$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2db8d6-fbae-3d2c-9775-6c7bfd3a9fc2.roa File: 5c2db8d6-fbae-3d2c-9775-6c7bfd3a9fc2.roa (raw, json) Hash identifier: nxADG7vupYrqSBeRcgY8IOUeRc0uxDc3lnIW0rdtmmE= Subject key identifier: 54:48:D0:7E:46:B6:FF:F4:F7:1A:5F:FD:1E:8E:DD:05:E0:F9:62:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584986047675E61F35F62CED4DF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2db8d6-fbae-3d2c-9775-6c7bfd3a9fc2.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.199.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:76:75:e6:1f:35:f6:2c:ed:4d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=5cd430a4-d31c-4316-a292-f90be4f72d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2f:f5:43:8a:8b:1b:b6:79:a9:68:f7:7a:81: 00:24:f7:ba:86:f6:28:d9:d9:43:13:28:b7:1b:18: 34:96:2b:f7:ce:7d:60:70:f4:20:30:7c:c1:eb:84: 72:e6:aa:a8:0a:a4:50:61:bd:71:dc:f0:8d:0b:34: d4:e2:3e:b4:ef:d4:bd:44:b2:33:e0:40:26:7a:6a: 5b:a0:7b:7d:bb:cb:e2:bb:61:b2:9c:af:93:db:7c: fe:bf:d2:82:2b:c7:ef:e1:d6:cc:c4:2a:ae:fd:1f: c7:87:dc:24:65:4a:f3:79:92:75:aa:58:21:ed:de: 64:63:04:a5:a3:bc:c0:7e:0a:7d:d9:3a:d3:42:be: 92:3a:0d:47:ea:8d:b7:3d:9c:a9:ae:47:ef:85:68: a4:d0:bc:a2:d8:58:bc:90:95:25:7b:7e:6d:c9:a6: ec:c7:f0:90:a4:fd:8d:ab:e9:5d:11:c2:03:e9:d6: b7:f2:a5:e3:97:19:04:16:d7:10:27:37:31:a3:3c: 6c:86:03:7e:09:b0:e1:02:49:7a:e9:2a:9d:5e:18: 2a:0a:1c:5b:bd:93:90:2a:a6:f0:9c:43:48:1b:27: ce:3f:79:cf:0f:a9:f4:8b:0b:b1:0e:e3:29:56:03: 67:7e:5c:e5:00:ba:89:27:93:cc:db:5b:e6:c5:d4: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:48:D0:7E:46:B6:FF:F4:F7:1A:5F:FD:1E:8E:DD:05:E0:F9:62:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2db8d6-fbae-3d2c-9775-6c7bfd3a9fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:02:de:87:ea:38:47:d2:00:f6:ba:95:d7:e9:3d:6a:a3:57: e8:7e:0c:f9:21:61:e0:1a:e2:58:e9:39:63:bc:70:61:26:aa: 72:f9:d4:e3:f0:08:b1:29:94:e1:8c:55:e5:c9:38:d1:2a:80: 95:30:ab:84:9d:27:32:ba:32:db:05:5c:06:3f:e0:60:60:bc: 2f:c7:68:35:41:bb:61:d2:95:3d:cd:e0:99:ee:bb:6b:ee:75: 58:7f:0d:20:2c:5b:f1:df:0a:f7:ea:c6:a1:ae:26:8c:0d:74: 6b:7d:ee:71:fb:af:6c:22:8f:55:6b:ba:bc:b3:17:dd:ca:bb: 14:f4:d6:76:bd:3a:d8:4a:21:60:05:69:1a:f5:0c:99:f1:94: b8:f0:19:3d:f7:a0:f3:4f:cc:86:e9:eb:12:76:05:94:2e:87: ee:dc:c5:60:7d:f3:72:b3:3f:2c:c2:22:25:fc:b3:b1:4b:45: 49:41:2f:c4:6d:7d:ea:6c:de:05:0b:98:85:e7:d3:75:47:00: 5a:fe:6e:29:25:09:13:9d:cf:c8:68:6d:2e:22:03:3b:7a:30: a0:d3:78:92:8d:e6:13:26:5d:25:c0:9d:a1:9c:c9:07:f3:9f: 01:6a:a1:e2:4a:68:3d:d6:24:4c:1b:8d:b7:1d:38:b3:d1:89: 56:0f:a7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHZ15h819iztTfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk NWNkNDMwYTQtZDMxYy00MzE2LWEyOTItZjkwYmU0ZjcyZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni/1Q4qLG7Z5qWj3eoEAJPe6hvYo2dlDEyi3 Gxg0liv3zn1gcPQgMHzB64Ry5qqoCqRQYb1x3PCNCzTU4j6079S9RLIz4EAmempb oHt9u8viu2GynK+T23z+v9KCK8fv4dbMxCqu/R/Hh9wkZUrzeZJ1qlgh7d5kYwSl o7zAfgp92TrTQr6SOg1H6o23PZyprkfvhWik0Lyi2Fi8kJUle35tyabsx/CQpP2N q+ldEcID6da38qXjlxkEFtcQJzcxozxshgN+CbDhAkl66SqdXhgqChxbvZOQKqbw nENIGyfOP3nPD6n0iwuxDuMpVgNnflzlALqJJ5PM21vmxdTfZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRI0H5Gtv/09xpf/R6O3QXg+WJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWMyZGI4ZDYtZmJhZS0z ZDJjLTk3NzUtNmM3YmZkM2E5ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8f+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQC3ofqOEfSAPa6ldfpPWqjV+h+DPkhYeAa4ljpOWO8cGEmqnL51OPw CLEplOGMVeXJONEqgJUwq4SdJzK6MtsFXAY/4GBgvC/HaDVBu2HSlT3N4Jnuu2vu dVh/DSAsW/HfCvfqxqGuJowNdGt97nH7r2wij1VruryzF93KuxT01na9OthKIWAF aRr1DJnxlLjwGT33oPNPzIbp6xJ2BZQuh+7cxWB983KzPyzCIiX8s7FLRUlBL8Rt feps3gULmIXn03VHAFr+biklCROdz8hobS4iAzt6MKDTeJKN5hMmXSXAnaGcyQfz nwFqoeJKaD3WJEwbjbcdOLPRiVYPp3c= -----END CERTIFICATE-----Generated at Thu May 8 04:41:34 2025 by rpki-client