$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ec9f10-67f3-3683-9f86-e6109d336dec.roa File: d4ec9f10-67f3-3683-9f86-e6109d336dec.roa (raw, json) Hash identifier: 8mQLqbi3kH2Vjck7XPig1Me0ymzteo1ifivP6vI7m+k= Subject key identifier: 8A:E5:CC:BD:1D:7F:0E:A3:FD:BD:05:B2:61:64:8C:D0:CE:4D:F6:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340B7C659DD1E495CFC6500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ec9f10-67f3-3683-9f86-e6109d336dec.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.207.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b7:c6:59:dd:1e:49:5c:fc:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=e354acd0-7177-4ab6-a596-e4e2b4312b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:da:8c:f3:76:cf:c5:52:d0:d1:de:90:6f:40: 64:4d:d4:99:69:8a:e6:f3:f5:94:9b:d5:fe:80:6e: 30:9d:4c:53:34:84:8a:a2:9a:04:d4:cb:f4:8a:f0: 53:1d:de:57:dc:a1:d9:b6:7e:e5:e1:dd:1e:74:ee: ff:77:1d:39:b9:04:ca:05:82:2a:ff:80:d2:43:10: a6:c2:8f:ee:bc:9d:e1:a8:90:90:85:8b:4f:c7:b7: fb:6e:2d:f0:97:e3:c5:f0:2f:66:0f:c5:94:e4:76: 50:21:4d:d5:ee:d6:e9:3f:a6:73:f9:f3:50:d4:01: a7:35:c2:17:97:39:33:79:5b:75:5f:13:1c:3e:01: 04:47:71:cf:87:80:b2:4e:d3:92:a2:bf:0f:03:58: 66:80:79:24:65:9c:9a:83:28:2b:14:3f:32:d5:41: 7b:a2:38:41:7a:d3:b4:5b:65:10:02:9f:99:3e:bc: b4:6a:1a:22:cf:7f:83:95:af:85:1a:34:2a:64:3b: 05:42:35:24:35:b2:0b:a3:cd:e1:3d:c0:a8:90:a3: 97:0f:de:5b:af:60:20:46:60:1a:5b:73:06:8b:32: d1:f5:51:f1:89:f2:4e:a5:96:c0:d9:1f:d5:6b:9f: 7b:65:2a:14:83:ac:f5:56:c1:d1:09:92:9b:39:eb: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E5:CC:BD:1D:7F:0E:A3:FD:BD:05:B2:61:64:8C:D0:CE:4D:F6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ec9f10-67f3-3683-9f86-e6109d336dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:bf:23:c6:df:8a:b8:7f:f4:cc:36:18:0e:fc:da:17:b6:bf: 8f:65:42:b5:80:64:66:f6:80:19:58:47:68:41:a9:38:69:16: 62:84:28:63:5c:58:56:17:3c:b3:29:69:c5:29:d2:de:43:9e: e5:f4:a7:31:fb:0a:f6:ec:d8:bc:27:eb:14:4d:23:ca:84:8d: 57:05:bd:f5:c6:6c:aa:a7:76:c4:ec:67:a0:ae:10:42:6f:56: cd:55:75:6b:ef:8a:c9:8e:5e:9c:d5:ff:d6:d4:15:e6:f8:0d: 97:b8:aa:e8:64:f4:c7:08:fa:41:c9:81:a7:7e:a4:ba:4b:48: 64:ee:74:ac:7b:57:11:fb:0d:47:49:6b:f9:a5:1e:cd:7e:d5: 9e:51:56:9e:15:95:41:9e:b6:36:11:74:78:20:f2:79:59:95: 91:1a:06:7e:6a:b4:28:4d:82:d7:60:9a:db:4b:5f:3d:b3:25: 9e:42:51:7f:1b:2c:a2:5c:e7:9a:51:55:3a:98:28:7c:47:a1: ce:17:f3:96:be:8f:02:95:24:3f:e8:03:f2:76:3d:d0:12:05: 54:75:25:16:f3:80:b1:af:b0:f8:a1:51:57:03:96:09:fb:a5: 1d:88:cb:b1:61:da:56:6f:62:03:5d:1f:d2:5c:6c:85:0c:43: 0b:57:2c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLfGWd0eSVz8ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZTM1NGFjZDAtNzE3Ny00YWI2LWE1OTYtZTRlMmI0MzEyYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNqM83bPxVLQ0d6Qb0BkTdSZaYrm8/WUm9X+ gG4wnUxTNISKopoE1Mv0ivBTHd5X3KHZtn7l4d0edO7/dx05uQTKBYIq/4DSQxCm wo/uvJ3hqJCQhYtPx7f7bi3wl+PF8C9mD8WU5HZQIU3V7tbpP6Zz+fNQ1AGnNcIX lzkzeVt1XxMcPgEER3HPh4CyTtOSor8PA1hmgHkkZZyagygrFD8y1UF7ojhBetO0 W2UQAp+ZPry0ahoiz3+Dla+FGjQqZDsFQjUkNbILo83hPcCokKOXD95br2AgRmAa W3MGizLR9VHxifJOpZbA2R/Va597ZSoUg6z1VsHRCZKbOetx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrlzL0dfw6j/b0FsmFkjNDOTfZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRlYzlmMTAtNjdmMy0z NjgzLTlmODYtZTYxMDlkMzM2ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6/I8bfirh/9Mw2GA782he2v49lQrWAZGb2gBlYR2hBqThpFmKEKGNc WFYXPLMpacUp0t5DnuX0pzH7Cvbs2Lwn6xRNI8qEjVcFvfXGbKqndsTsZ6CuEEJv Vs1VdWvvismOXpzV/9bUFeb4DZe4quhk9McI+kHJgad+pLpLSGTudKx7VxH7DUdJ a/mlHs1+1Z5RVp4VlUGetjYRdHgg8nlZlZEaBn5qtChNgtdgmttLXz2zJZ5CUX8b LKJc55pRVTqYKHxHoc4X85a+jwKVJD/oA/J2PdASBVR1JRbzgLGvsPihUVcDlgn7 pR2Iy7Fh2lZvYgNdH9JcbIUMQwtXLLI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:27 2025 by rpki-client