$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa File: 7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa (raw, json) Hash identifier: rxW51T/f2UJEMxlS/scaTxiyOVMGI3KcklRqoqTnLZI= Subject key identifier: 75:B8:10:DD:DA:C2:B1:17:7C:97:8C:E4:C6:8C:0A:1B:78:C1:C7:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830CA42267099CB43309A88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.201.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ca:42:26:70:99:cb:43:30:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=ccad3e0e-97a0-439b-a89d-e65435e50a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5e:f2:f5:e3:47:55:c4:e4:0f:61:c5:3a:df: 5b:58:c3:19:42:35:99:d0:8b:c5:c8:4b:a8:ef:8d: 85:45:73:23:f2:72:33:0e:9b:30:25:af:52:3b:a0: 0f:e9:95:79:25:60:d6:8c:4c:e7:0f:aa:de:09:b3: e3:45:a3:d2:a4:4d:ae:b5:5b:f3:c5:40:cd:e1:73: 3b:4d:2d:3e:38:f8:fc:9b:6f:21:96:c6:06:c5:6d: 1c:df:44:b1:bd:17:0b:00:5b:84:3b:f7:3f:ea:65: b5:1f:4d:4e:d6:df:89:9f:b9:78:c6:2f:e9:df:6d: b2:1e:29:ec:8f:4d:09:65:43:58:81:f7:3d:95:b2: b1:6a:62:f4:9f:67:a0:2d:51:47:fd:1b:65:51:80: fe:9b:6c:0d:0c:87:53:23:a8:96:88:ef:4c:6c:2a: 29:c8:1c:1c:dd:ca:8e:cf:47:23:d7:1a:81:de:02: 8f:9f:b4:01:f0:07:c8:7e:0d:bd:aa:2a:a3:df:d0: d1:4e:eb:17:03:2e:6c:bf:ef:6b:b2:fd:ef:90:c1: 2f:52:7f:4b:65:04:0f:1d:06:e0:a6:a8:c5:a0:1a: 6a:dd:c2:71:79:43:66:66:82:85:3d:f6:18:ab:66: 83:2a:0c:83:2b:91:d8:2d:99:9e:5e:2e:40:b3:38: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:10:DD:DA:C2:B1:17:7C:97:8C:E4:C6:8C:0A:1B:78:C1:C7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a1dd8ef-6c83-3bb4-b37a-403111fe5c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:96:36:3e:2a:00:b8:28:0e:a2:f3:78:f6:ae:21:d3:fc: fa:ce:74:8b:1d:50:f8:2d:ed:5e:88:c3:aa:19:be:f5:cf:9a: d6:c9:03:f9:f4:f4:17:35:14:78:86:82:06:d7:30:32:fe:40: 99:24:35:ff:0f:b6:49:78:75:92:52:ad:b7:ea:23:49:f1:0e: c7:58:59:b1:ae:73:87:af:72:1b:65:77:6d:d5:30:b0:bd:8e: 5e:f5:a1:ff:67:7e:fd:8a:b2:9f:1e:7f:e4:bc:b3:8f:ba:ac: d0:40:d0:4b:89:08:d3:97:e3:a3:4b:a0:02:a3:5b:7f:48:c4: 06:c2:77:d4:8c:62:a4:87:2e:29:40:a5:a2:50:ef:55:8b:c8: 8f:01:d9:b9:d4:26:0b:b1:1f:ff:db:80:94:59:6b:85:8d:ca: 14:dc:c0:17:8d:df:9a:90:8d:c6:9a:a1:f7:66:00:f1:31:98: 2b:be:42:57:49:90:f1:6f:6f:a7:16:4b:b4:13:b3:b0:c6:fa: 20:c7:82:c7:ed:80:2c:2c:5d:d7:62:78:13:67:41:93:c2:07: 1f:83:4f:70:b9:c0:d3:0d:e3:0b:7a:cc:c6:27:d8:aa:3e:aa: e7:db:01:ca:d1:74:83:8b:60:0a:59:ea:e1:59:0c:17:1e:03: 56:d1:fd:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMMpCJnCZy0MwmogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk Y2NhZDNlMGUtOTdhMC00MzliLWE4OWQtZTY1NDM1ZTUwYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F7y9eNHVcTkD2HFOt9bWMMZQjWZ0IvFyEuo 742FRXMj8nIzDpswJa9SO6AP6ZV5JWDWjEznD6reCbPjRaPSpE2utVvzxUDN4XM7 TS0+OPj8m28hlsYGxW0c30SxvRcLAFuEO/c/6mW1H01O1t+Jn7l4xi/p322yHins j00JZUNYgfc9lbKxamL0n2egLVFH/RtlUYD+m2wNDIdTI6iWiO9MbCopyBwc3cqO z0cj1xqB3gKPn7QB8AfIfg29qiqj39DRTusXAy5sv+9rsv3vkMEvUn9LZQQPHQbg pqjFoBpq3cJxeUNmZoKFPfYYq2aDKgyDK5HYLZmeXi5AsziVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW4EN3awrEXfJeM5MaMCht4wceaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ExZGQ4ZWYtNmM4My0z YmI0LWIzN2EtNDAzMTExZmU1YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+ljY+KgC4KA6i83j2riHT/PrOdIsdUPgt7V6Iw6oZvvXPmtbJA/n0 9Bc1FHiGggbXMDL+QJkkNf8Ptkl4dZJSrbfqI0nxDsdYWbGuc4evchtld23VMLC9 jl71of9nfv2Ksp8ef+S8s4+6rNBA0EuJCNOX46NLoAKjW39IxAbCd9SMYqSHLilA paJQ71WLyI8B2bnUJguxH//bgJRZa4WNyhTcwBeN35qQjcaaofdmAPExmCu+QldJ kPFvb6cWS7QTs7DG+iDHgsftgCwsXddieBNnQZPCBx+DT3C5wNMN4wt6zMYn2Ko+ qufbAcrRdIOLYApZ6uFZDBceA1bR/fI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:43 2025 by rpki-client