$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa File: c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa (raw, json) Hash identifier: 4oetKDyO1VGUZlsmNGJTiGGDnX1u216hbjF6SSsAWRE= Subject key identifier: E3:7B:60:D6:41:C2:98:53:6F:76:0E:E1:2B:D6:1F:67:D9:71:13:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B8F0D77704F1620E50233D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.206.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d7:77:04:f1:62:0e:50:23:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=e10a4e0b-169f-4099-a853-c9e89cfeae40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:89:5a:be:35:18:c1:9d:e8:48:9e:fa:03: ea:53:1b:77:11:2b:70:ef:96:49:26:e9:fb:4b:c0: 31:3a:fa:cf:74:24:89:84:5c:20:25:3b:16:91:02: 2b:cc:58:fa:48:a9:f0:da:e4:97:84:b1:6d:98:5a: 4f:51:d4:79:00:f2:71:f0:6b:30:e5:08:bc:eb:84: f3:ed:45:b5:e6:9a:f0:f5:92:32:4c:39:94:cb:98: 05:e9:3c:61:7c:31:19:45:9e:24:d3:8d:28:af:63: 96:cb:79:1d:5f:93:96:08:d3:11:26:14:d3:98:2f: 3a:2f:94:8f:bd:b9:63:6a:bd:20:0a:36:59:32:f0: 21:38:b1:c4:2c:dd:31:66:a2:a0:8c:f9:1f:aa:5f: 97:c7:84:9b:e1:19:55:e7:4a:ae:21:03:20:aa:bb: 8e:3e:e9:1b:8a:46:01:a6:b1:86:03:ef:ab:ef:88: 35:2b:2f:3c:d2:97:9d:80:7c:4d:9f:b9:c0:f9:36: 39:a5:f9:c9:66:c5:84:ab:f3:41:ff:5b:95:21:28: bf:fd:1b:ba:b2:c9:0b:c5:7c:95:b7:c8:f4:19:9f: 41:d8:c3:6e:58:e1:c3:cc:cc:88:4f:cd:c4:b2:ee: 0c:e0:59:aa:00:83:1d:96:76:8e:d5:65:3e:bb:09: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:60:D6:41:C2:98:53:6F:76:0E:E1:2B:D6:1F:67:D9:71:13:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bc:69:f2:26:86:78:dd:02:2a:30:2e:42:9b:aa:91:42:02: 85:bf:47:09:bc:ff:91:0c:b4:ea:57:95:0a:db:96:a0:08:6c: 6c:d7:79:36:0d:05:2c:c0:65:39:c6:44:dd:92:2b:8f:53:a9: 96:01:2d:5d:38:30:f6:b8:ca:72:cc:d3:3d:fa:3a:cb:d2:33: 68:3e:01:02:b8:10:30:cd:64:13:a3:3d:44:60:bc:e0:8c:98: ec:66:c5:97:c5:68:f7:79:04:b4:ba:d3:f4:dd:8f:fd:ed:db: 71:2e:d3:67:64:60:2d:c6:21:8c:6b:b0:71:52:97:cf:ec:ed: de:58:e4:c1:f9:fe:1f:d2:b4:78:1a:13:77:92:70:87:ac:76: 13:93:35:1d:4f:74:73:37:8e:4a:56:6d:74:85:ea:75:3a:67: 7a:0c:3f:e5:d6:90:71:60:b9:c9:d2:ca:42:d0:f1:fb:4f:81: 2e:ce:6a:87:33:de:14:fa:ef:2c:59:11:70:12:bc:4a:f8:11: 64:27:2e:11:58:e4:ff:14:4b:51:50:ea:da:40:64:de:7a:d4: 6b:f8:12:33:74:4e:55:9c:b7:4a:9f:02:35:34:5f:55:4f:4d: 45:f7:18:4e:d8:6f:9e:e5:6d:f2:ca:b5:e7:49:ac:7a:87:6c: e4:14:69:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Nd3BPFiDlAjPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTEwYTRlMGItMTY5Zi00MDk5LWE4NTMtYzllODljZmVhZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7SJWr41GMGd6Eie+gPqUxt3EStw75ZJJun7 S8AxOvrPdCSJhFwgJTsWkQIrzFj6SKnw2uSXhLFtmFpPUdR5APJx8Gsw5Qi864Tz 7UW15prw9ZIyTDmUy5gF6TxhfDEZRZ4k040or2OWy3kdX5OWCNMRJhTTmC86L5SP vbljar0gCjZZMvAhOLHELN0xZqKgjPkfql+Xx4Sb4RlV50quIQMgqruOPukbikYB prGGA++r74g1Ky880pedgHxNn7nA+TY5pfnJZsWEq/NB/1uVISi//Ru6sskLxXyV t8j0GZ9B2MNuWOHDzMyIT83Esu4M4FmqAIMdlnaO1WU+uwnBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON7YNZBwphTb3YO4SvWH2fZcRPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzAyZDRhNzktZjJlYS0z ZmJiLWJlYjUtYWRkZGQ2N2FmMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO8afImhnjdAiowLkKbqpFCAoW/Rwm8/5EMtOpXlQrblqAIbGzXeTYN BSzAZTnGRN2SK49TqZYBLV04MPa4ynLM0z36OsvSM2g+AQK4EDDNZBOjPURgvOCM mOxmxZfFaPd5BLS60/Tdj/3t23Eu02dkYC3GIYxrsHFSl8/s7d5Y5MH5/h/StHga E3eScIesdhOTNR1PdHM3jkpWbXSF6nU6Z3oMP+XWkHFgucnSykLQ8ftPgS7Oaocz 3hT67yxZEXASvEr4EWQnLhFY5P8US1FQ6tpAZN561Gv4EjN0TlWct0qfAjU0X1VP TUX3GE7Yb57lbfLKtedJrHqHbOQUabE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:02 2025 by rpki-client