$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f7429fc-34ff-358d-b0bf-29380de2f9fd.roa File: 7f7429fc-34ff-358d-b0bf-29380de2f9fd.roa (raw, json) Hash identifier: ijJK885mAYSJ1etxjSTcSuCdcqlAFtnJAg3dNbtdcVw= Subject key identifier: B7:E0:0C:67:0D:C1:1D:15:E5:90:8A:AD:67:EC:C1:7F:81:8F:C7:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495152186B0085A15AF8B16D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f7429fc-34ff-358d-b0bf-29380de2f9fd.roa Signing time: Wed 26 Mar 2025 15:59:43 +0000 ROA not before: Wed 26 Mar 2025 15:59:43 +0000 ROA not after: Tue 24 Jun 2025 15:59:43 +0000 asID: 35994 IP address blocks: 23.214.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:52:18:6b:00:85:a1:5a:f8:b1:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 26 15:59:43 2025 GMT Not After : Jun 24 15:59:43 2025 GMT Subject: CN=605e2de0-24c7-4c90-b38f-d50fead9d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:c9:9a:3c:7c:1f:8a:5e:05:a2:7f:7c:ea: 6c:1e:04:10:dc:0b:0a:2d:0a:06:ad:9b:f4:35:59: aa:2d:e0:68:f4:7d:94:93:7a:0a:e1:db:ae:92:77: 8c:79:22:f3:a8:73:c4:98:cd:33:99:f9:19:3d:44: 4f:a1:0b:12:17:0e:2c:1c:27:82:89:54:7c:c3:68: 66:5a:35:8d:2d:24:71:6c:1c:16:00:e5:14:11:4a: 17:86:f0:a2:11:95:9d:f6:2a:dd:31:c9:c0:06:84: 48:e2:4e:4b:4f:a6:7d:67:14:25:7f:9c:bd:ff:20: 77:1a:4d:7a:fd:86:73:9f:57:4d:c3:3b:08:81:e4: c5:12:da:2e:42:79:f2:88:31:86:54:a1:c6:d9:85: 2b:b6:c8:cb:12:f9:4d:ed:78:b2:9e:6e:03:4a:e5: 51:a6:85:87:cc:a7:b1:5a:98:b7:fa:e1:77:d2:be: 6f:0f:25:8d:1c:41:c8:83:88:44:80:06:6e:72:06: 90:23:3c:db:41:83:ca:81:05:b4:28:51:24:33:e4: 61:b6:7e:6e:66:23:88:b3:da:ba:96:ee:ad:fc:4c: 3d:9b:b6:05:55:25:f5:08:0e:10:c2:cd:16:51:8b: 93:f1:86:6c:25:ef:6a:32:3d:04:1a:a6:80:0b:9a: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E0:0C:67:0D:C1:1D:15:E5:90:8A:AD:67:EC:C1:7F:81:8F:C7:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f7429fc-34ff-358d-b0bf-29380de2f9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2a:84:16:d5:fd:ee:a2:93:97:4b:0c:9e:ba:41:f9:0f:6b: 72:b2:bf:d7:91:7b:47:2b:83:b4:21:ae:92:f4:69:67:aa:02: 4d:e6:ad:0f:af:75:8b:80:ec:4c:75:2f:fd:b1:60:99:15:5e: 64:81:6d:11:6e:b0:c2:89:66:03:fa:b4:40:cf:71:b4:15:45: 25:62:4d:2d:5e:4a:6e:2b:d1:4f:40:ff:96:31:a6:99:f1:ed: ba:52:80:68:bc:06:b1:92:1e:66:8d:26:a6:70:55:21:6f:be: 09:24:b4:ce:2a:b1:16:1f:98:c5:77:e7:3e:e2:8a:db:cb:4d: 08:97:6c:67:82:e5:db:bc:23:63:59:90:59:c6:ae:2e:1a:53: c6:ec:72:0d:8d:7f:fb:3f:bc:ac:31:6b:3c:7b:b2:26:0c:ed: 90:1f:c5:17:1b:d7:38:c6:21:b4:85:82:d7:56:2f:6c:2a:20: 32:ca:ac:8c:fd:ce:2d:54:3b:0f:1a:60:8a:34:ba:95:17:b4: bc:3a:00:e4:f7:f6:03:d9:c7:bc:ed:c2:f7:a6:3d:5b:36:31: 48:64:6f:e7:f4:31:64:b7:ed:01:9f:31:6d:a4:6d:8d:c2:0b: 8a:dc:7d:a2:08:05:7b:a3:0d:70:30:92:7b:44:b8:94:4b:29: 8c:da:d9:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRUhhrAIWhWvixbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNjE1NTk0M1oXDTI1MDYyNDE1NTk0M1owLzEtMCsGA1UEAxMk NjA1ZTJkZTAtMjRjNy00YzkwLWIzOGYtZDUwZmVhZDlkMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp3Jmjx8H4peBaJ/fOpsHgQQ3AsKLQoGrZv0 NVmqLeBo9H2Uk3oK4duukneMeSLzqHPEmM0zmfkZPURPoQsSFw4sHCeCiVR8w2hm WjWNLSRxbBwWAOUUEUoXhvCiEZWd9irdMcnABoRI4k5LT6Z9ZxQlf5y9/yB3Gk16 /YZzn1dNwzsIgeTFEtouQnnyiDGGVKHG2YUrtsjLEvlN7Xiynm4DSuVRpoWHzKex Wpi3+uF30r5vDyWNHEHIg4hEgAZucgaQIzzbQYPKgQW0KFEkM+Rhtn5uZiOIs9q6 lu6t/Ew9m7YFVSX1CA4Qws0WUYuT8YZsJe9qMj0EGqaAC5o2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfgDGcNwR0V5ZCKrWfswX+Bj8duMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Y3NDI5ZmMtMzRmZi0z NThkLWIwYmYtMjkzODBkZTJmOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9YXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYqhBbV/e6ik5dLDJ66QfkPa3Kyv9eRe0crg7QhrpL0aWeqAk3mrQ+v dYuA7Ex1L/2xYJkVXmSBbRFusMKJZgP6tEDPcbQVRSViTS1eSm4r0U9A/5Yxppnx 7bpSgGi8BrGSHmaNJqZwVSFvvgkktM4qsRYfmMV35z7iitvLTQiXbGeC5du8I2NZ kFnGri4aU8bscg2Nf/s/vKwxazx7siYM7ZAfxRcb1zjGIbSFgtdWL2wqIDLKrIz9 zi1UOw8aYIo0upUXtLw6AOT39gPZx7ztwvemPVs2MUhkb+f0MWS37QGfMW2kbY3C C4rcfaIIBXujDXAwkntEuJRLKYza2fo= -----END CERTIFICATE-----Generated at Sat Apr 5 13:13:34 2025 by rpki-client