$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa File: 1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa (raw, json) Hash identifier: BOFxBRBWYTkpauJz3LXoOElI2lLhgpm07Ag8WhyXZ+c= Subject key identifier: E3:B1:32:BE:CF:3D:23:CB:E5:9E:F5:16:8E:15:67:7B:28:7E:40:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0D8B768B83B4758494B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.207.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d8:b7:68:b8:3b:47:58:49:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=339d94c9-f352-4b6f-8a37-26ef88ca0cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:46:94:e8:09:c4:11:c5:e3:7a:fd:25:eb: 12:f7:1b:1e:97:25:ee:9e:31:62:37:d9:5b:c9:8a: ed:f1:5e:94:1b:61:e1:f7:83:56:ff:ef:7c:6f:9c: 11:8e:e8:95:98:46:b2:3a:0c:e3:d9:f2:b0:4d:24: a8:4d:3d:93:4e:c2:ea:c5:21:4d:9b:d0:6c:83:49: 1d:43:c7:9d:0c:23:46:55:d0:12:4e:b8:35:08:2c: fc:08:51:bd:90:ea:4e:8b:62:59:fa:db:f1:38:de: c0:82:8c:0d:8c:f4:b2:3b:e5:d6:49:99:21:ec:45: 78:ea:d8:e7:cd:32:8d:d2:6b:63:c0:9b:af:63:11: 2c:ee:2d:10:81:06:e0:40:e1:00:37:ad:d7:30:c9: b8:bf:0f:fc:e4:32:0e:32:b4:35:f3:de:32:46:f0: 75:e0:0e:7a:48:70:c8:bc:28:60:79:83:1a:e7:78: 00:75:52:f6:60:32:d3:92:23:82:f5:15:e8:24:ae: 86:5d:77:ad:40:5c:b3:59:5c:59:6c:49:40:8d:de: 58:4c:f9:14:80:3f:ed:0f:c4:e9:81:95:37:33:31: ba:c2:27:97:0c:b2:20:58:de:ee:3a:96:0e:60:30: 5a:a9:5d:a9:81:31:ca:0f:6b:56:17:bc:f3:9b:eb: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B1:32:BE:CF:3D:23:CB:E5:9E:F5:16:8E:15:67:7B:28:7E:40:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1d:fe:c6:fe:f8:4f:ed:bd:39:29:99:d6:a3:20:35:44:54: 15:35:85:b4:9b:ab:d3:5b:80:71:8a:84:e6:f3:45:4b:d9:aa: ba:6a:2a:72:d1:34:29:c2:1e:69:95:b4:7d:1b:85:56:18:54: 70:79:e6:b8:4d:f3:e2:11:18:b4:74:97:e3:f2:88:ed:ce:f9: 4d:5c:b7:30:11:02:7c:77:1e:cb:59:c7:12:88:75:97:ee:19: 25:12:ac:8c:3f:36:59:4c:a3:c1:5c:c2:47:7c:5e:b1:b5:30: 65:1f:bd:90:62:2a:17:41:36:3f:63:51:e2:da:32:6a:fb:16: 51:6c:b5:af:83:3b:30:8a:11:81:82:01:a4:b4:55:54:90:b0: ce:fb:16:a7:c7:01:c2:5a:0e:37:4f:81:67:20:78:c9:b9:e5: 79:08:a7:e9:ba:96:d7:bf:22:4d:78:1f:2f:49:81:09:36:7a: 21:98:da:9a:62:6b:f0:a3:d4:5f:b9:8e:99:35:fa:34:55:fd: d7:75:e2:4e:82:d2:27:a2:5e:ec:a4:e9:db:1c:3a:b8:3b:de: b5:03:3b:01:af:77:44:54:a8:aa:9b:42:c5:d6:54:0b:13:22: 88:48:6f:ec:b2:42:11:6d:72:37:fb:d6:23:19:4e:19:e2:3d: 23:42:4d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Ni3aLg7R1hJS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MzM5ZDk0YzktZjM1Mi00YjZmLThhMzctMjZlZjg4Y2EwY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxddGlOgJxBHF43r9JesS9xselyXunjFiN9lb yYrt8V6UG2Hh94NW/+98b5wRjuiVmEayOgzj2fKwTSSoTT2TTsLqxSFNm9Bsg0kd Q8edDCNGVdASTrg1CCz8CFG9kOpOi2JZ+tvxON7AgowNjPSyO+XWSZkh7EV46tjn zTKN0mtjwJuvYxEs7i0QgQbgQOEAN63XMMm4vw/85DIOMrQ1894yRvB14A56SHDI vChgeYMa53gAdVL2YDLTkiOC9RXoJK6GXXetQFyzWVxZbElAjd5YTPkUgD/tD8Tp gZU3MzG6wieXDLIgWN7uOpYOYDBaqV2pgTHKD2tWF7zzm+un9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOxMr7PPSPL5Z71Fo4VZ3sofkCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY2ZWYxZGMtNDJjNS0z MzMwLWJkNGMtZDA4NmE5NTE1OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF89IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0d/sb++E/tvTkpmdajIDVEVBU1hbSbq9NbgHGKhObzRUvZqrpqKnLR NCnCHmmVtH0bhVYYVHB55rhN8+IRGLR0l+PyiO3O+U1ctzARAnx3HstZxxKIdZfu GSUSrIw/NllMo8Fcwkd8XrG1MGUfvZBiKhdBNj9jUeLaMmr7FlFsta+DOzCKEYGC AaS0VVSQsM77FqfHAcJaDjdPgWcgeMm55XkIp+m6lte/Ik14Hy9JgQk2eiGY2ppi a/Cj1F+5jpk1+jRV/dd14k6C0ieiXuyk6dscOrg73rUDOwGvd0RUqKqbQsXWVAsT IohIb+yyQhFtcjf71iMZThniPSNCTU8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:25 2025 by rpki-client