$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2070844d-f4d8-38a3-a634-c130a2a324bc.roa File: 2070844d-f4d8-38a3-a634-c130a2a324bc.roa (raw, json) Hash identifier: vswszTdiFNRAQTS1YBzFad+a/zkVCoQN0IRLc3HJGtg= Subject key identifier: 64:21:B5:DC:7B:0B:DA:5C:FE:1D:23:02:13:90:1B:B3:D3:0D:52:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF4133D361FB15D80BDA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2070844d-f4d8-38a3-a634-c130a2a324bc.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.216.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:41:33:d3:61:fb:15:d8:0b:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=067a02f5-d894-4846-aee2-bdba41396704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:39:41:3e:d7:49:c8:b7:d2:8a:16:27:80: 69:46:d7:07:7c:b6:b2:44:35:69:3c:26:14:6e:dd: 94:8f:0c:57:55:59:bf:0d:a3:be:95:06:b9:30:53: 06:cd:77:36:de:17:c0:3e:93:88:9c:b2:e6:5c:72: 04:95:80:95:fe:9e:4d:7d:52:0d:11:37:66:b4:dd: cb:b8:90:12:7b:e0:ae:cf:ce:e3:a2:2b:3e:0b:f4: 4b:8e:b7:3d:32:b8:60:d7:95:01:f5:60:99:98:e2: 91:b8:88:8d:6b:0c:48:38:e3:55:dd:9a:6c:63:a1: 42:f9:b5:18:4c:45:99:d9:50:08:51:b2:b6:c9:2b: 8e:78:1d:47:8e:12:4c:72:19:07:a1:17:45:87:4a: 3a:25:6e:8d:31:85:13:a8:62:e6:eb:5e:0f:99:31: 66:b0:08:ee:1d:dd:1d:86:b6:ef:b6:a7:24:c0:d3: a7:0a:d4:af:fe:75:7a:e4:5f:0c:b5:ab:ab:e8:11: ae:85:86:99:0f:77:54:e1:59:81:44:b8:6b:8d:f4: 37:0f:43:58:26:0c:10:0a:2d:20:ce:0d:57:ac:1a: 22:f1:87:a4:d5:ff:97:bf:57:fb:0a:6c:68:3d:e1: d8:8b:91:79:db:7c:6f:f8:51:bd:16:5b:22:a8:34: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:21:B5:DC:7B:0B:DA:5C:FE:1D:23:02:13:90:1B:B3:D3:0D:52:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2070844d-f4d8-38a3-a634-c130a2a324bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d1:04:9b:01:20:68:cb:99:d5:b8:b8:fd:ae:df:04:9a:bc: 8b:81:86:c9:7b:4d:4c:b4:41:6e:bc:b6:5f:6f:8a:7f:df:63: dc:5b:d7:e3:3e:cc:4d:7e:3a:02:fe:f9:7c:a2:e4:4e:f1:0b: 64:10:f0:87:cf:d2:c2:8f:19:5e:17:af:a3:fe:53:91:84:81: 0b:d0:65:48:38:f3:f9:04:40:91:ba:7f:83:89:c9:b7:f5:0d: 13:f9:b4:45:3f:9c:cc:46:6d:ef:7f:eb:06:19:2e:c7:53:96: 41:cc:0c:6a:18:af:9c:15:46:9f:95:00:56:15:ca:b8:86:4a: d7:e9:fa:0b:04:45:e4:4b:03:c9:b2:c0:20:bc:ab:6e:17:a3: f9:15:05:51:03:18:4b:ff:49:ca:53:3b:84:7b:06:ab:38:f4: 33:2d:69:61:48:38:8b:c4:fd:67:f7:a6:51:eb:33:13:99:85: ae:16:8a:f4:3e:90:d4:af:56:80:06:13:12:21:0c:59:d4:02: 9b:17:ab:1c:93:1a:53:f4:f2:b0:bb:c1:9d:07:af:a6:f3:1a: d8:da:76:4a:49:ac:f4:7a:97:20:a0:7f:b1:ff:f8:b2:a8:3f: 26:0e:5f:44:5c:88:ae:64:16:c4:e1:1f:65:28:cc:ac:08:13: 1f:d1:91:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0Ez02H7FdgL2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MDY3YTAyZjUtZDg5NC00ODQ2LWFlZTItYmRiYTQxMzk2NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJA5QT7XSci30ooWJ4BpRtcHfLayRDVpPCYU bt2UjwxXVVm/DaO+lQa5MFMGzXc23hfAPpOInLLmXHIElYCV/p5NfVINETdmtN3L uJASe+Cuz87jois+C/RLjrc9Mrhg15UB9WCZmOKRuIiNawxIOONV3ZpsY6FC+bUY TEWZ2VAIUbK2ySuOeB1HjhJMchkHoRdFh0o6JW6NMYUTqGLm614PmTFmsAjuHd0d hrbvtqckwNOnCtSv/nV65F8Mtaur6BGuhYaZD3dU4VmBRLhrjfQ3D0NYJgwQCi0g zg1XrBoi8Yek1f+Xv1f7CmxoPeHYi5F523xv+FG9FlsiqDThjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQhtdx7C9pc/h0jAhOQG7PTDVL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA3MDg0NGQtZjRkOC0z OGEzLWE2MzQtYzEzMGEyYTMyNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDRBJsBIGjLmdW4uP2u3wSavIuBhsl7TUy0QW68tl9vin/fY9xb1+M+ zE1+OgL++Xyi5E7xC2QQ8IfP0sKPGV4Xr6P+U5GEgQvQZUg48/kEQJG6f4OJybf1 DRP5tEU/nMxGbe9/6wYZLsdTlkHMDGoYr5wVRp+VAFYVyriGStfp+gsEReRLA8my wCC8q24Xo/kVBVEDGEv/ScpTO4R7Bqs49DMtaWFIOIvE/Wf3plHrMxOZha4WivQ+ kNSvVoAGExIhDFnUApsXqxyTGlP08rC7wZ0Hr6bzGtjadkpJrPR6lyCgf7H/+LKo PyYOX0RciK5kFsThH2UozKwIEx/RkQU= -----END CERTIFICATE-----Generated at Mon May 5 09:47:09 2025 by rpki-client