$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa File: 17f5970d-36e4-3b44-a225-2f83a9437273.roa (raw, json) Hash identifier: U2ilMtauN9S64HAYdaTD2kCNCOa65DR1dmLb00GpO7g= Subject key identifier: 08:A5:20:7D:AA:0C:1A:45:8C:DD:68:0A:06:1B:1A:0B:BA:F4:33:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B5F5F2BFDA0C3216B72B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 23.223.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5f:5f:2b:fd:a0:c3:21:6b:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=b29e207d-4088-4d7a-a7d7-9c8ca30cf2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:ba:d3:03:f4:cf:36:ae:67:6f:43:cd:74: 0b:d3:ed:a9:ef:82:46:8f:c3:c0:9a:a0:0a:42:ba: 24:fa:ac:05:26:74:90:9c:4e:89:0f:d3:2f:74:d4: 7c:0a:d3:91:e1:a0:f9:2b:07:02:4c:78:47:bf:c8: 3d:6e:a0:b6:64:fd:0f:62:c6:62:8b:29:08:00:fb: 59:ed:75:4c:93:e7:62:f9:14:d1:9c:26:de:dd:9e: cd:5e:63:b2:43:e1:69:eb:81:3d:9f:37:b9:2f:5a: f2:ae:c5:bc:9e:78:f8:25:50:4b:26:df:c8:b2:ba: d7:76:a2:26:7b:45:58:8b:5b:c5:ab:a0:31:9b:24: b0:17:8c:ed:db:20:35:64:c2:b3:a2:74:fc:06:d6: fc:96:85:96:ce:3d:3b:e0:8b:7d:30:74:ec:d9:90: b9:5c:be:a9:a8:a9:24:66:77:e9:bf:36:49:a0:72: db:83:67:9a:32:11:fa:c4:3a:0e:fc:0f:85:14:eb: ee:a9:81:8f:f1:a0:9b:d7:2e:c0:4f:ef:56:c4:e4: 55:db:b5:29:73:08:1f:99:80:6a:8e:e5:d8:b1:98: 27:65:68:92:39:e5:21:cc:71:ac:da:ce:98:67:89: 79:8a:fb:80:03:7d:67:e5:c6:a8:33:d3:bc:f4:d6: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:20:7D:AA:0C:1A:45:8C:DD:68:0A:06:1B:1A:0B:BA:F4:33:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7c:a2:0d:80:1b:08:56:1c:35:03:8a:15:a0:a5:f6:7e:09: 6e:20:00:28:51:b8:d7:20:09:90:36:70:73:c6:b3:a0:32:4d: c6:1e:c4:15:d7:4d:e6:a4:f3:48:b2:40:d7:43:11:f0:2b:e2: 3e:20:11:84:44:f5:2f:ad:4a:be:85:a7:98:58:0a:1f:c4:79: 11:b7:b2:0e:31:75:81:45:63:87:cf:c4:a4:55:9a:1d:da:12: c0:c9:d3:81:17:e1:bb:e3:91:9d:49:41:65:3d:6d:4d:87:7e: b5:d1:a2:03:ed:a0:18:95:4d:61:15:ec:d6:b1:80:e0:f1:a6: 4f:9a:25:8e:26:d9:c2:17:5c:f0:cd:56:98:a6:a0:79:c3:ac: 33:6e:e2:ff:f8:d9:5d:88:6d:7d:29:8f:92:13:ef:fd:2e:52: ce:55:a2:a2:54:fb:d0:a5:00:48:ef:7d:75:e1:4f:e3:f5:69: a1:8c:70:a4:3f:77:99:d5:5f:53:16:eb:9b:6f:2b:fa:5e:90: 88:ab:66:ec:fa:a7:d4:4b:3e:dc:fb:5f:6b:48:09:df:9e:8f: 1a:80:ef:91:b1:0f:cf:07:dc:16:4b:a2:e2:1a:d8:cd:e6:03: 5c:bf:21:e8:aa:05:6c:36:d3:a3:2f:d8:6a:50:03:47:63:6c: f9:7d:75:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC19fK/2gwyFrcrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YjI5ZTIwN2QtNDA4OC00ZDdhLWE3ZDctOWM4Y2EzMGNmMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gi60wP0zzauZ29DzXQL0+2p74JGj8PAmqAK Qrok+qwFJnSQnE6JD9MvdNR8CtOR4aD5KwcCTHhHv8g9bqC2ZP0PYsZiiykIAPtZ 7XVMk+di+RTRnCbe3Z7NXmOyQ+Fp64E9nze5L1ryrsW8nnj4JVBLJt/IsrrXdqIm e0VYi1vFq6AxmySwF4zt2yA1ZMKzonT8Btb8loWWzj074It9MHTs2ZC5XL6pqKkk ZnfpvzZJoHLbg2eaMhH6xDoO/A+FFOvuqYGP8aCb1y7AT+9WxORV27UpcwgfmYBq juXYsZgnZWiSOeUhzHGs2s6YZ4l5ivuAA31n5caoM9O89Nbs5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAilIH2qDBpFjN1oCgYbGgu69DPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdmNTk3MGQtMzZlNC0z YjQ0LWEyMjUtMmY4M2E5NDM3MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx8og2AGwhWHDUDihWgpfZ+CW4gAChRuNcgCZA2cHPGs6AyTcYexBXX Teak80iyQNdDEfAr4j4gEYRE9S+tSr6Fp5hYCh/EeRG3sg4xdYFFY4fPxKRVmh3a EsDJ04EX4bvjkZ1JQWU9bU2HfrXRogPtoBiVTWEV7NaxgODxpk+aJY4m2cIXXPDN VpimoHnDrDNu4v/42V2IbX0pj5IT7/0uUs5VoqJU+9ClAEjvfXXhT+P1aaGMcKQ/ d5nVX1MW65tvK/pekIirZuz6p9RLPtz7X2tICd+ejxqA75GxD88H3BZLouIa2M3m A1y/IeiqBWw206Mv2GpQA0djbPl9dXQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:41 2025 by rpki-client