$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cace450-ed7e-3167-8fc1-6043700eec8e.roa File: 6cace450-ed7e-3167-8fc1-6043700eec8e.roa (raw, json) Hash identifier: gQLczi+bq3iFOzuMn8iTY/1YYDnVYeOoeDLqsUpE2lc= Subject key identifier: 72:96:0A:98:A0:23:1E:E1:A6:64:DF:EC:3E:28:BB:F1:A0:8D:B2:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8963AC716597B46DB7A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cace450-ed7e-3167-8fc1-6043700eec8e.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.209.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:89:63:ac:71:65:97:b4:6d:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=19e6c40f-b791-4353-8bd9-0b390418f7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:a7:59:a3:b8:f0:55:df:4f:7c:71:ba:47: 31:84:af:9c:80:40:9b:cd:b1:d1:28:72:a1:6c:43: 32:8e:0d:98:c2:40:2e:c4:dd:a5:87:2b:ec:4d:4c: e2:5c:dc:e5:75:6e:75:28:31:18:e3:b6:86:36:52: 02:1c:2e:9d:5f:32:96:f7:30:05:83:6a:0c:63:f3: 77:a9:cd:0a:fc:9e:7d:63:3c:5f:cf:c2:19:d6:3c: b6:47:1f:01:23:9a:1b:03:79:24:9f:4e:37:fd:a2: 5d:44:3d:1e:d8:64:f8:f8:e3:88:e4:17:0e:e4:3a: d0:cd:ad:d2:c3:37:c8:7e:7a:d3:e8:2e:db:5d:8f: 8c:c0:4d:9c:8c:b8:0d:51:29:93:a7:a1:ef:58:f4: 7e:d5:1f:e6:85:9f:4a:b1:bb:2f:c4:cf:62:84:a5: aa:56:eb:8a:ee:39:40:00:a0:e7:4e:d5:74:78:b1: 56:c5:16:b8:07:e8:ab:06:14:ee:08:ce:db:42:81: 6e:43:91:13:66:1c:de:90:2a:d5:15:b2:91:59:76: e3:1a:39:1d:a5:48:81:3a:21:ef:57:88:c4:e7:3d: 3e:5a:bb:27:63:61:81:c3:59:b9:e2:41:67:c4:57: ad:c4:2a:30:ee:8b:a9:f2:19:86:b6:27:9d:9a:50: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:0A:98:A0:23:1E:E1:A6:64:DF:EC:3E:28:BB:F1:A0:8D:B2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cace450-ed7e-3167-8fc1-6043700eec8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5e:d2:89:c7:30:8b:cb:10:52:b0:f5:68:b8:27:fe:cc:f2: 01:ca:11:a1:2c:a3:38:e4:6d:b2:cf:57:fb:53:4d:1b:bb:36: 5e:06:be:11:c0:b1:95:5e:62:ae:2f:0e:c7:b8:ab:0b:1c:d1: 55:09:20:0f:9d:6f:80:fd:27:59:c0:08:cc:51:eb:c0:09:5d: 40:0d:d2:a4:eb:53:af:14:36:04:c1:1e:af:f5:41:29:ba:5f: 7c:30:c5:7d:e6:6b:37:94:b1:57:d5:72:8f:0d:a1:35:d5:e6: 61:c6:12:fb:32:48:d3:8e:2e:8a:3d:44:76:17:d0:d2:2e:5d: cc:a3:2b:ea:df:cd:27:28:2e:87:77:2d:6e:d5:3b:f2:ce:9d: 9b:5b:99:15:c7:b1:60:3c:75:3b:67:f9:cd:0c:09:37:30:8d: e4:21:09:33:4c:57:b0:31:46:b7:fb:1d:5d:be:92:a3:43:42: 11:2e:50:1d:73:e2:95:d5:1e:2d:4e:33:0c:65:e7:fc:b1:b9: 4f:29:99:fd:6d:d7:dd:2b:1f:32:69:cf:09:2f:cf:db:34:be: 4b:01:6c:21:98:d2:dc:17:42:57:0f:53:93:f7:eb:0d:d7:73: 93:3b:8a:76:35:4b:32:a9:ff:1e:1c:06:08:0a:5e:dc:ce:04: 28:fb:23:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4ljrHFll7Rtt6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MTllNmM0MGYtYjc5MS00MzUzLThiZDktMGIzOTA0MThmN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWWnWaO48FXfT3xxukcxhK+cgECbzbHRKHKh bEMyjg2YwkAuxN2lhyvsTUziXNzldW51KDEY47aGNlICHC6dXzKW9zAFg2oMY/N3 qc0K/J59Yzxfz8IZ1jy2Rx8BI5obA3kkn043/aJdRD0e2GT4+OOI5BcO5DrQza3S wzfIfnrT6C7bXY+MwE2cjLgNUSmTp6HvWPR+1R/mhZ9KsbsvxM9ihKWqVuuK7jlA AKDnTtV0eLFWxRa4B+irBhTuCM7bQoFuQ5ETZhzekCrVFbKRWXbjGjkdpUiBOiHv V4jE5z0+WrsnY2GBw1m54kFnxFetxCow7oup8hmGtiedmlDt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKWCpigIx7hpmTf7D4ou/GgjbJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNhY2U0NTAtZWQ3ZS0z MTY3LThmYzEtNjA0MzcwMGVlYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRe0onHMIvLEFKw9Wi4J/7M8gHKEaEsozjkbbLPV/tTTRu7Nl4GvhHA sZVeYq4vDse4qwsc0VUJIA+db4D9J1nACMxR68AJXUAN0qTrU68UNgTBHq/1QSm6 X3wwxX3mazeUsVfVco8NoTXV5mHGEvsySNOOLoo9RHYX0NIuXcyjK+rfzScoLod3 LW7VO/LOnZtbmRXHsWA8dTtn+c0MCTcwjeQhCTNMV7AxRrf7HV2+kqNDQhEuUB1z 4pXVHi1OMwxl5/yxuU8pmf1t190rHzJpzwkvz9s0vksBbCGY0twXQlcPU5P36w3X c5M7inY1SzKp/x4cBggKXtzOBCj7I8I= -----END CERTIFICATE-----Generated at Sat Apr 5 13:13:18 2025 by rpki-client