$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d42dec74-802c-3bb3-a803-31da08f019a6.roa File: d42dec74-802c-3bb3-a803-31da08f019a6.roa (raw, json) Hash identifier: ZZIgkdjle5ryTLsWpl19+y4jW2KjIbbC3hwZMd7kIwE= Subject key identifier: 9A:1B:0C:0E:B4:9A:44:C5:35:10:58:A2:4B:C7:E2:57:D9:DF:FF:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829E2BBF42F6A60590BE510 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d42dec74-802c-3bb3-a803-31da08f019a6.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.204.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e2:bb:f4:2f:6a:60:59:0b:e5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=a389b5e9-895d-4df6-981b-fc09f2dac748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:22:01:05:42:2e:c7:cd:e5:e3:42:84:76:57: 46:24:e3:be:2f:92:47:55:e3:ce:b6:91:42:ab:1b: cf:19:0b:80:a3:2b:d4:db:62:8e:20:41:18:af:16: 46:90:53:45:fb:21:2f:9f:c0:03:65:15:a7:3b:55: 94:bc:94:dc:1e:2b:64:22:1d:5b:fc:3b:35:20:25: 8d:30:e7:df:72:42:d4:5d:48:0d:81:c4:63:a5:7f: 20:05:71:d6:50:4b:5a:58:89:02:48:c5:83:5b:96: fd:0f:30:2e:ca:a0:2f:4e:c2:a4:a9:a9:61:52:29: b5:c8:87:61:cc:5c:4d:b5:d0:7a:64:31:7b:96:c7: 33:d1:0b:f5:ec:f9:85:63:ce:02:aa:7b:82:db:aa: d4:6a:20:85:7c:b3:27:cb:e6:ce:41:df:5d:75:8a: 3f:10:a5:f6:4f:e6:b9:1c:96:b8:d7:a3:73:77:b3: 21:66:c7:8b:78:90:f4:59:e0:62:1e:28:7c:6f:b6: 0e:d3:6d:0e:c1:75:cc:5f:2f:16:a4:fa:68:ff:82: 1b:2b:a4:65:ee:8c:53:42:e2:96:09:a7:9c:aa:28: 39:5b:9a:f6:88:df:f4:37:85:7a:eb:80:f6:bf:69: e9:6f:d5:13:93:cb:2e:19:b6:bf:df:be:4d:ae:2e: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:0C:0E:B4:9A:44:C5:35:10:58:A2:4B:C7:E2:57:D9:DF:FF:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d42dec74-802c-3bb3-a803-31da08f019a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:dc:13:f9:e4:61:79:7e:db:24:89:40:f3:66:ed:b4:79:c4: d4:14:99:d0:71:9e:57:00:d6:18:46:26:07:a5:8f:08:7b:6a: 0b:74:d0:93:2f:6f:c8:05:7b:1b:f7:0d:a1:65:ab:b6:01:8f: 29:5d:83:b7:0b:be:7a:32:9e:00:2a:e7:9b:bc:a8:29:59:9a: 1d:77:2d:31:f4:5a:5b:16:dd:1d:6b:8a:32:23:fe:26:60:c9: f1:6b:ae:6c:e7:13:05:31:ce:80:e5:44:82:b4:bb:e2:09:02: 21:c6:e5:11:2a:d1:99:1c:36:77:6b:3a:95:cc:99:27:13:2f: 0b:0a:eb:31:60:ab:81:1a:2a:bd:9c:56:74:47:b3:5a:4a:3b: 57:08:cf:73:04:f1:88:60:f8:45:fa:09:07:39:18:31:f4:cf: 25:a7:dc:4e:b4:20:25:0d:d8:2b:b4:95:c3:36:ef:63:bb:f0: 8e:a1:23:61:b1:7a:76:4c:f6:ff:84:8d:01:bc:fa:db:b4:b1: 21:65:c3:85:60:7a:2c:1f:30:e2:10:3c:f2:4e:f1:16:6f:6e: 2a:47:b7:2c:3a:44:7a:cc:ac:43:83:00:57:61:e2:a8:1c:ec: 9b:37:74:f5:7d:5f:fe:dc:c5:fc:da:8e:a3:e9:8a:24:5c:bc: 43:d3:8e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeK79C9qYFkL5RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YTM4OWI1ZTktODk1ZC00ZGY2LTk4MWItZmMwOWYyZGFjNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiIBBUIux83l40KEdldGJOO+L5JHVePOtpFC qxvPGQuAoyvU22KOIEEYrxZGkFNF+yEvn8ADZRWnO1WUvJTcHitkIh1b/Ds1ICWN MOffckLUXUgNgcRjpX8gBXHWUEtaWIkCSMWDW5b9DzAuyqAvTsKkqalhUim1yIdh zFxNtdB6ZDF7lscz0Qv17PmFY84CqnuC26rUaiCFfLMny+bOQd9ddYo/EKX2T+a5 HJa416Nzd7MhZseLeJD0WeBiHih8b7YO020OwXXMXy8WpPpo/4IbK6Rl7oxTQuKW Caecqig5W5r2iN/0N4V664D2v2npb9UTk8suGba/375Nri4YMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJobDA60mkTFNRBYokvH4lfZ3//3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQyZGVjNzQtODAyYy0z YmIzLWE4MDMtMzFkYTA4ZjAxOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8zyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvcE/nkYXl+2ySJQPNm7bR5xNQUmdBxnlcA1hhGJgeljwh7agt00JMv b8gFexv3DaFlq7YBjyldg7cLvnoyngAq55u8qClZmh13LTH0WlsW3R1rijIj/iZg yfFrrmznEwUxzoDlRIK0u+IJAiHG5REq0ZkcNndrOpXMmScTLwsK6zFgq4EaKr2c VnRHs1pKO1cIz3ME8Yhg+EX6CQc5GDH0zyWn3E60ICUN2Cu0lcM272O78I6hI2Gx enZM9v+EjQG8+tu0sSFlw4VgeiwfMOIQPPJO8RZvbipHtyw6RHrMrEODAFdh4qgc 7Js3dPV9X/7cxfzajqPpiiRcvEPTjt4= -----END CERTIFICATE-----Generated at Mon May 5 01:54:41 2025 by rpki-client