$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa File: 74a380e0-ee97-3374-9a06-7b2afac09d11.roa (raw, json) Hash identifier: J3MuEON322+DAVk8LBlyuGu9QaF/y+FHaki7sMOtwJg= Subject key identifier: 4A:81:64:7C:2D:0F:AB:EB:CE:70:07:49:4B:C5:DB:76:17:11:6E:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB895626EF4743D8A12000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:89:56:26:ef:47:43:d8:a1:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=7b524e8b-645e-4f54-8b95-9a4e8296ddd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:d0:46:ff:f7:0e:6f:d0:63:fa:78:aa:a0: 52:fe:43:94:31:9f:48:13:c3:3b:99:9d:ad:9a:6a: 82:ed:cc:0b:7f:e6:54:3a:02:de:eb:d0:bb:fe:80: 9d:8f:dd:ef:b7:58:23:f1:a1:44:13:07:a6:14:86: 5f:c4:88:a4:81:96:d0:b1:e3:be:54:34:53:50:87: d6:9d:3f:34:42:8c:a6:14:b4:3d:fe:40:f2:49:21: 31:47:e0:59:2b:a5:f3:eb:49:d0:7b:0a:a9:28:eb: 87:cc:60:eb:f3:86:3f:ac:98:a7:8b:0c:6a:87:3b: cb:ca:13:50:a9:ef:12:5e:ea:f4:49:2b:74:03:fa: b5:2e:95:b8:35:b7:25:5a:17:52:40:24:4b:b2:9c: 7e:7d:e7:45:44:f5:54:4e:a5:83:ca:b7:5e:62:90: d7:f2:0e:73:72:2f:41:aa:20:de:04:8a:c8:5c:57: c5:c1:b7:3d:56:26:7d:18:30:a7:c0:dc:44:0c:82: ee:5a:92:7e:57:a9:6c:3d:ae:4a:58:e0:b5:31:82: a6:19:42:6d:d7:ef:d8:9a:ed:03:06:38:3b:b1:83: 42:2a:a9:8f:01:e9:66:30:13:12:b7:ee:fa:92:db: 17:08:82:89:bb:e0:f3:81:c4:bf:db:5b:c9:0e:48: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:64:7C:2D:0F:AB:EB:CE:70:07:49:4B:C5:DB:76:17:11:6E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ac:77:26:5f:ad:d6:73:84:68:2e:60:a4:25:4f:5c:58:3c: 72:99:fb:61:ca:66:9e:a2:3f:30:3d:f7:ce:4b:00:08:5e:ec: d6:98:5f:1a:ab:9b:6a:da:3a:f3:a3:32:a6:fd:a1:e9:54:16: f8:c1:60:4a:e7:b8:3c:2b:a7:bb:68:f1:30:1e:d4:a9:30:52: e7:4b:04:16:30:f6:ca:68:d7:86:f2:35:03:2f:7f:b0:1e:89: f6:75:d7:f0:ac:a7:bd:ed:29:24:e4:6e:93:0a:df:54:e9:a5: 98:cf:b1:75:89:d2:c9:4d:62:56:f1:84:43:cc:91:5b:0c:bb: 01:97:c2:c7:78:b6:6a:7d:f3:ac:a6:fd:40:fb:a9:59:0a:6c: b9:b0:21:92:13:ba:b6:54:a6:b8:d7:10:ef:1b:b3:81:62:7f: 08:7d:43:24:21:f1:4f:22:1d:3e:ca:62:e8:24:89:1f:9b:be: 10:86:16:33:6f:3a:cb:11:a3:27:4f:20:bc:12:b4:64:0d:a9: 31:c4:eb:9c:c7:3a:65:f1:81:f5:e1:b9:3a:f4:b2:ab:97:46: 66:d2:5e:b0:b8:c1:e6:91:0b:4b:86:d9:02:31:35:15:66:e5: 12:42:ed:7d:5c:47:59:4f:9f:3f:9a:ad:f9:b0:e4:db:c2:d3: f4:74:56:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4lWJu9HQ9ihIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk N2I1MjRlOGItNjQ1ZS00ZjU0LThiOTUtOWE0ZTgyOTZkZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVzQRv/3Dm/QY/p4qqBS/kOUMZ9IE8M7mZ2t mmqC7cwLf+ZUOgLe69C7/oCdj93vt1gj8aFEEwemFIZfxIikgZbQseO+VDRTUIfW nT80QoymFLQ9/kDySSExR+BZK6Xz60nQewqpKOuHzGDr84Y/rJiniwxqhzvLyhNQ qe8SXur0SSt0A/q1LpW4NbclWhdSQCRLspx+fedFRPVUTqWDyrdeYpDX8g5zci9B qiDeBIrIXFfFwbc9ViZ9GDCnwNxEDILuWpJ+V6lsPa5KWOC1MYKmGUJt1+/Ymu0D Bjg7sYNCKqmPAelmMBMSt+76ktsXCIKJu+DzgcS/21vJDkitawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqBZHwtD6vrznAHSUvF23YXEW5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRhMzgwZTAtZWU5Ny0z Mzc0LTlhMDYtN2IyYWZhYzA5ZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9F9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOsdyZfrdZzhGguYKQlT1xYPHKZ+2HKZp6iPzA9985LAAhe7NaYXxqr m2raOvOjMqb9oelUFvjBYErnuDwrp7to8TAe1KkwUudLBBYw9spo14byNQMvf7Ae ifZ11/Csp73tKSTkbpMK31TppZjPsXWJ0slNYlbxhEPMkVsMuwGXwsd4tmp986ym /UD7qVkKbLmwIZITurZUprjXEO8bs4Fifwh9QyQh8U8iHT7KYugkiR+bvhCGFjNv OssRoydPILwStGQNqTHE65zHOmXxgfXhuTr0squXRmbSXrC4weaRC0uG2QIxNRVm 5RJC7X1cR1lPnz+arfmw5NvC0/R0Vmk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:58 2025 by rpki-client