$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa File: 32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa (raw, json) Hash identifier: YdJKlybK1S1vrL0rtzX+cuhJb18/YRKoO8qsIQWrcTs= Subject key identifier: 72:55:A6:9F:89:DE:AD:BF:98:E5:3B:92:A2:68:EE:A0:40:28:67:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0D74D43BB5DC0019F7140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 9498 IP address blocks: 23.206.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d7:4d:43:bb:5d:c0:01:9f:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=57a8287b-cbc8-4327-9472-4e560bf55f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:43:e2:10:65:d2:e8:dd:cb:57:e4:a9:69: c5:95:73:a8:f0:1c:fe:d7:f5:42:6d:78:b0:fb:1d: 10:5e:5a:db:ef:c8:f7:6b:cd:99:60:54:50:72:d4: 07:23:12:ec:d4:38:88:bc:89:7a:db:02:69:36:a4: e5:66:6e:ca:4a:0a:4f:05:13:e4:b6:d4:91:cc:3c: 08:6b:11:31:46:4d:1a:0a:c8:84:fa:4b:27:5a:37: 7e:49:ec:7f:d8:c0:7c:fa:2b:5e:a0:c6:2a:5b:20: 18:6b:31:a1:56:2f:6e:f3:7d:db:a2:0e:87:37:ff: 62:57:45:0e:0f:eb:ad:2a:f9:40:15:dc:a2:28:8b: 65:81:24:92:77:af:99:ed:ba:5b:1f:0a:ba:bb:d6: 99:6b:7b:0d:21:3d:b3:3a:d2:ee:f2:e4:28:ec:43: a7:11:88:3e:e1:f1:41:a8:f9:04:f6:a5:4e:97:91: 07:2b:7c:aa:59:ff:3b:17:fe:4f:fe:5c:94:12:b9: 21:81:e5:4e:f8:39:30:07:1f:4b:3d:bb:c4:13:18: 81:20:89:3d:c2:84:3e:75:26:8b:fd:1b:50:a3:30: 1f:c8:7e:06:ae:f3:ec:57:78:2b:7c:ca:36:d0:bf: 66:9a:2c:0c:27:43:e5:64:83:e0:13:d4:f8:f2:34: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:A6:9F:89:DE:AD:BF:98:E5:3B:92:A2:68:EE:A0:40:28:67:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:95:ff:78:98:b1:d0:61:af:9a:32:da:af:5b:37:30:c9:56: 95:e2:03:d1:63:d1:87:0a:05:00:f7:6a:b5:fb:24:f3:52:ac: 05:d2:4b:b0:31:97:09:b3:03:6f:b5:3a:d3:eb:e6:c5:b9:32: dd:28:12:6a:aa:4f:e0:55:2b:03:92:4f:b7:a3:df:eb:72:67: 8c:8d:d2:2a:65:04:67:1b:bd:fb:9e:e7:e9:a3:80:2c:96:87: a4:6a:04:71:95:dd:09:1b:95:5b:ff:90:1f:a9:30:4e:7a:29: d0:8e:71:0d:63:e4:d3:fc:ba:40:b9:8e:89:cc:a8:1f:8d:92: 1e:1c:07:ed:4a:39:e0:03:16:8e:79:d2:01:0c:e7:be:9b:0e: d7:df:e4:9c:75:52:90:9e:c5:57:10:90:c6:4c:cb:44:e9:53: 27:e1:94:eb:61:53:03:77:4e:f4:a5:1d:e1:a9:3c:ee:fd:56: 00:4d:98:24:6a:4a:4e:d7:ef:06:93:c1:8e:3c:68:07:cb:63: b2:2b:83:b6:db:ff:57:60:c2:64:af:b7:5d:65:3b:e0:2d:e6: db:45:d6:48:dc:b4:01:5f:38:d9:ad:a5:b5:d7:16:2a:f3:9a: 89:7f:8d:23:b1:a4:cc:59:81:41:43:90:6d:87:b3:12:aa:3c: 0f:68:72:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NdNQ7tdwAGfcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NTdhODI4N2ItY2JjOC00MzI3LTk0NzItNGU1NjBiZjU1ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkpD4hBl0ujdy1fkqWnFlXOo8Bz+1/VCbXiw +x0QXlrb78j3a82ZYFRQctQHIxLs1DiIvIl62wJpNqTlZm7KSgpPBRPkttSRzDwI axExRk0aCsiE+ksnWjd+Sex/2MB8+iteoMYqWyAYazGhVi9u833bog6HN/9iV0UO D+utKvlAFdyiKItlgSSSd6+Z7bpbHwq6u9aZa3sNIT2zOtLu8uQo7EOnEYg+4fFB qPkE9qVOl5EHK3yqWf87F/5P/lyUErkhgeVO+DkwBx9LPbvEExiBIIk9woQ+dSaL /RtQozAfyH4GrvPsV3grfMo20L9mmiwMJ0PlZIPgE9T48jS6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJVpp+J3q2/mOU7kqJo7qBAKGenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJlMjhjZjQtOGI2OS0z M2M1LTk0OWItNGExYjNhYzcxZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF869MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWV/3iYsdBhr5oy2q9bNzDJVpXiA9Fj0YcKBQD3arX7JPNSrAXSS7Ax lwmzA2+1OtPr5sW5Mt0oEmqqT+BVKwOST7ej3+tyZ4yN0iplBGcbvfue5+mjgCyW h6RqBHGV3QkblVv/kB+pME56KdCOcQ1j5NP8ukC5jonMqB+Nkh4cB+1KOeADFo55 0gEM576bDtff5Jx1UpCexVcQkMZMy0TpUyfhlOthUwN3TvSlHeGpPO79VgBNmCRq Sk7X7waTwY48aAfLY7Irg7bb/1dgwmSvt11lO+At5ttF1kjctAFfONmtpbXXFirz mol/jSOxpMxZgUFDkG2HsxKqPA9octY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:09 2025 by rpki-client