$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa File: 88cf90df-c166-369d-b148-1a3ec55f00c8.roa (raw, json) Hash identifier: KSztYtHOc1rYkYVEnhySN7YeIy2Yk/tCiV/9AB6Uop8= Subject key identifier: A7:6F:85:72:8E:E6:C7:9E:B3:99:F7:C1:53:1C:92:EE:A7:9E:B7:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849ABB4B6ED3EE96DEBA497AC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 23.220.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:b6:ed:3e:e9:6d:eb:a4:97:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=5f921bf8-096c-4539-8fd0-341715b1ae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:92:aa:bd:3d:73:c8:11:75:76:80:58:95: 5d:e3:19:20:7d:6d:fb:b2:b3:12:57:d3:46:0e:e2: b2:5b:98:a8:79:3f:78:11:15:07:68:f6:08:3a:bf: a9:8f:40:0e:9d:cc:23:60:65:20:a8:6c:aa:2e:1e: 6e:61:71:be:83:1e:8f:97:1f:83:f5:81:65:e5:31: 32:b2:23:d1:e2:68:76:be:01:a8:65:5a:cb:43:16: 78:4d:0f:62:fe:24:6d:60:f4:a0:b7:3e:d3:2d:48: 64:08:77:17:56:df:77:35:a7:2c:b9:e0:9a:1c:ae: e3:31:ec:4d:34:20:b8:14:35:d6:60:d0:23:b9:e9: 80:3c:68:0b:a3:21:7a:35:94:cf:a1:eb:32:9e:40: d6:9b:8c:9d:df:fe:74:78:80:67:c4:89:da:0a:1d: a2:95:b0:c3:74:91:fb:b5:7e:db:d1:ac:6c:d4:49: 81:f6:cd:bd:5d:41:08:68:b8:3d:93:44:a7:c7:83: c8:de:83:a6:ed:7d:cb:a4:84:d9:74:9d:0c:e0:87: 25:0d:69:aa:e3:7b:49:2d:8c:15:5e:d6:45:cb:3e: 66:43:a5:d7:d3:ff:b7:ac:24:40:2a:98:8b:19:fc: 59:58:f9:b6:7f:90:4c:f3:45:4f:a9:30:13:75:4f: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:85:72:8E:E6:C7:9E:B3:99:F7:C1:53:1C:92:EE:A7:9E:B7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0f:ee:06:ab:fc:c3:01:13:56:07:e6:ae:9f:47:25:a2:46: 86:23:47:dd:46:37:0a:d1:cd:87:aa:e1:cc:43:5f:7e:f6:20: fe:dd:b1:09:d9:75:7b:3b:5c:ba:61:e1:61:a8:83:7e:ac:7e: 0f:6f:9f:89:d1:cb:65:58:81:48:0e:a2:ef:f0:ae:a2:9f:17: aa:a8:d2:2b:cf:4e:2d:42:21:bf:b8:2b:83:a4:5d:8b:66:9b: 20:43:8a:c8:98:1a:88:5e:9b:ec:56:a6:91:3b:be:05:c0:35: d0:13:8b:29:14:25:8e:a5:e0:3a:ea:2b:29:2f:b8:c2:9c:5c: aa:20:f2:3a:2d:d6:d1:2f:46:10:31:e3:de:53:7f:49:01:86: 03:24:74:a1:77:62:1f:9c:ed:b0:7b:f6:4d:6d:05:3f:40:9a: 67:96:39:01:90:f2:ed:2e:96:e2:11:5d:9a:14:dc:c8:42:f1: af:41:d7:4f:27:ce:65:1a:c2:53:d4:30:4b:38:74:86:6c:7f: 27:fd:20:e7:27:24:b9:ef:18:6a:80:38:16:bf:3f:24:6e:5b: 26:6f:90:c4:f5:b7:96:76:67:0a:f6:c6:c7:51:e3:29:96:f7: 4f:39:e1:ec:dd:c0:2b:94:cd:cc:b0:c1:cc:84:c1:3a:d9:dd: 02:ef:5d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtLbtPult66SXrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NWY5MjFiZjgtMDk2Yy00NTM5LThmZDAtMzQxNzE1YjFhZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72Sqr09c8gRdXaAWJVd4xkgfW37srMSV9NG DuKyW5ioeT94ERUHaPYIOr+pj0AOncwjYGUgqGyqLh5uYXG+gx6Plx+D9YFl5TEy siPR4mh2vgGoZVrLQxZ4TQ9i/iRtYPSgtz7TLUhkCHcXVt93NacsueCaHK7jMexN NCC4FDXWYNAjuemAPGgLoyF6NZTPoesynkDWm4yd3/50eIBnxInaCh2ilbDDdJH7 tX7b0axs1EmB9s29XUEIaLg9k0Snx4PI3oOm7X3LpITZdJ0M4IclDWmq43tJLYwV XtZFyz5mQ6XX0/+3rCRAKpiLGfxZWPm2f5BM80VPqTATdU/MUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdvhXKO5sees5n3wVMcku6nnreGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhjZjkwZGYtYzE2Ni0z NjlkLWIxNDgtMWEzZWM1NWYwMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEP7gar/MMBE1YH5q6fRyWiRoYjR91GNwrRzYeq4cxDX372IP7dsQnZ dXs7XLph4WGog36sfg9vn4nRy2VYgUgOou/wrqKfF6qo0ivPTi1CIb+4K4OkXYtm myBDisiYGohem+xWppE7vgXANdATiykUJY6l4DrqKykvuMKcXKog8jot1tEvRhAx 495Tf0kBhgMkdKF3Yh+c7bB79k1tBT9AmmeWOQGQ8u0uluIRXZoU3MhC8a9B108n zmUawlPUMEs4dIZsfyf9IOcnJLnvGGqAOBa/PyRuWyZvkMT1t5Z2Zwr2xsdR4ymW 90854ezdwCuUzcywwcyEwTrZ3QLvXTs= -----END CERTIFICATE-----Generated at Tue May 6 01:40:19 2025 by rpki-client