$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa File: df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa (raw, json) Hash identifier: 4zmIIMUQUbdq7O5vXOVPWo+v52xl5zKV49cEnV8VwsY= Subject key identifier: 31:B9:8C:DE:F2:D8:D5:07:07:BF:C5:39:D8:B7:C4:7C:B5:FE:26:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB960D6F71CF9072C654A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.211.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:96:0d:6f:71:cf:90:72:c6:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=cc202e97-001e-4f41-9a96-707aa84211df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:c0:13:9e:9c:4b:58:fd:35:7b:4e:da:24: 43:a0:06:11:8d:e2:da:ff:fd:04:be:15:ff:fd:32: fe:d4:2a:24:db:04:99:05:51:55:b9:69:c1:03:8c: b8:43:64:7d:c2:b0:1a:b1:a9:02:00:a8:4c:bd:12: 6c:bc:92:9c:32:bc:bb:ed:67:27:e4:4b:2b:61:eb: 13:09:cd:7b:f0:0b:e8:c9:cc:9a:0d:06:79:0e:29: 8e:0a:b4:2c:ee:cd:7c:72:c1:cd:67:1f:66:97:1a: a8:f0:cd:aa:e1:e2:a6:32:d7:76:61:0d:91:e5:e1: a2:7a:a1:6d:db:83:a5:36:6d:08:be:b0:23:6c:d3: 1c:bf:78:9c:b1:9a:54:c1:76:bd:19:c3:40:da:40: 79:8d:0e:b5:d5:a2:07:81:a6:d5:21:ea:d6:15:30: c2:0c:4d:d0:67:44:67:fa:5d:cb:ca:78:7e:26:2a: 2b:e8:12:1f:c7:84:04:75:4c:4a:b9:d6:17:af:4f: 89:be:0a:68:4e:8e:c7:0f:d6:26:37:9b:ae:65:3c: fa:3d:e6:6e:2c:fc:3c:c6:01:89:99:97:8d:f5:cc: 9f:b7:98:c0:b6:4e:87:40:00:e5:88:24:bf:60:23: 06:97:65:45:e7:51:41:d2:1a:d6:48:88:eb:42:4f: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B9:8C:DE:F2:D8:D5:07:07:BF:C5:39:D8:B7:C4:7C:B5:FE:26:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d5:68:05:ca:7e:c8:f0:ff:54:bc:32:d0:e5:8d:13:f3:b4: 43:d8:af:5e:ea:d7:db:14:04:3d:5a:ed:68:ef:a3:a5:2d:25: 6b:8e:46:48:9d:6c:99:af:c4:d1:6a:e0:4a:f1:f3:6a:39:52: 25:a1:00:83:96:62:00:f1:00:d8:9a:92:64:42:f2:44:5d:f5: 4c:48:8d:8e:93:9c:0e:94:f0:2f:2b:77:b7:6a:23:39:a4:ce: 60:c7:f2:da:ce:3c:c0:8d:9f:c0:42:0f:48:9e:c0:af:2e:2f: f4:f3:d6:16:b7:fe:d6:82:0a:bc:43:d7:51:84:62:01:72:5a: 05:5c:77:93:00:57:09:44:d5:64:ee:01:73:28:80:50:9f:e0: 1e:b1:7d:73:21:38:52:69:ae:ba:12:15:d4:b7:f8:f9:c9:ef: 7f:3d:a6:4b:93:8e:fd:fa:be:b5:69:cc:2b:fb:36:c1:25:1e: 9d:c9:f1:46:aa:34:7d:e9:bb:12:da:59:3b:10:05:8e:4d:75: 82:a4:47:f8:37:80:ca:83:7b:f5:01:9f:a8:60:5e:84:51:58: 8f:8e:b5:48:f1:60:ba:5e:00:3b:d2:c7:57:76:4a:95:2d:6f: d3:b6:31:de:15:f2:82:08:e7:04:eb:42:b4:ce:34:3b:fb:52: 7a:9a:14:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5YNb3HPkHLGVKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2MyMDJlOTctMDAxZS00ZjQxLTlhOTYtNzA3YWE4NDIxMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnvAE56cS1j9NXtO2iRDoAYRjeLa//0EvhX/ /TL+1Cok2wSZBVFVuWnBA4y4Q2R9wrAasakCAKhMvRJsvJKcMry77Wcn5EsrYesT Cc178AvoycyaDQZ5DimOCrQs7s18csHNZx9mlxqo8M2q4eKmMtd2YQ2R5eGieqFt 24OlNm0IvrAjbNMcv3icsZpUwXa9GcNA2kB5jQ611aIHgabVIerWFTDCDE3QZ0Rn +l3Lynh+Jior6BIfx4QEdUxKudYXr0+JvgpoTo7HD9YmN5uuZTz6PeZuLPw8xgGJ mZeN9cyft5jAtk6HQADliCS/YCMGl2VF51FB0hrWSIjrQk9jkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG5jN7y2NUHB7/FOdi3xHy1/iaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGYyZWQ1ZGItODA0ZC0z ZDIzLWE5YTEtNWRkNjg1ZTdjYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnVaAXKfsjw/1S8MtDljRPztEPYr17q19sUBD1a7Wjvo6UtJWuORkid bJmvxNFq4Erx82o5UiWhAIOWYgDxANiakmRC8kRd9UxIjY6TnA6U8C8rd7dqIzmk zmDH8trOPMCNn8BCD0iewK8uL/Tz1ha3/taCCrxD11GEYgFyWgVcd5MAVwlE1WTu AXMogFCf4B6xfXMhOFJprroSFdS3+PnJ7389pkuTjv36vrVpzCv7NsElHp3J8Uaq NH3puxLaWTsQBY5NdYKkR/g3gMqDe/UBn6hgXoRRWI+OtUjxYLpeADvSx1d2SpUt b9O2Md4V8oII5wTrQrTONDv7UnqaFD8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:06 2025 by rpki-client