$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0095c5d2-4638-31fe-a424-18bef5db1cd7.roa File: 0095c5d2-4638-31fe-a424-18bef5db1cd7.roa (raw, json) Hash identifier: K6tBV20qxWuTNT2jK4hpWHTQrnI7mhFP/jx9R43T9/8= Subject key identifier: 2A:74:EF:E3:45:62:F6:A4:9D:34:A3:7B:7A:7B:80:81:E7:C8:B7:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA7413854D6C5706F1060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0095c5d2-4638-31fe-a424-18bef5db1cd7.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.223.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a7:41:38:54:d6:c5:70:6f:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=c7757d3d-e54e-4cfa-8144-78ce6da9f3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:8b:7d:e9:04:2d:d0:e4:16:fd:d0:f9:ee: 33:05:b0:16:57:f0:35:c1:7e:e0:a2:7c:6d:99:f2: 3c:ed:c7:c8:0a:18:80:3d:09:37:8f:38:a5:fb:13: f6:5c:ae:90:c2:d9:73:19:e3:b8:5d:6f:24:a4:85: 42:c0:4e:33:4b:16:02:ed:04:af:ae:5e:64:a9:8c: c8:7e:7f:fd:79:84:a3:9f:da:0c:c3:8a:47:92:e9: f3:2a:16:8a:3d:75:32:4d:fa:c1:ac:cc:1c:7a:99: c9:4d:fd:24:b2:23:d6:d8:5f:9b:19:8f:d5:5d:be: 1b:e2:2b:44:2d:e2:a3:8a:f7:09:e7:0f:71:b7:0b: fe:1a:c8:60:81:e7:65:e0:94:21:38:c6:55:8b:8c: 09:be:8c:e2:3b:43:28:a0:e6:75:b3:1c:c2:4a:b6: 4a:6d:35:9a:5d:ed:53:0c:5a:8f:74:c6:64:76:24: ed:7e:b3:a1:99:0b:ca:f5:40:69:89:12:96:0e:34: e1:6c:8f:c3:b3:c0:c6:10:b9:ff:d5:3b:5d:16:1c: cd:2a:95:a1:bf:ed:a0:e2:31:3a:04:1f:a1:1f:7a: 3f:d4:8c:da:c6:78:0a:16:a2:8e:93:1f:d0:2d:1e: 53:9a:8d:cc:e2:64:73:12:79:06:fa:a3:47:41:71: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:EF:E3:45:62:F6:A4:9D:34:A3:7B:7A:7B:80:81:E7:C8:B7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0095c5d2-4638-31fe-a424-18bef5db1cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6a:cb:15:25:07:39:28:32:b3:09:9f:fb:6f:ff:33:f7:40: c2:44:86:aa:b0:b8:94:73:f9:f7:a8:13:1c:b7:80:42:5a:39: 2e:3c:79:30:72:7b:48:73:e1:81:c6:ef:3d:78:63:db:54:7c: 82:23:2a:c8:24:e6:f3:96:80:37:28:d4:51:5d:2e:e1:c8:4b: 95:e9:11:cc:c7:3a:db:09:68:3c:d0:91:a5:5e:0d:90:34:02: 01:ff:27:46:af:99:5e:73:33:b6:29:39:90:71:a5:c4:a0:00: ee:67:67:a6:b2:19:af:0f:62:41:26:92:48:4a:55:e4:4d:b8: 69:4c:ca:6b:49:c3:95:8e:c9:ca:88:c4:f8:e8:43:3c:be:3c: 04:c2:36:b9:70:46:a1:71:f9:bb:d9:19:c5:ec:06:de:74:25: 7d:12:7d:0b:db:70:2c:40:82:9d:7b:c9:03:43:c7:df:34:b9: f6:0d:fe:95:38:8e:e8:a9:da:1a:08:0b:3e:1a:65:02:68:fd: 71:f5:68:52:94:c5:37:49:58:ac:b0:16:14:32:62:61:17:ab: 0b:13:57:7c:61:b6:52:60:22:90:98:01:e3:aa:d0:4d:15:51: 40:96:b9:8e:e6:9d:4d:00:ad:00:b3:67:ec:40:32:f2:f7:d8: 0d:6e:d0:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6dBOFTWxXBvEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Yzc3NTdkM2QtZTU0ZS00Y2ZhLTgxNDQtNzhjZTZkYTlmM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb2LfekELdDkFv3Q+e4zBbAWV/A1wX7gonxt mfI87cfIChiAPQk3jzil+xP2XK6QwtlzGeO4XW8kpIVCwE4zSxYC7QSvrl5kqYzI fn/9eYSjn9oMw4pHkunzKhaKPXUyTfrBrMwcepnJTf0ksiPW2F+bGY/VXb4b4itE LeKjivcJ5w9xtwv+Gshggedl4JQhOMZVi4wJvoziO0MooOZ1sxzCSrZKbTWaXe1T DFqPdMZkdiTtfrOhmQvK9UBpiRKWDjThbI/Ds8DGELn/1TtdFhzNKpWhv+2g4jE6 BB+hH3o/1IzaxngKFqKOkx/QLR5Tmo3M4mRzEnkG+qNHQXHgzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp07+NFYvaknTSje3p7gIHnyLclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA5NWM1ZDItNDYzOC0z MWZlLWE0MjQtMThiZWY1ZGIxY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNqyxUlBzkoMrMJn/tv/zP3QMJEhqqwuJRz+feoExy3gEJaOS48eTBy e0hz4YHG7z14Y9tUfIIjKsgk5vOWgDco1FFdLuHIS5XpEczHOtsJaDzQkaVeDZA0 AgH/J0avmV5zM7YpOZBxpcSgAO5nZ6ayGa8PYkEmkkhKVeRNuGlMymtJw5WOycqI xPjoQzy+PATCNrlwRqFx+bvZGcXsBt50JX0SfQvbcCxAgp17yQNDx980ufYN/pU4 juip2hoICz4aZQJo/XH1aFKUxTdJWKywFhQyYmEXqwsTV3xhtlJgIpCYAeOq0E0V UUCWuY7mnU0ArQCzZ+xAMvL32A1u0HQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:11 2025 by rpki-client