmlaQ2R3oM0nln8LqwyPczcxfxLDBZaiHMOhXs9Xf6 vJ6LwyB6CZPmB7XsmQjs+x904JolbxmbVLquLmCckX27DR6A6MixRG3d4/whEvJk Qhozdw6A6bND5eBy/56wATZom/7+qYi8zwDApD4+Z4E+fCIa+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQxQda0n7MQueU/+OsQ13kPYUaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmYwMWI5MzQtMDcxYS0z ZmYwLTkwY2MtMGYyNzIxOGYzNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA57MP5xF6KzsXPhSfrftJ176jISded1JpE2TLXhQOq/lJSC6pjET+PO D29VVwBkRPFra2hBLkJmMNwjcqDL9oXc+S2A/YJUOUqga4s/fIWevL4NL7n5p32f N/aYQ8mWPrgdYymQvdmHNgY+/MYvKCNPwGTVVwggoQVsbfuIX1ZZq1+HgVMIAWnG DzH0WdLfPeUC/Q2qcZo1Ncr7p6yrGTr9DYaDHgyHYSRrKNPzhHJgIEJlpDgm/1ak NyLRDjr9moeZWSmn4WeZE7MeqhMZGPc5kO1CD4TO+35+tYW4rhHju61z2Vqyp6Tr OsefEli7w/nsQm/Iydaxws7iJRy6y8A= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:46 2025 by rpki-client