$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9bf3976-8f17-35da-9f05-b8672286a3bf.roa File: f9bf3976-8f17-35da-9f05-b8672286a3bf.roa (raw, json) Hash identifier: HEJdWCeT/usPpWvMzQwx1hrivL4mmFU1HmpeSK6+JbM= Subject key identifier: C4:72:22:C9:ED:75:2D:99:66:3C:5B:B7:4F:73:2E:93:6C:15:E1:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF43001AB6E589E963C580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9bf3976-8f17-35da-9f05-b8672286a3bf.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.217.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:43:00:1a:b6:e5:89:e9:63:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=9326ef6f-baa5-4542-a79d-eb845a7c4570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:77:e2:3b:a3:fe:33:d1:52:e0:48:19:71: 1c:fb:fc:56:55:18:b0:2d:85:1b:13:c6:17:e6:12: 1b:89:45:ab:9e:3f:b5:10:41:d1:12:68:e1:33:fe: 98:f0:2f:14:91:f5:81:3a:41:2f:f1:bb:c1:48:60: b5:9f:ce:7e:50:7f:94:ee:f5:35:9d:16:73:dd:d0: ba:00:eb:7b:c9:fb:43:ba:4f:f6:96:3b:50:db:38: 4c:da:9d:52:2a:47:36:97:7c:da:4b:1c:94:e4:8b: 15:85:3e:7f:44:a3:d7:88:e8:42:41:96:ee:fb:6b: f6:61:1b:b4:3f:89:17:3e:0b:05:10:e4:68:33:a0: ef:9d:31:15:a3:9d:89:97:23:91:f8:e1:55:11:74: 25:65:c8:6e:25:22:88:22:0b:4d:9e:fa:8f:de:95: 6c:68:c4:8f:8d:f3:81:86:2a:b8:1b:de:49:c6:ee: 18:bf:22:bf:78:2b:59:da:6e:d1:99:f1:bc:b6:3e: 59:e7:99:da:e7:eb:9a:64:43:be:18:01:0a:c2:b7: 13:cf:75:ef:81:4d:03:4e:1b:d9:ad:cf:97:31:03: 78:c8:c6:da:ce:20:c9:4c:ad:33:59:9d:fc:21:66: d1:b5:b3:b6:9c:82:5b:41:4e:42:7f:2b:46:e8:18: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:72:22:C9:ED:75:2D:99:66:3C:5B:B7:4F:73:2E:93:6C:15:E1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9bf3976-8f17-35da-9f05-b8672286a3bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:26:aa:98:4d:98:75:48:a3:b0:e0:12:e4:b8:a9:fb:d6:24: bd:a8:74:a8:f5:4f:37:0d:68:35:68:17:3b:f5:f4:8b:fb:b3: 50:96:0b:12:61:dc:b7:79:c6:ef:97:a1:c1:fd:a8:87:93:e6: 5c:67:fe:84:83:d1:78:27:b2:e2:b9:0f:89:8b:7c:f6:96:41: 4c:d7:ff:1f:9e:12:3d:b2:f5:93:bb:00:dc:c0:d2:c0:0b:07: 9d:e1:92:2e:47:a5:40:1f:34:97:15:92:da:38:4e:4b:8d:63: ca:83:5c:fe:47:94:ca:a9:9b:8c:f7:c3:31:99:c6:9b:62:d3: 20:a3:4f:c8:4c:e6:e5:fc:db:85:b9:84:c6:ee:c8:45:7e:56: 2b:d5:38:69:e8:56:4e:51:f0:a5:9d:22:6c:b8:1b:78:b6:b8: 19:96:b7:98:8e:34:c4:2e:2e:4a:19:03:5e:be:db:da:ec:b2: 07:64:35:f3:46:45:6a:4c:e0:f7:4f:d2:9f:d8:de:ab:12:14: 67:c0:4c:71:e9:41:99:b8:88:b8:33:ef:7d:ef:80:90:c4:d8: 23:95:f9:40:75:cf:69:4c:50:d6:5c:a2:4a:66:ea:3c:76:f2: b6:6e:66:26:44:d3:e8:05:61:b7:a4:72:c1:9c:0f:9c:95:9b: 51:ab:e5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0MAGrblieljxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OTMyNmVmNmYtYmFhNS00NTQyLWE3OWQtZWI4NDVhN2M0NTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueN34juj/jPRUuBIGXEc+/xWVRiwLYUbE8YX 5hIbiUWrnj+1EEHREmjhM/6Y8C8UkfWBOkEv8bvBSGC1n85+UH+U7vU1nRZz3dC6 AOt7yftDuk/2ljtQ2zhM2p1SKkc2l3zaSxyU5IsVhT5/RKPXiOhCQZbu+2v2YRu0 P4kXPgsFEORoM6DvnTEVo52JlyOR+OFVEXQlZchuJSKIIgtNnvqP3pVsaMSPjfOB hiq4G95Jxu4YvyK/eCtZ2m7RmfG8tj5Z55na5+uaZEO+GAEKwrcTz3XvgU0DThvZ rc+XMQN4yMbaziDJTK0zWZ38IWbRtbO2nIJbQU5CfytG6BgfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRyIsntdS2ZZjxbt09zLpNsFeFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjliZjM5NzYtOGYxNy0z NWRhLTlmMDUtYjg2NzIyODZhM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9mEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAomqphNmHVIo7DgEuS4qfvWJL2odKj1TzcNaDVoFzv19Iv7s1CWCxJh 3Ld5xu+XocH9qIeT5lxn/oSD0XgnsuK5D4mLfPaWQUzX/x+eEj2y9ZO7ANzA0sAL B53hki5HpUAfNJcVkto4TkuNY8qDXP5HlMqpm4z3wzGZxpti0yCjT8hM5uX824W5 hMbuyEV+VivVOGnoVk5R8KWdImy4G3i2uBmWt5iONMQuLkoZA16+29rssgdkNfNG RWpM4PdP0p/Y3qsSFGfATHHpQZm4iLgz733vgJDE2COV+UB1z2lMUNZcokpm6jx2 8rZuZiZE0+gFYbekcsGcD5yVm1Gr5WM= -----END CERTIFICATE-----Generated at Tue May 6 11:03:06 2025 by rpki-client