$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa File: 9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa (raw, json) Hash identifier: jd+dKJILwYKi3CTQ9FTApSXt7LhGB+r4M1J8VXnB4wA= Subject key identifier: 0A:72:E9:DD:28:CD:4E:20:76:7D:16:7A:2B:7F:0C:01:6B:50:47:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB95A081651B7283101B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.211.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:95:a0:81:65:1b:72:83:10:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=4b19b6b4-3150-407a-953a-9926b8e84fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:22:c7:32:ee:81:e9:6c:15:9e:93:a7:45: c4:58:2f:7e:d1:63:ca:b6:f6:f3:ce:e2:f7:7c:d5: 41:67:e3:d0:fd:76:9f:b4:61:20:67:96:19:a7:9e: 0f:ed:df:a1:bf:e3:60:ae:5c:28:74:f6:76:82:5d: fe:83:3a:bb:c7:2d:89:1d:f5:d9:2b:2b:12:53:84: 79:71:ba:6d:16:b9:e1:1c:ff:d6:34:3b:5e:cd:8a: 5b:1c:a1:04:b6:2a:e1:5a:20:ff:b2:f9:63:2b:02: 77:b2:24:55:21:73:91:6a:38:b9:84:cd:38:49:9c: ba:db:7d:39:de:17:12:ae:3d:65:f6:4b:4a:de:32: 76:a7:af:d3:d3:ee:df:24:a7:fc:3a:23:88:75:7b: ef:ee:87:ec:1a:e6:0f:80:b9:64:c8:d6:cb:dc:8b: 6b:6a:ba:7d:79:f4:c6:47:86:31:7b:b5:c3:bd:0b: 9c:44:35:b6:28:42:30:cd:fd:d7:7a:5a:37:66:eb: ba:63:04:69:08:0c:12:b8:7b:d1:f6:95:74:ac:3c: 9e:49:a2:c2:36:2b:9c:49:02:74:36:52:25:88:b2: 92:0b:9e:1b:2a:ed:24:70:72:45:59:25:4b:5a:4d: bc:0c:fa:0a:35:37:f9:0e:32:cb:72:0e:bb:da:68: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:72:E9:DD:28:CD:4E:20:76:7D:16:7A:2B:7F:0C:01:6B:50:47:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5a:f1:5a:e8:21:ed:a6:a2:4d:c4:af:26:42:20:84:a8:a2: f1:32:8f:b6:2b:ca:12:d2:d0:40:d8:4d:0e:a6:d6:d7:5b:3e: 16:0f:41:d3:09:8a:ee:91:2b:eb:5d:40:4e:d8:8f:47:2b:0a: 15:24:43:4f:52:c9:76:c7:70:ab:25:77:fa:de:ac:a4:f0:01: a6:87:2e:3c:ab:73:eb:75:00:e0:a1:a2:85:14:cc:e3:c5:34: 5b:06:22:2d:5f:53:f3:26:6f:d2:22:26:4a:c6:cc:51:bb:9e: 21:90:1c:b1:c7:46:f8:7f:62:e4:72:fd:7b:1e:e7:8b:6d:ad: 6c:9c:a8:f5:2c:3f:1f:24:85:69:ae:dc:96:32:2a:ba:0c:ab: 57:36:e8:e8:e1:cb:cd:3c:49:72:99:06:8a:b3:ef:ac:c2:58: 47:f7:9e:db:df:11:df:a5:4a:9e:47:5e:e8:77:bb:15:a8:9e: 84:4f:73:04:8d:7f:df:92:73:2e:80:3d:d9:45:65:3a:8b:e0: 02:37:68:d0:58:ba:bf:02:ff:c8:31:c1:fd:21:9d:23:e5:4a: ba:04:04:24:0a:05:69:8e:ee:9e:60:9d:14:df:e5:0d:31:d8: 89:bc:f8:54:cf:ea:ae:83:9e:9f:e9:ef:47:fd:7d:1f:42:1a: 4e:b6:b1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5WggWUbcoMQGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NGIxOWI2YjQtMzE1MC00MDdhLTk1M2EtOTkyNmI4ZTg0ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPEixzLugelsFZ6Tp0XEWC9+0WPKtvbzzuL3 fNVBZ+PQ/XaftGEgZ5YZp54P7d+hv+NgrlwodPZ2gl3+gzq7xy2JHfXZKysSU4R5 cbptFrnhHP/WNDtezYpbHKEEtirhWiD/svljKwJ3siRVIXORaji5hM04SZy62305 3hcSrj1l9ktK3jJ2p6/T0+7fJKf8OiOIdXvv7ofsGuYPgLlkyNbL3Itrarp9efTG R4Yxe7XDvQucRDW2KEIwzf3Xelo3Zuu6YwRpCAwSuHvR9pV0rDyeSaLCNiucSQJ0 NlIliLKSC54bKu0kcHJFWSVLWk28DPoKNTf5DjLLcg672mgNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApy6d0ozU4gdn0Weit/DAFrUEfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM0ZWI2ZGUtYzJlNS0z OTMzLWI4MGUtMjU3OWMxZDAyYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANa8VroIe2mok3EryZCIISoovEyj7YryhLS0EDYTQ6m1tdbPhYPQdMJ iu6RK+tdQE7Yj0crChUkQ09SyXbHcKsld/rerKTwAaaHLjyrc+t1AOChooUUzOPF NFsGIi1fU/Mmb9IiJkrGzFG7niGQHLHHRvh/YuRy/Xse54ttrWycqPUsPx8khWmu 3JYyKroMq1c26Ojhy808SXKZBoqz76zCWEf3ntvfEd+lSp5HXuh3uxWonoRPcwSN f9+Scy6APdlFZTqL4AI3aNBYur8C/8gxwf0hnSPlSroEBCQKBWmO7p5gnRTf5Q0x 2Im8+FTP6q6Dnp/p70f9fR9CGk62saA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:50 2025 by rpki-client