$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa File: 9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa (raw, json) Hash identifier: PK6q832BqeLtqP74BRcWw2Nhr1OkqbSzl7I9EzTZKac= Subject key identifier: EA:B6:A1:DB:4F:15:EC:43:50:E6:79:C8:03:33:5A:B2:26:F2:54:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF41C4980A8950B2E3AF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.216.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:41:c4:98:0a:89:50:b2:e3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=4f7bad28-06c3-4a01-8c14-3f6ab955e7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:4e:50:f8:e1:d8:ae:36:96:00:3b:86:9d: 77:58:60:71:d6:6c:0e:89:ab:e2:e7:d0:63:ae:bf: a5:3b:34:19:2f:a1:86:38:a4:38:60:7a:b8:8f:7c: d2:44:fe:ca:76:e4:f9:78:b6:83:77:15:8d:01:6f: 71:c0:a5:e4:15:c6:78:e8:6d:64:df:8d:d9:38:3c: 10:2b:91:22:63:63:1c:c1:bd:4f:b8:da:3a:c0:17: 53:92:00:75:6d:af:16:3e:7c:5d:ca:40:6a:81:70: fe:61:a0:35:9b:ed:33:e9:d7:21:34:48:09:20:bf: c3:bd:7a:ca:a6:54:7d:05:96:76:b1:b5:cb:02:c7: 69:f3:a1:4f:b8:e2:b9:f5:0d:9f:b1:3b:5f:68:de: d0:3f:bb:c5:6c:a0:64:bd:74:40:d2:e5:e2:a3:eb: 6a:9a:3d:71:1d:6c:8e:20:71:02:70:02:a9:54:63: c6:ee:b5:7b:a1:e4:f4:ba:1c:4a:8c:23:cf:b0:31: cf:ec:0b:d4:59:69:cf:b3:d4:23:e1:06:8d:aa:6a: ef:4a:da:80:48:de:c9:69:3d:a6:c7:52:be:e6:c7: 32:b5:d5:45:b3:ff:ae:0b:36:10:41:3b:e4:95:bb: 10:ea:d9:ed:10:62:65:18:4c:c0:19:1b:27:34:62: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B6:A1:DB:4F:15:EC:43:50:E6:79:C8:03:33:5A:B2:26:F2:54:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:97:85:7a:b8:a6:35:06:c0:f4:45:fa:5a:96:80:65:02:fe: 49:b9:8f:e2:0c:a1:82:28:6f:21:94:b9:21:57:07:bb:84:62: 32:09:61:79:03:17:3d:9b:e7:4f:ad:ad:f0:6d:5e:56:cb:48: 3e:03:c1:ff:3d:a4:2f:9c:f6:ad:3d:48:cd:bb:d5:23:73:f5: b1:c9:6e:fb:68:42:67:e6:3c:af:58:38:cf:49:df:ba:a3:a7: e3:06:ec:c5:a3:8b:d8:cd:0b:1d:c2:b7:a6:b2:e6:22:69:8d: 5b:05:1b:0d:7b:0c:1a:09:b6:25:c8:bc:ed:88:bd:b6:c7:42: 82:ef:6d:3c:99:18:79:e4:6b:df:30:17:c9:db:24:3f:a3:5c: 57:7c:23:08:e8:da:7a:1c:a6:b7:1f:95:19:a6:f3:57:bc:e5: 29:fe:91:c0:40:a4:56:f7:ba:fd:22:4f:d1:8a:80:98:41:cb: d8:3e:70:d3:81:5f:a9:6d:21:d3:64:f6:82:cf:fe:2f:75:8d: 0d:49:3e:a6:65:c2:e8:29:0a:e7:33:37:5d:de:39:3f:95:c0: 5c:1e:c4:3b:f1:a2:78:01:df:49:62:b8:1b:3d:45:c9:d5:68: b5:8a:5b:22:be:99:fa:5e:51:f9:08:8f:a9:76:a6:40:99:71: b9:ab:53:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0HEmAqJULLjrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NGY3YmFkMjgtMDZjMy00YTAxLThjMTQtM2Y2YWI5NTVlN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIVOUPjh2K42lgA7hp13WGBx1mwOiavi59Bj rr+lOzQZL6GGOKQ4YHq4j3zSRP7KduT5eLaDdxWNAW9xwKXkFcZ46G1k343ZODwQ K5EiY2Mcwb1PuNo6wBdTkgB1ba8WPnxdykBqgXD+YaA1m+0z6dchNEgJIL/DvXrK plR9BZZ2sbXLAsdp86FPuOK59Q2fsTtfaN7QP7vFbKBkvXRA0uXio+tqmj1xHWyO IHECcAKpVGPG7rV7oeT0uhxKjCPPsDHP7AvUWWnPs9Qj4QaNqmrvStqASN7JaT2m x1K+5scytdVFs/+uCzYQQTvklbsQ6tntEGJlGEzAGRsnNGIJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq2odtPFexDUOZ5yAMzWrIm8lTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZkNzhiNzAtODljMy0z YTE5LWI4OWEtNmY2ZTZhOTIwZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqXhXq4pjUGwPRF+lqWgGUC/km5j+IMoYIobyGUuSFXB7uEYjIJYXkD Fz2b50+trfBtXlbLSD4Dwf89pC+c9q09SM271SNz9bHJbvtoQmfmPK9YOM9J37qj p+MG7MWji9jNCx3Ct6ay5iJpjVsFGw17DBoJtiXIvO2IvbbHQoLvbTyZGHnka98w F8nbJD+jXFd8Iwjo2nocprcflRmm81e85Sn+kcBApFb3uv0iT9GKgJhBy9g+cNOB X6ltIdNk9oLP/i91jQ1JPqZlwugpCuczN13eOT+VwFwexDvxongB30liuBs9RcnV aLWKWyK+mfpeUfkIj6l2pkCZcbmrUwc= -----END CERTIFICATE-----Generated at Mon May 5 06:54:27 2025 by rpki-client