$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa File: 8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa (raw, json) Hash identifier: NaaiPtiYjW00p5wALJ4CGQdsvuHHZe4/Rd+6B3fZYuk= Subject key identifier: 3B:1B:98:86:E4:2E:23:45:0F:04:6B:A6:68:32:E0:4F:AD:67:55:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB954BECC66186FBCA8B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.211.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:95:4b:ec:c6:61:86:fb:ca:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=29650f99-d578-4598-950c-56490968f5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:0e:1b:67:d7:65:44:65:a7:55:7e:70:19: 36:09:19:f0:fa:a7:97:41:4c:df:bc:fd:69:68:a2: f4:af:f4:2e:9f:3e:ad:7e:fd:92:75:d0:ed:f0:d3: 68:53:f2:ac:39:4f:dd:c7:1f:4f:db:5a:7a:e1:1d: 27:69:6b:08:13:95:03:21:1d:b2:7b:e3:d1:dd:f9: 94:3d:d5:3b:df:5d:ee:50:7b:46:8f:a5:0a:bc:29: 2f:7f:7e:a1:3c:08:38:79:01:9f:4d:8f:b0:4a:71: de:b1:9a:a4:af:7e:c4:f3:16:29:9e:7b:17:8d:72: 39:3d:2f:a3:2f:d2:1d:ea:b2:38:ef:3d:64:01:a5: b6:33:d0:6c:12:01:42:86:4b:16:22:80:fe:99:20: a5:c8:4e:00:f6:94:b4:b5:6e:34:28:8b:14:67:3f: fd:c1:e9:30:c8:03:df:17:b2:d9:8f:a7:b5:3a:08: 49:3c:48:9f:ff:87:2b:4f:42:ae:4f:1a:61:49:1e: a5:03:39:67:0e:97:42:b2:df:7e:09:3c:f6:b5:b0: 25:d4:00:b7:08:10:a8:3c:98:90:73:a4:92:c1:76: 11:b1:9f:e5:79:94:09:a7:df:02:a6:5f:0d:29:1d: 4a:8f:d0:71:30:92:02:1b:2c:03:94:8b:4a:28:2d: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:98:86:E4:2E:23:45:0F:04:6B:A6:68:32:E0:4F:AD:67:55:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ea:cf:04:1e:4a:4c:8b:8d:45:25:0c:c2:76:a7:cf:23:c8: 13:cc:80:73:aa:2e:40:2a:f3:b7:de:43:57:4e:c0:38:0d:82: 14:bb:e7:fe:d6:49:3b:e5:03:32:c8:7e:1f:ec:e3:b3:ff:58: 4c:07:00:02:c4:b4:55:d1:d5:36:73:7c:4a:e9:e5:05:4d:2d: 45:bf:96:4b:62:e4:42:bb:e2:9d:28:81:f0:32:58:99:1d:a9: 25:b1:fe:81:37:fb:a1:47:32:13:3f:4f:69:36:d4:fc:28:2b: 07:e0:be:05:8e:43:e5:e5:45:2d:19:6c:b0:27:b3:c4:66:b7: 63:b7:25:db:b5:4e:80:ad:57:c1:c6:82:bd:eb:78:f7:07:8b: 14:a9:3f:ad:7d:fe:21:b3:54:7d:a1:29:57:98:be:ce:b1:6d: 64:a1:0e:af:a5:98:bb:20:d5:2d:df:c1:a7:d5:7e:66:56:6f: 26:e7:3c:54:5a:c7:12:5e:ad:d2:0c:fb:56:6b:38:73:7a:fd: 70:fa:5d:fd:6f:e2:a9:72:8f:58:3e:73:4d:a5:26:87:9e:35: 10:8d:68:10:2f:49:74:f8:14:9f:96:fd:a5:d0:b7:cd:56:61: ce:29:20:61:70:96:2d:cd:35:61:5d:dc:66:de:01:76:fc:f5: 32:db:d5:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5VL7MZhhvvKi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk Mjk2NTBmOTktZDU3OC00NTk4LTk1MGMtNTY0OTA5NjhmNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04EOG2fXZURlp1V+cBk2CRnw+qeXQUzfvP1p aKL0r/Qunz6tfv2SddDt8NNoU/KsOU/dxx9P21p64R0naWsIE5UDIR2ye+PR3fmU PdU7313uUHtGj6UKvCkvf36hPAg4eQGfTY+wSnHesZqkr37E8xYpnnsXjXI5PS+j L9Id6rI47z1kAaW2M9BsEgFChksWIoD+mSClyE4A9pS0tW40KIsUZz/9wekwyAPf F7LZj6e1OghJPEif/4crT0KuTxphSR6lAzlnDpdCst9+CTz2tbAl1AC3CBCoPJiQ c6SSwXYRsZ/leZQJp98Cpl8NKR1Kj9BxMJICGywDlItKKC2ghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsbmIbkLiNFDwRrpmgy4E+tZ1VZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3MmU5ZjQtMjU1NS0z OTk0LWEwYjEtODFjMmY3NDNlODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbqzwQeSkyLjUUlDMJ2p88jyBPMgHOqLkAq87feQ1dOwDgNghS75/7W STvlAzLIfh/s47P/WEwHAALEtFXR1TZzfErp5QVNLUW/lkti5EK74p0ogfAyWJkd qSWx/oE3+6FHMhM/T2k21PwoKwfgvgWOQ+XlRS0ZbLAns8Rmt2O3Jdu1ToCtV8HG gr3rePcHixSpP619/iGzVH2hKVeYvs6xbWShDq+lmLsg1S3fwafVfmZWbybnPFRa xxJerdIM+1ZrOHN6/XD6Xf1v4qlyj1g+c02lJoeeNRCNaBAvSXT4FJ+W/aXQt81W Yc4pIGFwli3NNWFd3GbeAXb89TLb1Y8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:26 2025 by rpki-client