$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4de1053-89ce-38cc-9ab5-216bc7c7e8e0.roa File: c4de1053-89ce-38cc-9ab5-216bc7c7e8e0.roa (raw, json) Hash identifier: 733sGPWK0br2xzo3J7VhgFH1SjFv0ryyQOoiMt+JINY= Subject key identifier: 8C:4B:CF:F7:B7:3F:B9:58:34:5D:4C:83:3D:7D:72:50:06:50:E3:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9E67F0FD6D45162797800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4de1053-89ce-38cc-9ab5-216bc7c7e8e0.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.218.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e6:7f:0f:d6:d4:51:62:79:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=07686a83-8aa1-48aa-bce5-dbab4c32e0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:23:6b:1e:2c:74:b3:b8:16:3e:8a:97:e7: 07:19:aa:67:93:ca:06:2a:8d:5b:1d:d9:68:21:5d: 2c:7d:b1:d7:df:13:15:d8:b7:fc:dd:0c:af:69:ac: e2:86:15:2e:f7:9c:b8:cf:a0:84:db:ec:55:9e:16: aa:75:60:b5:22:5e:fe:7e:a7:23:30:6d:4e:ce:25: 69:e3:f6:57:48:61:a0:57:b2:44:86:0f:e3:e8:07: e2:cf:0d:ac:96:57:41:38:d9:cd:1c:2b:e0:83:48: 3d:43:e1:56:9b:12:23:08:13:7c:6f:82:4d:27:ff: dc:91:d2:57:0a:76:63:00:45:42:9d:c6:3f:52:d8: 41:4f:72:d1:33:c1:8e:0e:14:81:28:5b:38:73:46: 55:93:16:5d:00:f6:30:ec:5a:e7:f9:83:93:3c:56: 1c:f7:e9:53:aa:29:47:37:85:da:39:bb:13:ee:fe: e0:b5:3f:ed:d9:f4:58:9f:89:3a:e7:d7:50:e3:ae: 3c:21:30:69:59:1f:20:ce:be:d5:1f:c5:c8:a6:35: a6:21:bd:27:95:49:11:57:1b:12:87:0e:78:69:bf: c6:25:82:34:cd:61:dd:b4:75:b9:5e:61:8c:1e:24: 0e:f0:b7:57:be:a7:26:7c:ca:a9:0d:2d:1b:3b:3e: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4B:CF:F7:B7:3F:B9:58:34:5D:4C:83:3D:7D:72:50:06:50:E3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4de1053-89ce-38cc-9ab5-216bc7c7e8e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2a:58:55:4c:0b:52:d7:63:20:ff:ba:0e:b2:7e:04:73:ce: 05:6b:81:ca:a5:a7:d8:74:76:0e:1c:26:a0:40:a0:99:10:ed: a1:cc:6e:e2:cf:32:80:3a:74:ba:96:65:66:84:bf:ea:1e:42: 2b:70:8c:75:d2:04:df:2e:6e:4a:07:d9:08:e2:a5:2d:a3:f8: 35:f8:9c:ab:1a:24:fc:40:15:82:d1:70:44:f0:e1:be:8a:a7: c4:6f:87:5c:17:d8:bb:b4:66:ec:22:ff:46:28:e4:11:e1:c9: 87:26:34:e5:a2:e1:82:6b:cb:07:63:50:db:fb:7d:e7:6d:92: 88:94:e2:8b:97:12:a9:0c:76:05:99:b6:0e:29:fc:71:12:de: 95:f0:05:bc:5a:89:5c:97:fe:23:39:14:a6:ea:04:8b:dc:5f: ec:fe:63:85:4a:00:57:d4:1f:ff:1f:63:b7:24:a3:70:e2:83: c5:2c:aa:06:34:c7:1c:ae:3a:8a:dd:a6:f0:4c:95:55:e0:9b: f2:2a:90:7f:8e:98:02:c3:4a:60:02:cc:00:0b:ce:dd:3e:d9: dd:d0:13:11:2c:7c:1b:9a:1a:36:b8:24:0d:a8:a9:36:61:e6: 00:e2:25:2a:a3:d7:84:fe:96:db:d7:f6:0a:80:42:1a:d6:14: 5d:f2:a7:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eZ/D9bUUWJ5eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MDc2ODZhODMtOGFhMS00OGFhLWJjZTUtZGJhYjRjMzJlMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdAjax4sdLO4Fj6Kl+cHGapnk8oGKo1bHdlo IV0sfbHX3xMV2Lf83QyvaazihhUu95y4z6CE2+xVnhaqdWC1Il7+fqcjMG1OziVp 4/ZXSGGgV7JEhg/j6Afizw2slldBONnNHCvgg0g9Q+FWmxIjCBN8b4JNJ//ckdJX CnZjAEVCncY/UthBT3LRM8GODhSBKFs4c0ZVkxZdAPYw7Frn+YOTPFYc9+lTqilH N4XaObsT7v7gtT/t2fRYn4k659dQ4648ITBpWR8gzr7VH8XIpjWmIb0nlUkRVxsS hw54ab/GJYI0zWHdtHW5XmGMHiQO8LdXvqcmfMqpDS0bOz5ukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxLz/e3P7lYNF1Mgz19clAGUOOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRkZTEwNTMtODljZS0z OGNjLTlhYjUtMjE2YmM3YzdlOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9r6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkqWFVMC1LXYyD/ug6yfgRzzgVrgcqlp9h0dg4cJqBAoJkQ7aHMbuLP MoA6dLqWZWaEv+oeQitwjHXSBN8ubkoH2QjipS2j+DX4nKsaJPxAFYLRcETw4b6K p8Rvh1wX2Lu0Zuwi/0Yo5BHhyYcmNOWi4YJrywdjUNv7fedtkoiU4ouXEqkMdgWZ tg4p/HES3pXwBbxaiVyX/iM5FKbqBIvcX+z+Y4VKAFfUH/8fY7cko3Dig8UsqgY0 xxyuOordpvBMlVXgm/IqkH+OmALDSmACzAALzt0+2d3QExEsfBuaGja4JA2oqTZh 5gDiJSqj14T+ltvX9gqAQhrWFF3ypyw= -----END CERTIFICATE-----Generated at Mon May 5 10:17:11 2025 by rpki-client