$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89a750c8-27d2-3727-b4eb-eba938035f6f.roa File: 89a750c8-27d2-3727-b4eb-eba938035f6f.roa (raw, json) Hash identifier: jXzNf7tHDbZdPxm5jo4VOO8m21j3oDVpPIvpuQs38oI= Subject key identifier: B0:2D:AA:AC:78:ED:63:F9:9D:18:AF:57:0C:77:8B:DD:0A:A1:80:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF4145B6CE0558DD170374 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89a750c8-27d2-3727-b4eb-eba938035f6f.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.216.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:41:45:b6:ce:05:58:dd:17:03:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=6fea2273-9e9b-4caf-a1f9-d658ebfbb4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:0f:42:13:eb:3a:e8:65:05:27:d8:4c:72: c4:dd:d0:89:34:bc:f8:2e:17:1e:f6:9f:31:8f:62: 62:e0:5c:9f:c4:13:d5:f6:12:f8:cf:8e:e6:14:b1: 6c:19:d4:df:72:35:c6:56:eb:36:a5:30:c1:a5:8a: 45:84:e1:06:cb:a7:98:dd:50:0f:ca:77:9d:98:0e: 02:cf:22:80:86:a2:d8:26:62:08:b8:46:e9:4d:f3: 77:f4:86:04:54:c0:3e:82:01:67:89:b1:21:fd:02: 74:8e:3a:9f:39:4c:7c:ad:06:d7:10:d8:eb:26:7a: ed:46:26:1e:d0:ca:01:b8:35:8a:68:b2:b7:f3:b4: 68:05:f7:30:6f:49:8e:13:07:90:52:1d:81:4e:61: 04:13:06:f1:f7:74:92:f4:ab:d2:12:4a:12:e9:44: 6c:cf:5a:25:c8:02:8e:bf:f6:f1:af:6d:65:4b:1d: ba:71:35:6f:dd:ea:14:b1:68:0a:42:1d:1f:e3:4f: e2:0e:45:e4:e5:58:89:89:e0:72:85:f8:cb:32:c6: 68:12:71:9e:0a:7b:bb:0d:c1:7c:e6:db:7a:18:7b: 91:3a:ae:e2:b4:cc:e5:b7:b4:c7:96:e5:28:2a:cc: bd:60:32:7a:37:37:d1:80:8c:c7:d8:ef:65:ab:0e: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:AA:AC:78:ED:63:F9:9D:18:AF:57:0C:77:8B:DD:0A:A1:80:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89a750c8-27d2-3727-b4eb-eba938035f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:75:a7:6d:f4:2f:ab:21:23:70:45:54:37:17:f6:f9:f8:12: 5b:ce:b1:b6:72:33:74:f2:1f:7f:59:63:ed:e7:a7:77:69:62: 25:c3:ec:fd:9b:d4:70:e4:4b:a8:be:61:5f:22:b8:b1:a8:0a: 65:d4:aa:0e:a8:89:92:ed:6f:d7:44:89:13:63:c9:58:9e:79: 83:ba:74:2e:e6:00:68:7c:89:7f:4a:b9:9e:c8:af:1a:e9:b8: 8a:62:70:7e:1b:86:c1:d8:d8:80:7c:69:f2:e7:8c:40:b7:f9: c5:de:a1:52:af:35:be:04:ba:69:f9:11:52:0e:55:44:c5:96: a6:9b:bb:09:bc:ec:b0:c3:50:f6:21:17:23:9d:92:4a:42:06: 29:4d:a3:c3:22:7b:74:c8:3d:1d:d7:c5:2e:6b:93:c9:d9:89: d7:63:79:a8:45:37:00:9c:94:58:6c:8e:a6:b2:22:b3:7c:96: aa:df:35:d6:5c:58:91:69:8f:0b:bf:ec:43:3f:a2:96:05:56: c2:bb:97:82:66:59:da:98:eb:76:37:fa:99:f1:6a:73:74:bf: 81:82:23:ad:58:f9:55:79:2d:b9:94:d3:a3:8d:7d:ae:e5:6f: 5f:af:62:b6:f2:28:67:3c:bd:48:90:ba:ef:17:26:78:4a:69: 99:9d:93:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0FFts4FWN0XA3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NmZlYTIyNzMtOWU5Yi00Y2FmLWExZjktZDY1OGViZmJiNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHcPQhPrOuhlBSfYTHLE3dCJNLz4Lhce9p8x j2Ji4FyfxBPV9hL4z47mFLFsGdTfcjXGVus2pTDBpYpFhOEGy6eY3VAPynedmA4C zyKAhqLYJmIIuEbpTfN39IYEVMA+ggFnibEh/QJ0jjqfOUx8rQbXENjrJnrtRiYe 0MoBuDWKaLK387RoBfcwb0mOEweQUh2BTmEEEwbx93SS9KvSEkoS6URsz1olyAKO v/bxr21lSx26cTVv3eoUsWgKQh0f40/iDkXk5ViJieByhfjLMsZoEnGeCnu7DcF8 5tt6GHuROq7itMzlt7THluUoKsy9YDJ6NzfRgIzH2O9lqw7OGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAtqqx47WP5nRivVwx3i90KoYBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlhNzUwYzgtMjdkMi0z NzI3LWI0ZWItZWJhOTM4MDM1ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB51p230L6shI3BFVDcX9vn4ElvOsbZyM3TyH39ZY+3np3dpYiXD7P2b 1HDkS6i+YV8iuLGoCmXUqg6oiZLtb9dEiRNjyVieeYO6dC7mAGh8iX9KuZ7Irxrp uIpicH4bhsHY2IB8afLnjEC3+cXeoVKvNb4Eumn5EVIOVUTFlqabuwm87LDDUPYh FyOdkkpCBilNo8Mie3TIPR3XxS5rk8nZiddjeahFNwCclFhsjqayIrN8lqrfNdZc WJFpjwu/7EM/opYFVsK7l4JmWdqY63Y3+pnxanN0v4GCI61Y+VV5LbmU06ONfa7l b1+vYrbyKGc8vUiQuu8XJnhKaZmdk4E= -----END CERTIFICATE-----Generated at Mon May 5 07:25:26 2025 by rpki-client