$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa File: 653bd028-0607-38ae-a733-d6a6d1c52cd2.roa (raw, json) Hash identifier: L/s9jj+BI/Mb/u746VNMvE7pBAPtJj+bK0jOp8yL3gg= Subject key identifier: 0B:52:80:E7:8D:2A:07:F7:26:BD:87:68:B7:89:5D:4C:6D:9D:BC:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF7117A0D0B9EA076E8840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 23.203.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:71:17:a0:d0:b9:ea:07:6e:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=f793d19d-6007-4559-9567-a0b4c5753d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:73:dd:9d:d8:64:98:f1:86:16:29:9f:97: fd:a5:6f:b2:3f:e0:80:12:ed:b2:7b:77:78:c1:03: 51:7a:4a:6d:1f:0d:b1:a7:c7:0b:f7:17:b4:04:c5: e2:e3:14:5c:37:f6:8a:98:b9:2f:e2:d9:cb:c0:09: 90:6c:2b:9b:e0:05:2b:d0:33:47:3c:31:a2:db:48: e5:a6:f0:c7:d2:8a:1c:44:84:2d:01:a9:d0:c0:85: 31:6a:a7:34:1f:ff:e2:4c:4d:1c:5e:8f:a7:61:eb: b5:ec:87:ff:cd:fd:ef:21:15:6f:ab:09:65:6d:fb: a0:bf:f1:a9:53:b6:51:25:84:66:d7:c1:11:8a:9f: 74:4a:0a:a4:85:74:59:58:80:c3:03:12:4f:14:08: 73:03:16:7e:32:02:02:3e:bf:42:c5:70:0d:54:50: 97:59:0f:26:af:78:83:47:5e:c3:55:04:4f:e2:ec: 99:fa:02:2f:bf:01:ab:55:46:d1:e0:15:14:08:91: 6c:eb:5f:c2:fe:65:af:f7:50:81:bc:fc:0c:34:4d: 86:fc:5d:ca:f1:67:9e:4b:e1:01:d1:cc:76:9f:2b: eb:9d:0c:9c:f0:6d:06:12:60:50:9f:b6:96:5f:5f: 96:96:1a:a2:65:3e:e0:b7:35:9f:7a:5e:87:c7:27: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:52:80:E7:8D:2A:07:F7:26:BD:87:68:B7:89:5D:4C:6D:9D:BC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:63:dd:ae:b9:50:5d:2c:b6:2d:9b:44:b7:40:bf:9d:5b:79: 00:f2:09:78:03:f0:54:c2:0e:3f:0b:44:09:2d:f9:6d:16:06: cc:20:86:8d:b4:a7:25:02:5d:7a:de:b6:e1:cf:dc:9f:5b:50: 9c:bf:3d:f7:4f:b1:40:be:70:56:a5:f1:56:a7:09:a7:a0:01: d3:12:2b:25:1c:8e:d2:48:3f:cc:fb:4a:cd:a7:d5:38:f7:6b: 68:59:cb:7c:ad:c6:df:c0:f4:02:87:2e:32:e8:91:8c:7f:e9: 03:1f:a1:f7:77:92:5c:35:49:1e:ee:f3:87:e7:3b:6b:1b:b9: 81:30:72:a0:9f:39:f1:39:f5:06:24:eb:62:20:5e:13:58:6c: a5:9e:fc:4e:96:e1:39:4f:de:70:04:bc:b2:1f:86:d2:d3:02: 02:d0:a5:dd:21:d9:52:93:5a:c9:77:e6:10:2e:4a:f0:a0:38: 00:ae:82:fe:f2:57:94:3d:d5:32:3c:9c:67:48:18:af:60:0f: ce:fd:da:cd:39:69:b1:2d:21:3a:2c:7f:a9:d5:6f:ae:e2:1f: c2:f4:56:a3:0d:0a:5c:e9:17:ba:0b:43:59:86:b7:bc:a8:22: 4b:84:fc:fc:25:e0:a3:17:86:1b:9b:2b:2a:8f:01:dc:8f:da: 61:91:44:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz3EXoNC56gduiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Zjc5M2QxOWQtNjAwNy00NTU5LTk1NjctYTBiNGM1NzUzZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPdz3Z3YZJjxhhYpn5f9pW+yP+CAEu2ye3d4 wQNRekptHw2xp8cL9xe0BMXi4xRcN/aKmLkv4tnLwAmQbCub4AUr0DNHPDGi20jl pvDH0oocRIQtAanQwIUxaqc0H//iTE0cXo+nYeu17If/zf3vIRVvqwllbfugv/Gp U7ZRJYRm18ERip90SgqkhXRZWIDDAxJPFAhzAxZ+MgICPr9CxXANVFCXWQ8mr3iD R17DVQRP4uyZ+gIvvwGrVUbR4BUUCJFs61/C/mWv91CBvPwMNE2G/F3K8WeeS+EB 0cx2nyvrnQyc8G0GEmBQn7aWX1+WlhqiZT7gtzWfel6Hxye/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtSgOeNKgf3Jr2HaLeJXUxtnbzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUzYmQwMjgtMDYwNy0z OGFlLWE3MzMtZDZhNmQxYzUyY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8unMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNj3a65UF0sti2bRLdAv51beQDyCXgD8FTCDj8LRAkt+W0WBswgho20 pyUCXXretuHP3J9bUJy/PfdPsUC+cFal8VanCaegAdMSKyUcjtJIP8z7Ss2n1Tj3 a2hZy3ytxt/A9AKHLjLokYx/6QMfofd3klw1SR7u84fnO2sbuYEwcqCfOfE59QYk 62IgXhNYbKWe/E6W4TlP3nAEvLIfhtLTAgLQpd0h2VKTWsl35hAuSvCgOACugv7y V5Q91TI8nGdIGK9gD8792s05abEtITosf6nVb67iH8L0VqMNClzpF7oLQ1mGt7yo IkuE/Pwl4KMXhhubKyqPAdyP2mGRRH0= -----END CERTIFICATE-----Generated at Sat May 10 04:40:05 2025 by rpki-client