$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa File: d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa (raw, json) Hash identifier: RIOxs8nMu9S+PYY3yBdZV8+CTAUQ7k7PzlTYr6hs0SA= Subject key identifier: 87:DC:9F:74:2B:56:CD:18:E7:55:E8:B8:3D:F0:F3:7C:8C:E8:DB:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB89AD6448776B4528B282 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 16625 IP address blocks: 23.209.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:89:ad:64:48:77:6b:45:28:b2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=29151dc2-d320-4adb-933d-05b18c8d1a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:f7:20:20:25:63:f4:98:f6:86:93:70:a2: 21:19:df:0c:81:ca:90:ea:66:63:e5:80:ac:55:b2: 51:b0:7d:52:35:ba:ca:15:67:5e:55:9b:b5:61:9f: 58:a0:84:71:1a:8b:49:54:fe:b9:43:a8:f3:d5:02: 6d:fc:9b:f3:40:45:a4:01:a6:7b:41:e3:ec:60:f9: 0c:50:19:2d:5a:ca:0d:4a:4f:52:7e:55:db:1f:ed: b4:c4:cd:af:f2:46:a7:6c:3e:8e:57:cd:be:ba:b3: af:1d:eb:71:00:f6:0c:45:5e:60:a9:1f:76:79:83: ce:8b:5c:37:48:29:29:17:a4:dc:27:b6:d2:c2:f3: 62:44:f1:a3:c6:5a:73:2a:21:b7:f1:48:5c:38:7c: de:42:8d:97:90:e2:23:f8:76:df:87:36:c3:03:fb: 2b:94:22:49:8a:ae:d0:3d:3c:ef:d7:23:f2:30:8e: 8f:00:7f:63:fc:bd:a2:15:c0:72:e2:a2:aa:b4:33: 4b:ff:04:5e:e1:a2:2f:1c:ec:7c:52:88:b1:2a:9f: 5d:29:62:3a:50:29:ea:a3:4f:c6:92:79:cc:a6:60: 80:40:9c:60:4b:ed:19:7a:cd:9d:b3:5d:ba:88:42: 8f:7b:4a:49:7e:5a:50:12:1d:bb:8a:6b:25:63:1d: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DC:9F:74:2B:56:CD:18:E7:55:E8:B8:3D:F0:F3:7C:8C:E8:DB:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d69fae0e-e57e-339d-b215-5ebe3b1560a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7d:c7:e4:bf:45:da:a6:0f:ad:a4:c7:96:ff:33:1f:6b:6a: 1d:4e:a6:a6:19:7f:55:8a:f3:17:d4:59:53:6f:59:b2:15:e5: c3:2c:bf:63:79:21:a7:5b:aa:e8:f6:79:02:6e:f2:2c:e3:84: f5:1f:15:5d:63:8a:b9:49:aa:a2:c6:16:fa:63:88:fa:97:df: db:72:6a:0f:f7:e7:76:cc:49:93:64:5e:58:0e:1a:2f:9f:ba: 0f:0b:db:aa:0f:d7:c5:e3:2e:62:4b:ea:58:ed:6a:23:b4:ce: 3a:2a:71:fe:b2:f9:24:ca:66:e4:60:3c:5f:17:e5:f6:7b:62: 50:6e:7e:14:45:90:8c:74:9a:bf:79:b6:24:17:18:0c:1f:b6: 37:5f:1d:70:4b:88:19:6a:de:4c:4e:e8:78:8a:79:6e:f5:5f: e6:36:ad:09:78:63:b0:93:e2:58:50:24:57:92:22:06:d9:75: b8:a5:b5:df:1e:99:f1:d7:a2:b0:e8:a3:52:48:4c:49:d0:d2: b5:42:e9:c4:dd:47:05:0f:dc:ff:d7:3f:94:bb:2e:46:d0:ec: 5a:44:b7:ee:d3:ec:09:98:8b:b5:5c:b0:00:09:91:07:1b:85: 9e:08:70:67:47:5c:ac:b0:2d:87:90:e1:a6:fc:82:fa:c7:ed: 5d:81:86:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4mtZEh3a0UosoIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MjkxNTFkYzItZDMyMC00YWRiLTkzM2QtMDViMThjOGQxYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRv3ICAlY/SY9oaTcKIhGd8MgcqQ6mZj5YCs VbJRsH1SNbrKFWdeVZu1YZ9YoIRxGotJVP65Q6jz1QJt/JvzQEWkAaZ7QePsYPkM UBktWsoNSk9SflXbH+20xM2v8kanbD6OV82+urOvHetxAPYMRV5gqR92eYPOi1w3 SCkpF6TcJ7bSwvNiRPGjxlpzKiG38UhcOHzeQo2XkOIj+HbfhzbDA/srlCJJiq7Q PTzv1yPyMI6PAH9j/L2iFcBy4qKqtDNL/wRe4aIvHOx8UoixKp9dKWI6UCnqo0/G knnMpmCAQJxgS+0Zes2ds126iEKPe0pJflpQEh27imslYx3X0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfcn3QrVs0Y51XouD3w83yM6NtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY5ZmFlMGUtZTU3ZS0z MzlkLWIyMTUtNWViZTNiMTU2MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh9x+S/RdqmD62kx5b/Mx9rah1OpqYZf1WK8xfUWVNvWbIV5cMsv2N5 Iadbquj2eQJu8izjhPUfFV1jirlJqqLGFvpjiPqX39tyag/353bMSZNkXlgOGi+f ug8L26oP18XjLmJL6ljtaiO0zjoqcf6y+STKZuRgPF8X5fZ7YlBufhRFkIx0mr95 tiQXGAwftjdfHXBLiBlq3kxO6HiKeW71X+Y2rQl4Y7CT4lhQJFeSIgbZdbiltd8e mfHXorDoo1JITEnQ0rVC6cTdRwUP3P/XP5S7LkbQ7FpEt+7T7AmYi7VcsAAJkQcb hZ4IcGdHXKywLYeQ4ab8gvrH7V2Bhpc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:34 2025 by rpki-client