$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1383d351-bb22-3d62-a962-47e103801968.roa File: 1383d351-bb22-3d62-a962-47e103801968.roa (raw, json) Hash identifier: 9R99uuJYQHnYzFfRGhVdxArbyspSQgiYDSQugr+zzUs= Subject key identifier: 9A:57:F2:66:9B:7D:E8:F1:1A:29:75:94:B4:59:63:6A:D1:D6:AE:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0DAC87B24E79728EE5C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1383d351-bb22-3d62-a962-47e103801968.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.204.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:da:c8:7b:24:e7:97:28:ee:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=28bd271b-2742-4735-8663-2fead60985de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:c0:70:78:b1:14:a0:4e:1c:65:cd:94:b9: 9f:ef:44:2f:91:35:e6:d4:d7:60:68:98:39:64:c7: 59:e4:78:d6:8b:45:83:e4:79:c0:a9:2c:61:28:ae: ac:30:ee:e6:8a:76:5e:32:8a:11:ab:26:ce:79:f0: 43:c2:2a:1e:c1:6c:02:b1:bf:f3:81:b0:f1:a3:f5: c0:20:fc:95:69:14:14:98:b1:75:6e:9c:3a:a7:d2: 4f:0d:25:4e:fd:9d:ab:d8:f3:90:c6:26:60:97:73: 4f:22:73:b8:d7:b2:8b:db:b5:cd:1d:8b:be:a5:91: 6e:68:fc:ac:8e:ab:96:8f:d0:6c:af:da:2a:c2:94: 8d:51:b8:fc:23:fc:29:36:d7:81:64:72:b1:98:67: 75:5d:0e:77:8c:bc:a9:cf:5e:1b:3d:dd:f1:4f:5d: ce:15:8e:b0:67:35:b2:af:fe:e6:ed:be:0f:b3:03: 29:68:90:1c:e4:83:02:26:1a:e0:76:57:00:ed:36: 07:b2:54:17:ba:62:4e:53:97:57:44:0a:0b:da:c5: d9:34:ad:c1:eb:01:8d:dc:32:e1:3e:a6:62:ac:c6: 69:fe:c7:ca:5f:9e:06:ae:ce:44:e8:35:88:82:a2: 16:39:8e:94:cf:55:b7:84:e6:a9:63:c7:48:36:43: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:57:F2:66:9B:7D:E8:F1:1A:29:75:94:B4:59:63:6A:D1:D6:AE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1383d351-bb22-3d62-a962-47e103801968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:88:b6:7a:12:78:14:f3:60:2d:2e:e1:72:8b:21:46:ed:9e: cf:b9:88:64:95:d4:19:4f:ea:89:74:46:0f:76:1d:cd:84:87: 52:81:ed:8e:d6:8c:13:7b:a3:b8:97:50:cc:db:7a:82:b0:f4: 7e:70:69:80:e5:98:ca:9c:bc:bf:e4:43:6a:75:b3:b4:fb:cd: b1:a0:e8:26:28:db:a9:aa:b5:a1:72:1c:ec:0e:b3:fb:ab:4d: f0:74:1c:af:9c:26:c0:b1:ba:f9:03:9e:ea:4b:6e:7e:0d:74: 6d:96:29:6b:0f:86:13:0c:42:7e:1d:24:eb:01:77:a4:2f:27: c3:09:c0:8d:b1:cd:e1:10:da:29:90:2e:8e:58:c9:93:3e:69: d7:b6:ab:82:94:cf:32:38:8b:48:79:f7:e4:2a:58:3e:99:cb: 81:fe:05:61:a4:5c:cc:ee:56:04:6f:a7:9c:37:8e:65:da:91: c2:6e:91:64:e6:c0:72:fc:f8:85:49:45:88:89:f1:5d:ab:4b: 1d:23:70:55:4f:5b:38:dd:38:54:68:a0:f9:3e:25:13:23:21: f3:1d:32:50:b3:ee:b6:41:3a:96:f6:db:86:1a:37:75:c2:df: fe:88:ca:a6:6e:da:20:6d:fd:07:ab:6a:99:19:5a:f4:e8:da: 56:72:52:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NrIeyTnlyjuXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MjhiZDI3MWItMjc0Mi00NzM1LTg2NjMtMmZlYWQ2MDk4NWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KfAcHixFKBOHGXNlLmf70QvkTXm1NdgaJg5 ZMdZ5HjWi0WD5HnAqSxhKK6sMO7minZeMooRqybOefBDwioewWwCsb/zgbDxo/XA IPyVaRQUmLF1bpw6p9JPDSVO/Z2r2POQxiZgl3NPInO417KL27XNHYu+pZFuaPys jquWj9Bsr9oqwpSNUbj8I/wpNteBZHKxmGd1XQ53jLypz14bPd3xT13OFY6wZzWy r/7m7b4PswMpaJAc5IMCJhrgdlcA7TYHslQXumJOU5dXRAoL2sXZNK3B6wGN3DLh PqZirMZp/sfKX54Grs5E6DWIgqIWOY6Uz1W3hOapY8dINkOaZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpX8mabfejxGil1lLRZY2rR1q59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTM4M2QzNTEtYmIyMi0z ZDYyLWE5NjItNDdlMTAzODAxOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGItnoSeBTzYC0u4XKLIUbtns+5iGSV1BlP6ol0Rg92Hc2Eh1KB7Y7W jBN7o7iXUMzbeoKw9H5waYDlmMqcvL/kQ2p1s7T7zbGg6CYo26mqtaFyHOwOs/ur TfB0HK+cJsCxuvkDnupLbn4NdG2WKWsPhhMMQn4dJOsBd6QvJ8MJwI2xzeEQ2imQ Lo5YyZM+ade2q4KUzzI4i0h59+QqWD6Zy4H+BWGkXMzuVgRvp5w3jmXakcJukWTm wHL8+IVJRYiJ8V2rSx0jcFVPWzjdOFRooPk+JRMjIfMdMlCz7rZBOpb224YaN3XC 3/6IyqZu2iBt/QerapkZWvTo2lZyUhc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:18 2025 by rpki-client