$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa File: 125f277d-d6b9-30a1-bbee-676052b265b0.roa (raw, json) Hash identifier: 8gI6vbKx4oqTUP5lLPe4yfeuxMCxEqE8OVxBkMJYh+k= Subject key identifier: 4C:AC:E2:8B:0A:D2:A2:F7:69:58:DD:90:08:7F:42:73:E6:5A:E7:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EC880D2683157B782A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.219.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:ec:88:0d:26:83:15:7b:78:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=cc58554f-af8b-4c31-b903-f100d13d32bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:50:60:20:09:b8:36:fc:c9:40:23:03:a1: 2a:85:5c:a7:f1:8e:82:47:42:ba:34:3a:91:94:af: b6:28:cd:8f:35:4f:ad:1e:01:46:74:35:b8:70:d3: 70:2e:55:ee:0b:6d:d6:53:a6:3c:01:19:f3:8a:81: 38:e8:ba:85:ec:d9:99:3c:8c:78:10:d3:46:cb:f4: d7:99:40:7a:e9:b4:06:2e:bf:fb:31:2e:29:61:4c: 76:8e:45:a2:e7:1e:49:65:eb:bd:03:2d:b9:8e:c1: 47:b3:b5:98:86:fd:8e:18:19:5f:30:7e:09:70:b6: b3:1a:a5:0e:54:8b:48:2a:36:bd:1f:9c:60:16:84: 65:ba:55:dc:49:35:5c:3b:8a:8c:63:8b:ad:38:1d: 4d:69:f5:8e:15:e2:42:e4:c2:2d:b3:a1:4e:7b:04: 27:8e:24:0d:4e:36:c1:b0:e0:13:f2:f4:16:39:f9: 08:8a:4f:8f:5f:4e:66:dc:7c:39:88:0b:cc:2f:51: 3c:ab:df:4d:a4:54:58:b6:ba:cc:0d:10:58:5b:2b: f0:9e:64:42:54:ac:59:86:64:f1:4a:3e:e4:9c:cd: 9f:d1:97:ce:6f:5b:19:51:a0:ec:fa:55:8a:62:fc: df:fd:be:8c:b4:21:90:15:1c:d5:d5:3e:b9:8f:d6: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AC:E2:8B:0A:D2:A2:F7:69:58:DD:90:08:7F:42:73:E6:5A:E7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4e:74:bf:ba:53:d4:a4:a0:f6:91:f3:aa:d4:aa:9a:73:61: c1:4e:45:da:07:a6:5d:8f:4b:26:8c:a8:f2:67:22:ae:78:4e: 35:3a:47:79:f7:fc:46:3d:3a:8b:f3:74:b3:a9:37:6a:40:b4: 7a:fd:a9:78:e1:e2:27:16:ba:3c:f8:63:6e:6e:4b:02:57:bc: eb:7e:1f:61:d3:6e:e3:4b:4b:7b:33:5d:92:ee:a1:11:e0:59: 21:6b:3d:d5:22:56:d3:9c:13:43:12:40:fc:6e:4a:14:b7:28: d7:20:eb:23:f4:d0:ee:00:59:17:da:84:82:a8:b4:8e:c1:61: ac:fc:1d:b3:63:2d:50:44:b7:6c:1c:f3:af:24:e4:04:0f:f9: cc:be:be:ef:82:b7:aa:11:13:6c:1a:af:1e:4d:ba:0c:d3:ab: ff:5f:3a:0c:f5:01:68:95:98:66:ae:8b:f9:3a:e9:24:1c:11: db:6d:fb:8b:65:c1:a5:8e:8b:14:80:ba:ef:14:d7:77:76:65: 60:29:4b:31:b0:91:7b:b8:92:28:2c:e6:0f:a1:2e:1e:ee:60: 8c:8c:47:56:f3:04:05:e2:10:f2:eb:5b:a1:61:d0:46:1e:f5: 88:4c:5f:73:8f:dd:31:d1:cf:85:ae:e1:2a:0a:e4:0e:e5:b8: 97:3b:31:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eyIDSaDFXt4KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk Y2M1ODU1NGYtYWY4Yi00YzMxLWI5MDMtZjEwMGQxM2QzMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX9QYCAJuDb8yUAjA6EqhVyn8Y6CR0K6NDqR lK+2KM2PNU+tHgFGdDW4cNNwLlXuC23WU6Y8ARnzioE46LqF7NmZPIx4ENNGy/TX mUB66bQGLr/7MS4pYUx2jkWi5x5JZeu9Ay25jsFHs7WYhv2OGBlfMH4JcLazGqUO VItIKja9H5xgFoRlulXcSTVcO4qMY4utOB1NafWOFeJC5MIts6FOewQnjiQNTjbB sOAT8vQWOfkIik+PX05m3Hw5iAvML1E8q99NpFRYtrrMDRBYWyvwnmRCVKxZhmTx Sj7knM2f0ZfOb1sZUaDs+lWKYvzf/b6MtCGQFRzV1T65j9bopwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEys4osK0qL3aVjdkAh/QnPmWudwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI1ZjI3N2QtZDZiOS0z MGExLWJiZWUtNjc2MDUyYjI2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9uYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJOdL+6U9SkoPaR86rUqppzYcFORdoHpl2PSyaMqPJnIq54TjU6R3n3 /EY9OovzdLOpN2pAtHr9qXjh4icWujz4Y25uSwJXvOt+H2HTbuNLS3szXZLuoRHg WSFrPdUiVtOcE0MSQPxuShS3KNcg6yP00O4AWRfahIKotI7BYaz8HbNjLVBEt2wc 868k5AQP+cy+vu+Ct6oRE2warx5NugzTq/9fOgz1AWiVmGaui/k66SQcEdtt+4tl waWOixSAuu8U13d2ZWApSzGwkXu4kigs5g+hLh7uYIyMR1bzBAXiEPLrW6Fh0EYe 9YhMX3OP3THRz4Wu4SoK5A7luJc7Mbk= -----END CERTIFICATE-----Generated at Tue May 6 01:33:20 2025 by rpki-client