$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890cfc50-f504-3068-9650-58808015f57d.roa File: 890cfc50-f504-3068-9650-58808015f57d.roa (raw, json) Hash identifier: 6r6pi330b0mClUYtNg0JGYHzL0iY9UmK0UvHD2BXPPc= Subject key identifier: FB:15:BC:E0:89:54:78:E8:57:00:55:C9:D7:05:D2:5F:0A:B7:14:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B57A312FBBFE70ADDF078280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890cfc50-f504-3068-9650-58808015f57d.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 20940 IP address blocks: 23.210.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:31:2f:bb:fe:70:ad:df:07:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=a89c4080-d56f-4720-b08e-9fba0e2885be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:77:ab:83:14:74:b6:95:78:f2:2d:d3:64: 52:e6:b7:e4:27:cc:f8:76:40:05:34:c2:53:28:e2: fc:49:81:1a:24:46:6f:7a:76:df:ee:2f:eb:c3:8c: 47:02:fd:bf:50:59:f6:96:b1:e1:22:6b:07:dc:02: f5:ff:eb:37:8f:ca:12:bc:97:16:90:f3:6c:11:92: 95:b5:ba:29:b9:65:48:ea:02:80:45:02:88:48:18: c1:73:ab:1b:5d:3b:fd:90:6b:5d:b2:1b:c5:7a:ec: 0a:6d:de:45:0b:53:b8:5a:ef:d3:16:c5:62:b1:d8: 78:ba:bc:b5:2a:a1:80:a2:aa:ff:84:94:c2:f9:85: 37:b8:f7:4b:db:38:c0:bc:eb:96:c3:fd:be:5c:87: ff:a2:38:3c:9d:00:90:11:e8:e7:ea:ff:a6:fb:2f: 83:ec:2c:bf:48:a8:a9:dd:42:e0:5b:6c:6f:d3:fe: cb:fc:19:4e:61:52:35:70:42:46:f9:f7:a8:59:44: 20:39:6b:23:78:5d:eb:6c:df:2d:6a:7e:bc:84:c6: 84:4f:4e:2e:b2:2a:64:de:c1:a2:02:25:0f:f0:5c: c7:55:87:f5:75:3f:d5:ec:9f:42:b6:dd:06:01:87: fb:55:f3:a1:dd:ac:75:2a:9e:da:1d:91:5f:0f:76: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:15:BC:E0:89:54:78:E8:57:00:55:C9:D7:05:D2:5F:0A:B7:14:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890cfc50-f504-3068-9650-58808015f57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c2:c8:20:64:28:3c:f8:7c:62:b0:95:52:93:66:03:c3:41: 5e:1f:d3:c4:50:ed:81:2c:92:10:b9:b4:d5:f9:6f:d2:f7:63: eb:bd:f4:92:f8:6a:6c:8b:63:80:7f:6e:53:2f:09:f9:86:da: 80:b7:7f:d2:eb:4c:37:45:47:dc:89:ba:a5:31:40:32:a0:da: 91:e0:d9:08:b9:a8:44:35:60:56:70:80:8c:cd:fa:d0:f6:91: 5f:37:0e:e2:ec:25:8e:9b:8f:e1:5b:08:97:a3:23:71:78:7e: 8e:d8:58:e9:1d:28:4e:77:09:13:31:c0:ee:b0:0f:74:b1:c5: dc:07:76:33:77:3e:b7:26:c3:47:ef:21:77:dc:6a:48:16:c5: 43:6b:77:31:f7:77:7b:4d:f6:83:bb:fb:bd:93:5b:93:22:4b: 38:3d:f5:93:31:ff:ad:32:47:ce:b9:7e:92:b0:1f:0e:09:19: 39:19:4b:f6:11:2e:dc:cc:f6:c2:ec:00:72:b7:d3:03:39:7e: 05:ac:56:65:9b:bc:95:cb:be:71:7e:cc:c9:83:e8:69:31:b1: f2:ea:af:fe:d4:26:5e:87:45:9b:35:8a:7b:41:31:ca:bc:d6: 09:01:11:48:00:47:6e:95:e1:e0:05:ec:1a:69:d3:b6:8c:3b: f7:9f:57:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejEvu/5wrd8HgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YTg5YzQwODAtZDU2Zi00NzIwLWIwOGUtOWZiYTBlMjg4NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Z3q4MUdLaVePIt02RS5rfkJ8z4dkAFNMJT KOL8SYEaJEZvenbf7i/rw4xHAv2/UFn2lrHhImsH3AL1/+s3j8oSvJcWkPNsEZKV tbopuWVI6gKARQKISBjBc6sbXTv9kGtdshvFeuwKbd5FC1O4Wu/TFsVisdh4ury1 KqGAoqr/hJTC+YU3uPdL2zjAvOuWw/2+XIf/ojg8nQCQEejn6v+m+y+D7Cy/SKip 3ULgW2xv0/7L/BlOYVI1cEJG+feoWUQgOWsjeF3rbN8tan68hMaET04usipk3sGi AiUP8FzHVYf1dT/V7J9Ctt0GAYf7VfOh3ax1Kp7aHZFfD3YJOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsVvOCJVHjoVwBVydcF0l8KtxQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODkwY2ZjNTAtZjUwNC0z MDY4LTk2NTAtNTg4MDgwMTVmNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfCyCBkKDz4fGKwlVKTZgPDQV4f08RQ7YEskhC5tNX5b9L3Y+u99JL4 amyLY4B/blMvCfmG2oC3f9LrTDdFR9yJuqUxQDKg2pHg2Qi5qEQ1YFZwgIzN+tD2 kV83DuLsJY6bj+FbCJejI3F4fo7YWOkdKE53CRMxwO6wD3SxxdwHdjN3Prcmw0fv IXfcakgWxUNrdzH3d3tN9oO7+72TW5MiSzg99ZMx/60yR865fpKwHw4JGTkZS/YR LtzM9sLsAHK30wM5fgWsVmWbvJXLvnF+zMmD6GkxsfLqr/7UJl6HRZs1intBMcq8 1gkBEUgAR26V4eAF7Bpp07aMO/efVzg= -----END CERTIFICATE-----Generated at Sun May 11 13:11:29 2025 by rpki-client