$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa File: b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa (raw, json) Hash identifier: gqIXGnSuRDpoxs/HVtaWqM8SM1zK21T+TtWOsPNXk+Q= Subject key identifier: 61:68:B0:A2:7B:B0:BA:6A:19:AB:1E:05:BE:E4:DE:A7:73:9E:60:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA56446E0BEAEC8011B76200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 24319 IP address blocks: 23.208.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Mar 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:44:6e:0b:ea:ec:80:11:b7:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=5f537d63-5ffd-481f-a0ad-48d8078c07d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:ba:f3:90:a5:d0:07:45:72:17:e5:75:5e: 07:77:4a:cf:d1:88:2e:22:d4:50:d8:80:95:16:60: f4:23:e5:0b:81:69:44:d0:52:61:e6:3c:27:16:41: 81:99:22:0f:df:49:c0:44:8c:45:92:f0:41:78:0f: 88:7f:71:43:56:9a:ef:21:e7:cd:c7:08:be:b5:ff: 15:a1:4d:76:8c:81:8a:3f:92:93:b4:14:b6:c6:26: b0:44:65:e3:d7:01:c8:c7:bd:f6:ca:39:35:bf:90: e1:37:2b:4a:55:1f:9d:dd:8b:e4:4d:a3:d2:58:de: 92:af:a8:9a:53:15:42:59:90:aa:ce:cb:02:60:59: c0:76:4d:5c:2a:4f:72:20:5b:64:31:67:3a:17:42: cb:ec:06:bd:55:34:90:fb:1b:49:d8:2b:17:bb:3f: 68:d9:ff:5c:63:79:6b:da:84:b6:52:af:0f:4f:14: a9:2a:cf:47:cd:c3:f5:fe:11:f7:54:9c:dc:2a:87: 76:29:90:1a:90:b9:05:07:fd:68:a0:ba:73:a8:33: d7:9a:b8:39:a2:8d:5e:fd:29:6d:9f:af:26:51:fa: e4:58:ad:15:28:ea:59:f8:f9:a4:00:a3:74:14:07: c4:5a:3d:e7:85:4e:47:05:1a:4f:11:3c:9a:45:20: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:B0:A2:7B:B0:BA:6A:19:AB:1E:05:BE:E4:DE:A7:73:9E:60:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:43:3f:1d:2d:85:d8:14:58:ec:44:de:d3:5c:e3:c7:d5:c1: 07:3b:fb:2d:c2:2d:36:03:a1:cb:fb:b6:8c:cf:8f:02:4f:16: 48:69:7a:88:ca:32:8a:6c:4c:35:e4:38:ff:62:8c:1d:b3:af: 5d:d4:39:3e:49:10:c1:cc:fc:db:3e:bb:31:97:45:90:57:47: dc:32:f0:20:52:70:d6:f9:44:2d:b5:cf:43:0b:6a:5e:53:22: 7c:ef:32:c4:69:ce:5a:7b:3d:c7:34:34:ea:e6:d9:01:b9:fb: 25:e4:21:af:40:47:e1:92:b1:c0:b5:23:8c:69:97:09:c7:cc: 91:0c:3b:e3:58:97:05:93:37:04:4d:e8:3f:d8:64:90:06:d7: 88:3f:76:24:53:13:90:66:71:a5:e2:6a:db:ef:a6:07:43:86: 3e:ac:fd:a5:f5:ad:b1:ae:c6:30:8f:fc:5a:c6:5c:2d:1f:19: 66:9e:8a:43:08:b3:c2:d1:3d:97:55:a2:de:41:94:c1:87:5a: 2b:8f:10:b8:e6:9c:d6:81:98:c7:01:b8:ac:36:5b:e2:c8:70: 13:08:94:44:ab:7c:ab:4a:62:76:1d:00:be:48:a5:64:7b:65: 02:57:b3:25:4d:24:b8:cd:56:c0:ed:66:fa:ff:1f:97:d0:11: d0:18:5c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkRuC+rsgBG3YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk NWY1MzdkNjMtNWZmZC00ODFmLWEwYWQtNDhkODA3OGMwN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQy685Cl0AdFchfldV4Hd0rP0YguItRQ2ICV FmD0I+ULgWlE0FJh5jwnFkGBmSIP30nARIxFkvBBeA+If3FDVprvIefNxwi+tf8V oU12jIGKP5KTtBS2xiawRGXj1wHIx732yjk1v5DhNytKVR+d3YvkTaPSWN6Sr6ia UxVCWZCqzssCYFnAdk1cKk9yIFtkMWc6F0LL7Aa9VTSQ+xtJ2CsXuz9o2f9cY3lr 2oS2Uq8PTxSpKs9HzcP1/hH3VJzcKod2KZAakLkFB/1ooLpzqDPXmrg5oo1e/Slt n68mUfrkWK0VKOpZ+PmkAKN0FAfEWj3nhU5HBRpPETyaRSA5DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFosKJ7sLpqGaseBb7k3qdznmDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4MWYzMWEtZjZkMS0z MWJiLWE3OGYtMzkwOGE1ZTIzODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9AeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpDPx0thdgUWOxE3tNc48fVwQc7+y3CLTYDocv7tozPjwJPFkhpeojK MopsTDXkOP9ijB2zr13UOT5JEMHM/Ns+uzGXRZBXR9wy8CBScNb5RC21z0MLal5T InzvMsRpzlp7Pcc0NOrm2QG5+yXkIa9AR+GSscC1I4xplwnHzJEMO+NYlwWTNwRN 6D/YZJAG14g/diRTE5BmcaXiatvvpgdDhj6s/aX1rbGuxjCP/FrGXC0fGWaeikMI s8LRPZdVot5BlMGHWiuPELjmnNaBmMcBuKw2W+LIcBMIlESrfKtKYnYdAL5IpWR7 ZQJXsyVNJLjNVsDtZvr/H5fQEdAYXJ8= -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:27 2025 by rpki-client