$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2417807b-0b4d-3ae3-84bb-d5fc0441ce5a.roa File: 2417807b-0b4d-3ae3-84bb-d5fc0441ce5a.roa (raw, json) Hash identifier: KXE5Y4geqGDpom+N9jr7dLfG2DfIXKahb4oS7EnIG0o= Subject key identifier: 27:A7:AB:50:71:E2:E8:04:52:A1:BB:D6:48:6B:A1:91:9F:2F:6F:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA564452F2FCEEBE640F8080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2417807b-0b4d-3ae3-84bb-d5fc0441ce5a.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 20940 IP address blocks: 23.208.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:44:52:f2:fc:ee:be:64:0f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=45509d79-1b98-44de-a8f2-c5b4c60f1645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4e:64:df:55:b6:9d:69:3f:c1:92:43:78:b0: 2a:2b:28:e2:e5:a1:e8:89:6a:51:e3:c8:a3:d1:58: 87:4c:ad:6b:54:70:91:f3:19:e6:7d:7c:39:84:cc: 91:d0:bf:71:00:3f:8f:5a:88:27:12:2e:4e:0f:34: 96:92:01:b2:d5:56:81:1b:5a:40:88:ed:c2:6e:96: ec:2f:61:71:b4:26:c5:4e:b4:34:10:73:de:a1:95: 7b:7a:b4:a5:a6:e8:f2:0d:42:5d:1a:00:ae:6a:c1: d2:fc:fd:32:a3:96:21:39:cc:ef:b6:f9:03:66:ad: 0c:14:43:46:50:41:5c:c6:9e:f5:31:5a:9e:56:fa: 0c:51:c1:16:3e:3b:6b:27:cb:11:0c:92:e1:77:00: 60:5b:d4:a5:7c:6e:f7:dd:be:77:02:56:a2:92:bc: 08:6e:b2:f6:b1:86:0d:72:cf:25:5e:c5:15:77:d8: 05:cf:73:d2:54:3c:4a:63:ac:f2:78:47:33:90:56: 13:64:cd:a8:25:32:06:f5:b2:a6:8d:f6:92:a9:31: ed:9c:a2:73:46:9f:b4:82:43:06:ca:30:59:48:a8: d1:85:2f:c6:94:d3:87:a9:5c:4f:42:f5:3a:a7:39: 49:64:50:9c:db:8e:c1:f4:42:2d:d5:94:24:59:29: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A7:AB:50:71:E2:E8:04:52:A1:BB:D6:48:6B:A1:91:9F:2F:6F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2417807b-0b4d-3ae3-84bb-d5fc0441ce5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f2:63:f1:10:94:df:ad:d0:56:e7:95:f4:c7:53:7a:b4:cb: 99:5d:d7:20:d2:7c:44:a6:49:d7:0a:b2:9d:09:8a:cc:e7:dd: d4:64:b9:45:c5:91:18:61:2b:6b:de:e1:c2:4d:f0:1c:fc:93: 74:0e:9f:79:ee:58:f7:92:6b:6f:0d:2c:00:df:4a:d7:9e:6a: 21:4f:9a:ce:39:0f:82:41:b5:ca:71:5b:71:fe:e1:f9:fb:03: 3c:ae:70:21:cf:ba:85:86:4e:d3:28:d6:f2:70:97:c4:64:ee: df:0f:89:76:fa:49:9f:34:d8:2d:e3:e5:2e:be:38:b6:78:b8: 80:74:e4:08:b4:fe:4b:0a:96:ef:5a:35:bb:8c:12:37:32:40: 14:11:64:c3:f2:1a:76:77:c2:59:fe:65:ad:59:b3:c2:69:f1: 02:37:e9:4f:1c:57:9f:0d:03:98:a3:66:2b:b3:9b:fb:cc:50: 5e:ac:6b:f3:bd:61:4f:14:f6:6b:4a:5b:f4:ce:52:9f:47:2d: 4e:f4:59:05:1a:a9:02:7d:c7:b0:f1:df:cc:91:b8:f0:17:8a: 2d:e8:a8:f9:f1:d6:ef:e5:76:da:eb:25:6c:31:58:b3:b0:6e: 89:de:b9:bf:0d:36:1c:65:db:07:6d:31:5e:5a:6b:ae:0d:51: 80:a0:be:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkRS8vzuvmQPgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk NDU1MDlkNzktMWI5OC00NGRlLWE4ZjItYzViNGM2MGYxNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA505k31W2nWk/wZJDeLAqKyji5aHoiWpR48ij 0ViHTK1rVHCR8xnmfXw5hMyR0L9xAD+PWognEi5ODzSWkgGy1VaBG1pAiO3Cbpbs L2FxtCbFTrQ0EHPeoZV7erSlpujyDUJdGgCuasHS/P0yo5YhOczvtvkDZq0MFENG UEFcxp71MVqeVvoMUcEWPjtrJ8sRDJLhdwBgW9SlfG733b53AlaikrwIbrL2sYYN cs8lXsUVd9gFz3PSVDxKY6zyeEczkFYTZM2oJTIG9bKmjfaSqTHtnKJzRp+0gkMG yjBZSKjRhS/GlNOHqVxPQvU6pzlJZFCc247B9EIt1ZQkWSkffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCenq1Bx4ugEUqG71khroZGfL2/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQxNzgwN2ItMGI0ZC0z YWUzLTg0YmItZDVmYzA0NDFjZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9AcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPyY/EQlN+t0FbnlfTHU3q0y5ld1yDSfESmSdcKsp0Jiszn3dRkuUXF kRhhK2ve4cJN8Bz8k3QOn3nuWPeSa28NLADfSteeaiFPms45D4JBtcpxW3H+4fn7 AzyucCHPuoWGTtMo1vJwl8Rk7t8PiXb6SZ802C3j5S6+OLZ4uIB05Ai0/ksKlu9a NbuMEjcyQBQRZMPyGnZ3wln+Za1Zs8Jp8QI36U8cV58NA5ijZiuzm/vMUF6sa/O9 YU8U9mtKW/TOUp9HLU70WQUaqQJ9x7Dx38yRuPAXii3oqPnx1u/ldtrrJWwxWLOw boneub8NNhxl2wdtMV5aa64NUYCgvsQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:55 2025 by rpki-client