$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa File: 0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa (raw, json) Hash identifier: jDCRZMmGLdPlMEQbamy7rto76c+nMkSrTXX0x5Oz7oE= Subject key identifier: 93:7A:AD:6B:66:42:08:1A:A3:83:B3:25:98:63:F2:A5:8F:8F:75:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BAD1E4E50E151F38DD960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.223.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:ad:1e:4e:50:e1:51:f3:8d:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=bf07b352-80be-4d4c-8932-957e65738992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:09:83:e0:21:e3:b7:9c:59:a1:4a:69:19: b2:9d:ed:0e:65:2f:87:39:64:49:9c:11:96:5e:46: c5:92:d4:b4:b2:ea:cd:50:22:d1:19:36:b7:17:46: 39:f0:e3:b8:75:57:71:1b:c7:bf:77:ef:54:1c:f2: ab:df:68:ab:06:9e:fa:a5:c7:22:ea:5c:19:53:0a: fe:ce:14:39:c2:b3:6f:6e:95:78:91:25:7e:cd:87: c3:ee:37:b3:02:2b:2a:b5:4f:ff:6f:9e:53:e7:31: 7e:be:6d:fd:af:59:c4:00:e2:f1:6a:30:c8:be:ad: bf:ee:ba:85:00:d6:9a:d1:36:76:95:62:80:32:0c: c2:88:52:0f:22:22:ec:98:b3:11:ec:55:22:74:cd: 17:e6:ae:ae:4b:21:7d:77:3b:4a:ae:c0:2b:d9:ad: c4:a6:a1:01:9a:68:c4:8c:90:52:ad:e9:fa:89:e9: f7:5f:95:2c:73:1e:13:cd:38:fe:ab:94:a5:4c:02: d0:ec:2f:53:fb:29:f3:4e:00:3e:7b:45:db:d5:de: fa:aa:c7:cb:da:fc:17:05:5b:54:a3:03:15:69:84: 98:da:ec:73:50:01:fb:c9:55:19:98:16:54:ce:33: 76:7c:09:76:18:c8:c1:54:c0:96:61:02:d5:9d:78: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:AD:6B:66:42:08:1A:A3:83:B3:25:98:63:F2:A5:8F:8F:75:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0514a66a-e7fa-3b1d-8984-21f19a9f0f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c7:50:48:9c:7c:c2:84:c3:ac:48:93:bf:aa:b0:6b:9d:f3: 32:8e:dc:c5:31:7b:f2:5b:34:be:eb:32:df:c4:f4:24:aa:51: 18:67:f6:b5:ee:69:58:11:88:87:c6:55:a9:41:bd:b7:c7:98: b9:26:60:b4:f4:ff:f2:eb:0d:36:cb:f4:b0:a2:7c:64:52:65: 11:4d:16:35:c5:1a:3f:02:35:d4:54:d3:50:6f:d7:f9:86:a7: fb:cf:de:7f:f0:22:06:01:c3:d6:ba:d0:aa:56:97:e2:02:29: 0c:09:74:bd:19:db:52:c3:40:b6:c9:fb:8d:34:c4:22:2b:54: ce:b8:6d:61:d1:5d:9e:0c:9e:66:f7:cd:6b:af:25:6d:e7:c1: 47:34:40:f4:42:28:30:47:df:44:a1:91:c0:ef:77:dd:89:39: ce:e5:74:08:75:3d:85:cd:0c:4c:91:7e:88:48:25:03:ea:a7: cc:27:25:a7:00:ef:bb:be:3f:4e:15:04:f2:4c:98:38:be:a4: 89:6a:92:bc:56:78:48:34:55:ce:5b:a8:43:c0:fc:54:7f:5b: 79:20:a4:ca:3d:a9:18:58:93:7f:92:5f:a3:52:f6:51:e0:f9: db:eb:76:f5:c3:39:40:48:db:fb:89:41:62:8b:17:2c:4c:34: 45:de:d0:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe60eTlDhUfON2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YmYwN2IzNTItODBiZS00ZDRjLTg5MzItOTU3ZTY1NzM4OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEJg+Ah47ecWaFKaRmyne0OZS+HOWRJnBGW XkbFktS0surNUCLRGTa3F0Y58OO4dVdxG8e/d+9UHPKr32irBp76pcci6lwZUwr+ zhQ5wrNvbpV4kSV+zYfD7jezAisqtU//b55T5zF+vm39r1nEAOLxajDIvq2/7rqF ANaa0TZ2lWKAMgzCiFIPIiLsmLMR7FUidM0X5q6uSyF9dztKrsAr2a3EpqEBmmjE jJBSren6ien3X5Uscx4TzTj+q5SlTALQ7C9T+ynzTgA+e0Xb1d76qsfL2vwXBVtU owMVaYSY2uxzUAH7yVUZmBZUzjN2fAl2GMjBVMCWYQLVnXj1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJN6rWtmQggao4OzJZhj8qWPj3W+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUxNGE2NmEtZTdmYS0z YjFkLTg5ODQtMjFmMTlhOWYwZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHHUEicfMKEw6xIk7+qsGud8zKO3MUxe/JbNL7rMt/E9CSqURhn9rXu aVgRiIfGValBvbfHmLkmYLT0//LrDTbL9LCifGRSZRFNFjXFGj8CNdRU01Bv1/mG p/vP3n/wIgYBw9a60KpWl+ICKQwJdL0Z21LDQLbJ+400xCIrVM64bWHRXZ4Mnmb3 zWuvJW3nwUc0QPRCKDBH30ShkcDvd92JOc7ldAh1PYXNDEyRfohIJQPqp8wnJacA 77u+P04VBPJMmDi+pIlqkrxWeEg0Vc5bqEPA/FR/W3kgpMo9qRhYk3+SX6NS9lHg +dvrdvXDOUBI2/uJQWKLFyxMNEXe0Es= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:44 2025 by rpki-client