$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c67e4c0f-0673-38c8-820b-efc80815b1c9.roa File: c67e4c0f-0673-38c8-820b-efc80815b1c9.roa (raw, json) Hash identifier: 3ZFNpCpLAG9WCkpC5bO9YaH2WqbpyTBioDX2eXiHWhs= Subject key identifier: 91:FA:B9:CD:70:91:A8:5A:74:D0:56:8A:04:77:0A:FD:5B:9D:F4:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848CC7BA4A5E519168AE8BA1170 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c67e4c0f-0673-38c8-820b-efc80815b1c9.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.222.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a4:a5:e5:19:16:8a:e8:ba:11:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=1fdc405b-75f3-46f0-a440-5d600d20d480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:a8:95:76:4a:09:95:7c:99:f6:bf:18:ed: bf:12:2e:fd:35:d2:a2:63:40:1e:35:96:1a:25:ae: bb:9c:84:08:76:a9:0e:4a:f9:60:5b:30:d2:38:b3: e6:14:65:2a:42:19:ef:6c:2e:ec:2a:cc:15:5f:04: 89:ed:55:29:21:27:11:39:3c:d3:c5:a9:c6:83:fc: e2:d1:54:7a:29:f5:c2:bb:3a:3c:0b:16:40:02:b4: 41:50:f9:3b:97:65:f9:6d:00:92:2c:7a:f3:63:aa: 8d:d7:89:5a:7a:c0:79:ce:aa:7d:9e:0a:31:a2:a3: a7:e6:1b:f3:d4:d4:01:07:90:5f:4a:4b:72:99:e8: ab:fc:61:66:67:09:d8:20:a4:b3:14:c5:ff:d9:f4: e1:fa:f3:e5:8b:56:f7:23:2e:9f:22:e4:72:91:a6: 81:9c:b6:a0:f6:54:db:37:7d:45:65:20:db:e1:38: a9:c7:80:97:72:cf:b1:e8:10:d4:72:8c:cf:48:01: f7:99:86:1a:89:5a:f0:a5:81:67:92:2a:18:ac:19: cd:15:ff:91:87:94:68:e2:3d:95:53:55:ba:0d:f2: a5:d9:39:a6:a2:39:46:9f:1b:59:cb:4e:83:ed:dc: 8b:eb:aa:c3:84:21:1a:35:28:7c:a9:ed:c6:84:1c: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FA:B9:CD:70:91:A8:5A:74:D0:56:8A:04:77:0A:FD:5B:9D:F4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c67e4c0f-0673-38c8-820b-efc80815b1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0d:4d:fc:43:54:c6:6f:a2:06:b1:a4:d6:07:bd:2d:be:19: 80:7e:05:0a:5c:a3:0c:50:d0:bb:a0:df:3c:1d:5f:89:c9:0f: 01:67:cb:a9:90:74:9b:78:5c:14:13:bc:a3:19:55:4e:cc:c4: a1:bc:b3:9a:59:42:12:c9:ff:b0:70:1a:af:c4:7f:d5:7b:17: 31:e3:16:92:a0:04:bd:c6:ee:c3:ae:a7:4b:1a:be:0c:5b:60: ba:61:6c:69:8f:9e:d9:b7:83:71:43:1d:c8:e9:82:7a:ce:ab: 52:c2:74:67:c3:2c:68:0a:29:f4:c2:1e:a6:40:21:e1:cd:e2: d0:df:e4:c1:d6:ca:2e:86:33:1d:81:e0:12:59:4f:28:51:8f: 23:d0:37:d2:0a:f9:4b:c1:ed:29:b2:e1:34:50:b7:26:5f:a4: 02:67:b8:28:c9:5d:bf:2e:6b:d4:d6:92:49:c1:3f:23:41:01: c6:0c:c9:8a:15:87:6d:b6:49:0d:5f:ea:99:f0:41:6b:2f:6e: d5:38:07:52:87:e0:3e:82:e9:24:49:23:42:04:14:3f:b2:84: 57:13:ea:ae:ac:20:50:22:f6:33:75:cb:f3:a4:cb:e3:d4:6a: 29:fe:92:aa:f9:7b:03:39:2d:08:fb:af:91:ce:a7:95:12:d7: 59:b8:b8:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6Sl5RkWiui6EXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MWZkYzQwNWItNzVmMy00NmYwLWE0NDAtNWQ2MDBkMjBkNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8iolXZKCZV8mfa/GO2/Ei79NdKiY0AeNZYa Ja67nIQIdqkOSvlgWzDSOLPmFGUqQhnvbC7sKswVXwSJ7VUpIScROTzTxanGg/zi 0VR6KfXCuzo8CxZAArRBUPk7l2X5bQCSLHrzY6qN14laesB5zqp9ngoxoqOn5hvz 1NQBB5BfSktymeir/GFmZwnYIKSzFMX/2fTh+vPli1b3Iy6fIuRykaaBnLag9lTb N31FZSDb4Tipx4CXcs+x6BDUcozPSAH3mYYaiVrwpYFnkioYrBnNFf+Rh5Ro4j2V U1W6DfKl2TmmojlGnxtZy06D7dyL66rDhCEaNSh8qe3GhByOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH6uc1wkahadNBWigR3Cv1bnfRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY3ZTRjMGYtMDY3My0z OGM4LTgyMGItZWZjODA4MTViMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgNTfxDVMZvogaxpNYHvS2+GYB+BQpcowxQ0Lug3zwdX4nJDwFny6mQ dJt4XBQTvKMZVU7MxKG8s5pZQhLJ/7BwGq/Ef9V7FzHjFpKgBL3G7sOup0savgxb YLphbGmPntm3g3FDHcjpgnrOq1LCdGfDLGgKKfTCHqZAIeHN4tDf5MHWyi6GMx2B 4BJZTyhRjyPQN9IK+UvB7Smy4TRQtyZfpAJnuCjJXb8ua9TWkknBPyNBAcYMyYoV h222SQ1f6pnwQWsvbtU4B1KH4D6C6SRJI0IEFD+yhFcT6q6sIFAi9jN1y/Oky+PU ain+kqr5ewM5LQj7r5HOp5US11m4uGo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:08 2025 by rpki-client