$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa File: f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa (raw, json) Hash identifier: SGnjdgpuz2VroubFUqgyLt3LInyCXaptXPlrx0IGT8g= Subject key identifier: B2:28:DD:FE:26:40:80:EE:6A:C1:58:4B:D8:0F:4D:40:38:E3:E0:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF495BD1EB81B04EA45B700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.212.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:95:bd:1e:b8:1b:04:ea:45:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0d20dd50-e286-4636-a028-8ba23f553f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:77:fe:37:d7:e8:37:be:50:4a:d7:ef:a2: b1:9c:52:5a:84:0b:5d:eb:a2:65:eb:b6:a0:df:d6: fe:27:8f:7d:6c:9b:3c:b2:c1:f2:86:a0:5d:7d:bd: e6:22:6e:71:c3:ee:f5:03:98:89:63:e0:0c:74:77: 01:37:28:46:cd:32:79:07:83:b0:d4:04:44:8d:a4: 60:e2:0b:69:37:a6:ff:01:29:bf:e2:51:b0:e1:c5: 3f:d4:9b:36:1a:3c:c3:42:b3:f7:1b:83:62:bf:d7: f2:4f:71:92:d5:e7:d7:9f:b0:4b:47:bc:5d:8c:88: da:4e:f9:84:b3:ad:d6:48:68:0b:70:05:3c:50:e3: 2a:33:34:00:c2:70:47:30:20:a4:69:2b:0d:d0:69: 21:6d:07:5e:8a:ea:25:8c:3b:88:42:b5:34:8a:d6: 83:18:a6:1f:76:0f:3d:a8:1c:a4:05:85:2a:74:2d: d0:a4:e1:7b:ec:fa:c9:01:12:0f:53:6e:95:03:fe: 07:8e:c5:e0:96:cc:cf:bf:20:95:55:2f:ea:4f:8c: 97:8d:b3:39:ec:de:e2:9c:5a:82:f3:61:85:8d:70: 46:9f:09:b9:0c:5a:31:96:64:6b:ed:98:db:9e:49: 40:bd:4f:78:59:ed:4a:2c:5f:9f:83:70:65:14:69: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:DD:FE:26:40:80:EE:6A:C1:58:4B:D8:0F:4D:40:38:E3:E0:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:54:42:47:48:84:81:ce:b5:10:0b:6b:f1:67:47:a9:a2:18: 86:b2:0b:93:15:fe:53:d0:d5:f2:65:32:d7:14:28:6e:1c:38: 8f:98:8c:98:9b:a6:dd:6e:1b:d7:44:48:d7:ca:23:09:9c:f8: 3c:83:8a:a0:73:76:63:73:fc:5a:92:12:55:5b:ec:ff:a6:23: e1:85:33:21:3b:a0:bd:a3:ec:24:d3:9d:e9:8a:96:9c:c9:cf: 5d:f6:ea:fe:a3:52:91:2e:a6:5b:eb:9a:77:25:38:43:2d:bc: 17:cb:0d:53:c9:d8:ee:69:34:f5:9e:9d:9b:29:aa:0d:b4:66: ca:30:1f:bf:b2:30:d6:5f:51:b0:f3:4c:a8:85:32:c2:51:cc: 76:75:97:a4:b3:9f:56:64:be:fe:01:11:93:1d:13:c4:43:a9: 77:da:46:67:80:19:b1:e5:dd:06:8f:89:7a:c3:c9:d1:e7:dd: 3f:c5:63:eb:79:bc:77:09:67:b2:45:d6:be:9a:07:2c:3f:0c: 30:da:ab:34:b2:10:69:bd:b5:ce:90:c7:e7:dc:36:b7:26:a5: 25:fb:61:76:22:b4:b6:a1:54:d3:7c:8c:5e:3d:6c:c5:fa:d0: a9:96:2c:d3:52:2b:5b:f2:8b:03:6b:30:5e:00:e0:8d:17:8c: 22:dc:cc:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JW9HrgbBOpFtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MGQyMGRkNTAtZTI4Ni00NjM2LWEwMjgtOGJhMjNmNTUzZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDV3/jfX6De+UErX76KxnFJahAtd66Jl67ag 39b+J499bJs8ssHyhqBdfb3mIm5xw+71A5iJY+AMdHcBNyhGzTJ5B4Ow1AREjaRg 4gtpN6b/ASm/4lGw4cU/1Js2GjzDQrP3G4Niv9fyT3GS1efXn7BLR7xdjIjaTvmE s63WSGgLcAU8UOMqMzQAwnBHMCCkaSsN0GkhbQdeiuoljDuIQrU0itaDGKYfdg89 qBykBYUqdC3QpOF77PrJARIPU26VA/4HjsXglszPvyCVVS/qT4yXjbM57N7inFqC 82GFjXBGnwm5DFoxlmRr7ZjbnklAvU94We1KLF+fg3BlFGkWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIo3f4mQIDuasFYS9gPTUA44+CwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkZjIwMjMtZGE2Yy0z ZTYxLWJmZDEtNWIzM2M0YjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBUQkdIhIHOtRALa/FnR6miGIayC5MV/lPQ1fJlMtcUKG4cOI+YjJib pt1uG9dESNfKIwmc+DyDiqBzdmNz/FqSElVb7P+mI+GFMyE7oL2j7CTTnemKlpzJ z1326v6jUpEuplvrmnclOEMtvBfLDVPJ2O5pNPWenZspqg20ZsowH7+yMNZfUbDz TKiFMsJRzHZ1l6Szn1Zkvv4BEZMdE8RDqXfaRmeAGbHl3QaPiXrDydHn3T/FY+t5 vHcJZ7JF1r6aByw/DDDaqzSyEGm9tc6Qx+fcNrcmpSX7YXYitLahVNN8jF49bMX6 0KmWLNNSK1vyiwNrMF4A4I0XjCLczIQ= -----END CERTIFICATE-----Generated at Mon May 5 01:31:36 2025 by rpki-client