$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b966b3-ce17-3297-baec-4146b468227a.roa File: 33b966b3-ce17-3297-baec-4146b468227a.roa (raw, json) Hash identifier: nLGBtwjekwM/kPa3P3SCmTRh36bCH8xlLeVjFgxFZgQ= Subject key identifier: 28:A8:65:D3:B7:E6:15:95:24:DF:AC:84:4B:77:56:57:63:A2:19:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A4B9FD0436629E2F2D4151C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b966b3-ce17-3297-baec-4146b468227a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 16625 IP address blocks: 23.194.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:fd:04:36:62:9e:2f:2d:41:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aa9774f5-9ae7-4a0f-8bdf-19f6a518e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:4d:fb:36:e1:2b:12:2f:12:fb:5c:64:98: 7d:6d:28:00:d6:e3:d3:c1:40:29:8c:11:22:5c:82: 3d:2f:ee:71:e3:fa:13:37:55:ae:0b:50:6a:5b:5b: e7:b1:02:b3:ab:15:3c:76:da:fa:e7:c8:38:fd:c7: e4:5c:ac:75:4c:48:4f:52:c8:0c:ba:8b:f8:d3:ea: c4:2d:fa:48:b5:6b:d1:bc:11:68:32:59:02:f1:4f: 4e:ba:c9:75:39:9b:a6:27:28:62:0f:89:1f:f1:a2: ae:6d:5f:5f:4a:31:e0:7a:78:3b:5e:0b:56:c4:f6: b8:e3:0c:e1:a8:f8:d0:ae:84:83:5d:08:a6:a0:42: e3:b3:28:8e:ff:ed:84:25:ae:73:ea:f3:3d:3e:ff: 08:4e:3b:ac:fa:c5:56:e5:8b:9b:ba:98:ae:0d:4f: 84:25:09:f5:65:8e:76:7a:8f:74:1c:b7:9a:0e:58: 75:32:0b:6b:35:57:3f:13:da:ec:b9:76:35:f0:0c: b4:2c:c4:51:30:bf:ec:be:4b:c3:9c:2c:bd:c6:6b: a7:5d:94:e2:7e:b8:b6:b8:a1:21:bd:6a:8d:0e:0f: 25:dc:5c:91:dd:3d:66:64:17:10:7a:19:5b:94:36: a6:8f:e1:2e:82:02:15:8d:bc:ae:ca:82:c1:af:a1: 6d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:65:D3:B7:E6:15:95:24:DF:AC:84:4B:77:56:57:63:A2:19:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b966b3-ce17-3297-baec-4146b468227a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e8:20:14:8b:b1:6c:7d:45:6a:c6:e7:80:d5:6f:00:4a:aa: e1:57:3f:ef:bc:fd:e4:61:c7:2a:d1:4c:26:2d:58:28:ca:a1: b1:22:9d:af:7d:f6:3d:8d:76:97:78:22:c6:0c:2d:5a:0b:84: b8:4d:a2:a5:4f:b2:51:6e:fe:57:e5:89:fd:43:c2:8b:ca:54: 4f:da:54:25:7e:c9:cc:64:c8:ee:76:cf:df:6a:94:6a:84:48: ea:e5:af:21:d5:96:56:3d:0d:89:50:60:e6:3a:1d:1d:68:fa: 85:94:ec:25:03:23:c0:d3:30:32:7a:55:10:ad:2a:e4:3c:8a: 41:43:39:f6:50:03:60:ef:c5:d7:f3:3b:e2:f6:77:58:65:4c: 88:8d:a8:2a:a9:e7:a7:7b:9a:ee:3d:9d:78:f5:5c:37:61:a4: 08:53:06:64:21:ef:09:f3:69:0a:8b:76:33:8c:39:33:e0:39: d4:2a:39:cc:5a:e8:3a:b6:7c:e4:dd:68:94:58:6b:52:8d:1a: d1:60:e5:cb:0e:d1:2e:bb:e7:46:66:b5:60:ac:51:e7:fb:b1: 0c:ad:ab:59:0c:79:8d:7b:59:b2:c0:fd:03:58:ca:28:58:40: 8c:fb:1f:4d:a8:40:6d:07:4f:f9:da:3a:30:0c:76:9c:18:0b: 4c:94:34:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf0ENmKeLy1BUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWE5Nzc0ZjUtOWFlNy00YTBmLThiZGYtMTlmNmE1MThlODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqRN+zbhKxIvEvtcZJh9bSgA1uPTwUApjBEi XII9L+5x4/oTN1WuC1BqW1vnsQKzqxU8dtr658g4/cfkXKx1TEhPUsgMuov40+rE LfpItWvRvBFoMlkC8U9Ousl1OZumJyhiD4kf8aKubV9fSjHgeng7XgtWxPa44wzh qPjQroSDXQimoELjsyiO/+2EJa5z6vM9Pv8ITjus+sVW5YubupiuDU+EJQn1ZY52 eo90HLeaDlh1MgtrNVc/E9rsuXY18Ay0LMRRML/svkvDnCy9xmunXZTifri2uKEh vWqNDg8l3FyR3T1mZBcQehlblDamj+EuggIVjbyuyoLBr6FtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCioZdO35hWVJN+shEt3VldjohnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNiOTY2YjMtY2UxNy0z Mjk3LWJhZWMtNDE0NmI0NjgyMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8K4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPoIBSLsWx9RWrG54DVbwBKquFXP++8/eRhxyrRTCYtWCjKobEina99 9j2Ndpd4IsYMLVoLhLhNoqVPslFu/lflif1DwovKVE/aVCV+ycxkyO52z99qlGqE SOrlryHVllY9DYlQYOY6HR1o+oWU7CUDI8DTMDJ6VRCtKuQ8ikFDOfZQA2Dvxdfz O+L2d1hlTIiNqCqp56d7mu49nXj1XDdhpAhTBmQh7wnzaQqLdjOMOTPgOdQqOcxa 6Dq2fOTdaJRYa1KNGtFg5csO0S6750ZmtWCsUef7sQytq1kMeY17WbLA/QNYyihY QIz7H02oQG0HT/naOjAMdpwYC0yUNIw= -----END CERTIFICATE-----Generated at Sun May 11 04:25:40 2025 by rpki-client