$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d8ef8b-9073-34d7-8f97-99db8935d611.roa File: 03d8ef8b-9073-34d7-8f97-99db8935d611.roa (raw, json) Hash identifier: ekBiteuTPbmHEXUrJoH2cSMg4Ldoh2mN4aq33zPkzDk= Subject key identifier: 1E:A4:FC:53:39:8D:AA:94:86:75:89:BD:01:D7:5F:1D:C2:C0:EB:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848907610D7B8FD7A77F825D400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d8ef8b-9073-34d7-8f97-99db8935d611.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20940 IP address blocks: 23.200.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:76:10:d7:b8:fd:7a:77:f8:25:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=e29b893e-0897-4292-9c32-8f5bf6d89efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:6a:75:ff:b5:7b:a0:ce:ef:e0:1e:4e:0d: 7a:b1:7b:62:50:02:df:31:03:50:9f:0a:62:73:2f: 4e:95:05:c8:8b:29:b2:fe:ee:69:98:b6:43:c0:24: 90:60:5c:76:75:19:51:76:fa:23:fd:a3:5b:d1:63: 27:c0:8c:83:0c:70:87:2b:2a:25:36:b5:1c:09:22: 82:c0:b5:09:4a:71:f9:e1:1d:71:de:fc:f5:81:00: 10:54:34:19:5d:36:90:27:f6:3d:ca:1c:ac:d0:87: 58:39:3f:e9:19:16:6b:1b:a6:f4:e2:6d:17:44:55: 01:77:19:96:72:13:52:6b:15:54:87:61:93:e9:18: 6b:77:79:ae:b6:38:0d:27:a7:6a:62:af:3a:89:87: 34:66:1b:af:a9:9d:dc:7b:57:63:1a:f5:ed:e2:c8: 74:00:d5:8c:32:20:c0:32:45:9b:ff:59:8d:f3:e3: 32:6d:ea:05:70:61:f3:ba:96:92:e6:6d:89:3b:00: 17:e9:61:06:ee:5e:74:58:92:93:32:85:ad:79:ad: 5e:a9:43:8a:de:4c:b8:91:40:c7:01:ac:ef:03:bc: c3:65:55:4e:62:53:fd:d2:41:45:2e:6b:46:0a:3f: c7:f1:99:0b:a4:b5:12:55:53:a6:27:da:88:2b:4d: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:FC:53:39:8D:AA:94:86:75:89:BD:01:D7:5F:1D:C2:C0:EB:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d8ef8b-9073-34d7-8f97-99db8935d611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b6:ab:d4:91:e6:a6:6e:eb:fc:d9:74:20:e1:c8:c0:2c:97: 64:63:c5:68:2f:96:8d:98:29:8a:2c:c9:0a:76:5f:e6:af:bd: f7:8d:3b:56:0b:67:9e:95:af:ea:aa:61:aa:30:3c:2a:01:b7: 38:ec:db:dd:ea:b2:ac:6b:2d:ae:b8:99:41:b6:44:8b:e7:a8: c1:18:9e:80:fa:c8:ab:dd:f1:86:c6:5a:ec:71:f1:bf:eb:c1: d0:94:b4:91:38:fe:38:2e:21:cd:6f:08:7e:d7:d8:ec:63:4d: bb:80:2f:bc:d7:14:e4:f2:3d:73:be:dc:3a:6a:81:26:d5:d3: 29:1e:d8:e2:78:14:96:96:54:75:c4:ad:fb:01:e1:e5:a2:3d: 4b:f8:38:d8:c1:33:7e:f5:bc:d7:23:83:27:0f:54:c5:7b:fc: 73:a4:13:56:d1:3a:c9:06:f6:8b:6e:b3:65:fc:0d:7e:07:c8: 95:60:a1:89:bd:8f:c9:56:76:66:01:47:d1:74:8a:85:f5:35: b8:cc:63:61:e6:d6:02:bf:1d:5e:aa:67:a7:a2:1c:32:ef:e5: 3d:8b:34:d8:0a:90:4c:3c:6c:bf:b8:b6:79:03:da:77:4f:07: 44:3b:ce:aa:e5:f8:dc:ba:ba:b7:23:68:9f:e6:79:81:15:2d: ce:6e:f1:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdhDXuP16d/gl1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZTI5Yjg5M2UtMDg5Ny00MjkyLTljMzItOGY1YmY2ZDg5ZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvipqdf+1e6DO7+AeTg16sXtiUALfMQNQnwpi cy9OlQXIiymy/u5pmLZDwCSQYFx2dRlRdvoj/aNb0WMnwIyDDHCHKyolNrUcCSKC wLUJSnH54R1x3vz1gQAQVDQZXTaQJ/Y9yhys0IdYOT/pGRZrG6b04m0XRFUBdxmW chNSaxVUh2GT6Rhrd3mutjgNJ6dqYq86iYc0ZhuvqZ3ce1djGvXt4sh0ANWMMiDA MkWb/1mN8+MybeoFcGHzupaS5m2JOwAX6WEG7l50WJKTMoWtea1eqUOK3ky4kUDH AazvA7zDZVVOYlP90kFFLmtGCj/H8ZkLpLUSVVOmJ9qIK01+qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6k/FM5jaqUhnWJvQHXXx3CwOumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkOGVmOGItOTA3My0z NGQ3LThmOTctOTlkYjg5MzVkNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8jtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK2q9SR5qZu6/zZdCDhyMAsl2RjxWgvlo2YKYosyQp2X+avvfeNO1YL Z56Vr+qqYaowPCoBtzjs293qsqxrLa64mUG2RIvnqMEYnoD6yKvd8YbGWuxx8b/r wdCUtJE4/jguIc1vCH7X2OxjTbuAL7zXFOTyPXO+3DpqgSbV0yke2OJ4FJaWVHXE rfsB4eWiPUv4ONjBM371vNcjgycPVMV7/HOkE1bROskG9otus2X8DX4HyJVgoYm9 j8lWdmYBR9F0ioX1NbjMY2Hm1gK/HV6qZ6eiHDLv5T2LNNgKkEw8bL+4tnkD2ndP B0Q7zqrl+Ny6urcjaJ/meYEVLc5u8S8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:28 2025 by rpki-client