$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa File: dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa (raw, json) Hash identifier: 4ZDQmw5df8o7yDek/s0HCIBTQOgLCnozSiUEPZ8Zdy0= Subject key identifier: 16:BC:9D:21:A2:60:6F:EE:40:DB:40:C7:25:F7:1F:3C:34:65:F6:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829D86687C1D1A79E432280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.204.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d8:66:87:c1:d1:a7:9e:43:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=04774c38-f5a6-405e-affe-8789f54e08af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:db:29:1e:63:72:96:53:f8:b9:7a:07:f1: 6d:9e:b6:b9:35:45:f9:23:65:e9:49:ed:e5:f3:3c: 1b:5b:d4:93:43:4d:5b:82:9b:23:09:cb:3b:0a:be: 2e:b4:d8:74:5b:44:e7:45:30:4c:d5:4b:c7:f0:34: b0:29:3f:6c:d7:6a:38:6e:09:0a:82:a2:fe:fc:fa: 73:b0:31:88:fa:60:75:84:f3:cf:98:91:a2:60:e3: 90:94:4b:7a:89:9e:df:e4:20:ae:30:75:ce:a1:74: cb:59:84:0f:0e:bb:06:cd:f7:c3:22:22:a8:37:7e: ad:19:8b:eb:d5:5c:d4:19:17:be:8d:b7:61:17:76: d6:fa:cc:ad:af:e9:18:16:a6:21:f3:48:ac:c7:47: 23:14:d7:ee:29:2b:6e:07:fc:86:6c:47:79:b0:b1: 74:38:0c:9d:84:62:2b:82:6f:e3:19:a1:0b:48:22: 2a:22:b5:8d:80:87:57:00:02:9e:31:b0:7a:36:57: 7b:d2:f5:da:d6:f2:4d:f9:f7:ec:c2:59:9a:1d:db: 13:68:29:53:d5:ee:55:02:b7:1b:c7:7c:76:15:f4: c9:51:87:c1:22:cb:92:6c:7a:fb:24:9a:86:bb:c4: da:e0:df:c5:26:23:e1:08:f2:dc:ae:44:b4:00:b7: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BC:9D:21:A2:60:6F:EE:40:DB:40:C7:25:F7:1F:3C:34:65:F6:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:de:48:f3:8f:c0:5b:4f:5d:a7:dd:4f:44:1c:22:a2:3b:d0: fd:29:f6:da:da:ca:f2:df:9a:5a:48:b5:d2:de:32:fa:e9:48: 84:b4:b3:4b:d4:2a:3a:86:92:e3:93:9d:0c:60:f3:e4:ad:05: cd:07:70:f0:08:15:c0:d5:9c:85:2b:5f:4a:28:12:6a:4e:e9: 37:10:59:f9:7e:a2:db:ec:f5:54:e3:f7:76:4e:30:e1:47:ad: 66:c8:84:a4:0b:0e:af:08:ea:92:79:8f:13:0f:08:c8:08:39: ce:19:26:ef:de:91:ef:25:56:00:ef:43:f7:1d:c9:3a:39:f2: ec:a3:f3:b0:54:4f:bb:b7:e6:e9:4b:bb:70:d6:ff:18:33:e5: ee:56:2c:a3:cb:3d:c1:e7:4b:da:75:82:3a:81:40:34:d9:a6: a1:35:3e:7a:0f:35:4d:52:dc:23:a0:5a:d4:c6:d2:3e:79:28: 0e:bd:8e:d9:7d:8f:71:90:65:b9:b1:69:ae:f7:60:43:34:9c: 41:fd:76:bc:17:98:2d:27:cb:ab:ef:e9:c6:56:b8:37:48:e4: 5c:54:19:75:e8:aa:a4:94:c2:08:8c:94:aa:31:02:05:b6:55: 06:4d:9e:7b:5c:97:26:2d:ac:29:c9:2e:92:f8:d6:f2:81:90: 80:66:68:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdhmh8HRp55DIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDQ3NzRjMzgtZjVhNi00MDVlLWFmZmUtODc4OWY1NGUwOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl77bKR5jcpZT+Ll6B/Ftnra5NUX5I2XpSe3l 8zwbW9STQ01bgpsjCcs7Cr4utNh0W0TnRTBM1UvH8DSwKT9s12o4bgkKgqL+/Ppz sDGI+mB1hPPPmJGiYOOQlEt6iZ7f5CCuMHXOoXTLWYQPDrsGzffDIiKoN36tGYvr 1VzUGRe+jbdhF3bW+sytr+kYFqYh80isx0cjFNfuKStuB/yGbEd5sLF0OAydhGIr gm/jGaELSCIqIrWNgIdXAAKeMbB6Nld70vXa1vJN+ffswlmaHdsTaClT1e5VArcb x3x2FfTJUYfBIsuSbHr7JJqGu8Ta4N/FJiPhCPLcrkS0ALcdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa8nSGiYG/uQNtAxyX3Hzw0ZfYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmY2FjMWEtMTRmMi0z YjFlLTk5NDMtMGI3ZjQ3YzQzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHveSPOPwFtPXafdT0QcIqI70P0p9trayvLfmlpItdLeMvrpSIS0s0vU KjqGkuOTnQxg8+StBc0HcPAIFcDVnIUrX0ooEmpO6TcQWfl+otvs9VTj93ZOMOFH rWbIhKQLDq8I6pJ5jxMPCMgIOc4ZJu/eke8lVgDvQ/cdyTo58uyj87BUT7u35ulL u3DW/xgz5e5WLKPLPcHnS9p1gjqBQDTZpqE1PnoPNU1S3COgWtTG0j55KA69jtl9 j3GQZbmxaa73YEM0nEH9drwXmC0ny6vv6cZWuDdI5FxUGXXoqqSUwgiMlKoxAgW2 VQZNnntclyYtrCnJLpL41vKBkIBmaD8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:55 2025 by rpki-client