$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f08933b-acda-3939-80f6-67dd4f4bf150.roa File: 3f08933b-acda-3939-80f6-67dd4f4bf150.roa (raw, json) Hash identifier: s4leru7vym9nSKtv3oFh6GZwkGHgcUK6/PhZAsVXD6c= Subject key identifier: ED:B8:91:8F:0F:41:F4:4B:71:98:7E:DF:93:4B:6F:6E:F9:BD:20:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA5643B27D891BD0E4AB0300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f08933b-acda-3939-80f6-67dd4f4bf150.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 8966 IP address blocks: 23.208.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:43:b2:7d:89:1b:d0:e4:ab:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=7ca2f663-c026-4df7-8175-dbd4814afcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:22:35:ef:dd:e2:05:02:4b:2d:b6:d1:f0: 1d:cb:eb:f8:0e:74:86:2f:37:96:a7:d4:fe:cb:a0: 9c:1e:d3:18:a3:b4:c6:e2:62:1c:33:28:e1:6b:c3: 59:b6:33:83:7f:89:e0:98:1f:ad:59:9c:d6:8f:9c: 9f:c3:96:e4:82:90:ef:a4:0e:2a:92:68:00:24:77: 3e:2d:20:65:1d:79:f6:e2:54:44:de:25:24:cc:c3: e1:78:34:19:c4:e8:6d:25:db:2a:1e:01:d4:05:fd: 89:f1:2f:87:b6:51:da:7d:c3:eb:7e:de:84:c8:6f: d0:ab:9b:09:2e:2e:f2:ef:a8:50:12:50:f2:d1:0c: 69:c7:02:04:96:f4:1c:14:fe:71:47:a7:31:7e:b7: 31:4f:46:f9:37:30:0b:ec:1f:c3:c9:4c:20:f2:c8: c9:ec:dd:5c:80:23:c1:fd:91:90:8d:8f:39:bf:e3: 73:63:1a:3c:14:de:a1:e6:2f:f6:ca:e0:46:3d:3f: c4:8d:51:78:4f:94:7c:b3:ac:54:2e:8d:d0:43:b4: c0:5f:b6:b3:32:da:2f:64:c3:15:49:b6:6d:e9:34: 22:78:09:43:54:34:40:6b:35:d8:2c:76:85:34:f0: a3:12:31:56:f6:07:53:dd:17:d9:29:d8:b6:57:c9: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B8:91:8F:0F:41:F4:4B:71:98:7E:DF:93:4B:6F:6E:F9:BD:20:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f08933b-acda-3939-80f6-67dd4f4bf150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:79:e4:4f:b6:13:b2:25:4c:fb:b3:37:22:df:eb:5e:14:44: b5:db:40:ab:bd:6a:1a:2b:eb:10:a8:95:82:11:ca:e3:47:ae: 92:7d:eb:c4:23:75:7e:43:64:74:8e:3c:77:c7:95:87:04:ce: b2:f2:35:94:e6:19:cd:b3:f4:a4:78:57:22:68:62:c7:76:eb: f1:5a:15:7a:2b:50:2e:0b:dc:57:6d:15:41:52:71:72:a4:fb: 86:82:7b:91:83:4f:29:1c:6f:6d:88:a2:cb:f2:f7:bc:d7:42: 22:3b:96:a3:97:ef:69:ed:e9:27:8d:37:1e:f1:79:09:4d:8f: 87:4b:c3:33:6d:47:9c:96:2b:9e:bc:16:25:cd:9b:b0:1d:63: 95:fe:54:86:83:fb:cc:9a:06:50:2d:01:7f:32:68:28:03:cc: f3:5e:ee:0c:a0:59:90:53:be:e0:1d:a1:a8:64:df:23:d5:89: 31:45:76:ac:92:99:6e:70:ae:b0:c0:14:cb:b9:d5:4f:db:3c: f5:7a:23:2a:2c:b1:e2:e6:8f:10:92:31:ae:09:d4:98:5f:6b: da:58:52:0b:61:a7:f5:04:a1:b4:b8:f1:86:48:e4:4a:02:5e: 2a:d3:f9:12:45:66:8b:8f:85:9b:d2:3a:40:7a:53:e8:c1:83: 1f:b0:af:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkOyfYkb0OSrAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk N2NhMmY2NjMtYzAyNi00ZGY3LTgxNzUtZGJkNDgxNGFmY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEgiNe/d4gUCSy220fAdy+v4DnSGLzeWp9T+ y6CcHtMYo7TG4mIcMyjha8NZtjODf4ngmB+tWZzWj5yfw5bkgpDvpA4qkmgAJHc+ LSBlHXn24lRE3iUkzMPheDQZxOhtJdsqHgHUBf2J8S+HtlHafcPrft6EyG/Qq5sJ Li7y76hQElDy0QxpxwIElvQcFP5xR6cxfrcxT0b5NzAL7B/DyUwg8sjJ7N1cgCPB /ZGQjY85v+NzYxo8FN6h5i/2yuBGPT/EjVF4T5R8s6xULo3QQ7TAX7azMtovZMMV SbZt6TQieAlDVDRAazXYLHaFNPCjEjFW9gdT3RfZKdi2V8m9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO24kY8PQfRLcZh+35NLb275vSDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YwODkzM2ItYWNkYS0z OTM5LTgwZjYtNjdkZDRmNGJmMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9DUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ55E+2E7IlTPuzNyLf614URLXbQKu9ahor6xColYIRyuNHrpJ968Qj dX5DZHSOPHfHlYcEzrLyNZTmGc2z9KR4VyJoYsd26/FaFXorUC4L3FdtFUFScXKk +4aCe5GDTykcb22Iosvy97zXQiI7lqOX72nt6SeNNx7xeQlNj4dLwzNtR5yWK568 FiXNm7AdY5X+VIaD+8yaBlAtAX8yaCgDzPNe7gygWZBTvuAdoahk3yPViTFFdqyS mW5wrrDAFMu51U/bPPV6IyosseLmjxCSMa4J1Jhfa9pYUgthp/UEobS48YZI5EoC XirT+RJFZouPhZvSOkB6U+jBgx+wr1k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:27 2025 by rpki-client