$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bbc77dd-d82a-3274-84d6-0fed4ecde036.roa File: 9bbc77dd-d82a-3274-84d6-0fed4ecde036.roa (raw, json) Hash identifier: dc/hLPKV3F7F5ff6j4zl+AHM8W+CCcp+nh5b4KwVykY= Subject key identifier: 15:70:9B:81:E6:56:CE:B2:71:95:14:5F:50:5F:86:8C:30:16:55:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB8BA3F363C1863B54AA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bbc77dd-d82a-3274-84d6-0fed4ecde036.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.210.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:8b:a3:f3:63:c1:86:3b:54:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=8f038bee-920c-4e18-8a72-ada11f9fbdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:f2:d3:d0:54:69:cc:10:d2:ae:ec:07:19: 90:e8:c7:fc:c1:77:6b:05:77:4f:6f:1e:cb:37:89: 27:43:7f:d4:b5:85:38:47:a8:89:92:19:cc:17:bf: e0:2d:82:91:5e:27:a4:40:41:25:f9:cc:67:49:f6: c7:43:b2:1d:d7:7c:15:49:bc:f1:17:45:70:54:9a: 30:7e:75:38:03:e5:dd:3b:9b:d8:07:48:d7:2d:b5: 7a:ba:66:cc:f5:65:40:6c:a7:9a:1d:12:12:41:56: 6a:e9:87:49:f7:e7:e6:f4:e4:2a:ef:35:65:88:d4: 8b:4c:41:6f:fa:b9:96:92:42:57:8d:82:3c:c5:be: f4:49:f9:31:97:41:e4:54:a2:25:18:a5:fc:21:18: 88:8b:ce:2d:6a:4a:83:22:a0:09:ff:16:d6:c7:72: 65:21:8a:09:a3:95:02:ca:f9:05:4b:48:4b:d1:7b: 08:34:f9:9c:ba:00:a2:aa:48:93:72:45:f1:45:68: 2d:9f:3c:38:07:85:42:0f:ba:bf:0c:fc:ea:ae:51: 41:19:c0:02:d6:83:a0:ce:e9:fe:cc:08:6a:4e:f6: 03:37:5d:b3:69:1d:22:08:a9:c7:33:bb:0d:a7:c7: 37:84:7a:e9:fb:83:15:2f:2b:90:f9:fe:44:9f:e2: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:70:9B:81:E6:56:CE:B2:71:95:14:5F:50:5F:86:8C:30:16:55:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bbc77dd-d82a-3274-84d6-0fed4ecde036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1a:ce:50:59:43:a6:94:2a:c5:b6:e7:71:de:a1:85:f1:9f: be:4c:6e:99:c4:84:e6:72:b8:6b:16:c5:b2:13:bd:35:35:31: 68:9d:6a:00:26:6a:cb:03:e8:01:aa:69:9b:c8:04:5f:42:c8: 61:7d:3f:e4:00:66:ed:1b:91:26:d2:2d:e2:ef:7e:1f:13:a8: 89:5b:2f:1e:bf:1e:90:3f:fa:c9:61:49:53:8b:10:56:b3:b6: bc:6b:31:a6:5f:01:48:a7:96:28:76:45:c9:32:ec:f3:77:14: f7:bc:08:7c:4f:68:ee:61:2d:75:58:40:05:bd:60:50:83:dc: 51:9f:69:66:e6:a5:d8:f8:6f:13:7b:3a:d2:b5:ef:33:de:b8: 93:68:64:52:06:95:29:20:ca:d1:c6:75:be:3e:a5:3e:37:19: 33:da:f5:31:45:fb:27:f4:ee:0b:7c:ae:92:be:7d:85:8b:9b: 30:03:43:5a:9a:66:7d:b1:8e:1c:44:6a:47:1a:54:e9:ec:09: 08:57:c8:89:96:45:83:a7:bd:f5:d1:ee:4b:14:ec:52:b0:e3: 56:31:0b:9c:ce:a8:67:ec:9a:db:5e:7a:b2:d9:e1:ce:3c:51: 07:48:4e:7f:16:40:4b:e4:0b:53:fd:da:b1:48:a3:02:52:55: ae:09:28:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4uj82PBhjtUqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk OGYwMzhiZWUtOTIwYy00ZTE4LThhNzItYWRhMTFmOWZiZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6zy09BUacwQ0q7sBxmQ6Mf8wXdrBXdPbx7L N4knQ3/UtYU4R6iJkhnMF7/gLYKRXiekQEEl+cxnSfbHQ7Id13wVSbzxF0VwVJow fnU4A+XdO5vYB0jXLbV6umbM9WVAbKeaHRISQVZq6YdJ9+fm9OQq7zVliNSLTEFv +rmWkkJXjYI8xb70Sfkxl0HkVKIlGKX8IRiIi84takqDIqAJ/xbWx3JlIYoJo5UC yvkFS0hL0XsINPmcugCiqkiTckXxRWgtnzw4B4VCD7q/DPzqrlFBGcAC1oOgzun+ zAhqTvYDN12zaR0iCKnHM7sNp8c3hHrp+4MVLyuQ+f5En+KT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVwm4HmVs6ycZUUX1BfhowwFlXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJiYzc3ZGQtZDgyYS0z Mjc0LTg0ZDYtMGZlZDRlY2RlMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9LcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4azlBZQ6aUKsW253HeoYXxn75MbpnEhOZyuGsWxbITvTU1MWidagAm assD6AGqaZvIBF9CyGF9P+QAZu0bkSbSLeLvfh8TqIlbLx6/HpA/+slhSVOLEFaz trxrMaZfAUinlih2Rcky7PN3FPe8CHxPaO5hLXVYQAW9YFCD3FGfaWbmpdj4bxN7 OtK17zPeuJNoZFIGlSkgytHGdb4+pT43GTPa9TFF+yf07gt8rpK+fYWLmzADQ1qa Zn2xjhxEakcaVOnsCQhXyImWRYOnvfXR7ksU7FKw41YxC5zOqGfsmtteerLZ4c48 UQdITn8WQEvkC1P92rFIowJSVa4JKFM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:37 2025 by rpki-client