$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa File: e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa (raw, json) Hash identifier: frCC4D53gNTIwAqzop6zhb60zw/XT0D0aS0Z/65YT6U= Subject key identifier: FE:ED:D3:E0:C1:7E:16:DC:9B:37:04:4D:9B:6F:70:31:37:F5:46:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BBBB92D82F5E21AC284B6A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.209.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:92:d8:2f:5e:21:ac:28:4b:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=7e174b1c-0e1e-4f36-9c69-1f863869ddb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:c6:74:55:ba:ac:1f:3e:fd:0e:bf:e2:ca: a9:09:1a:bb:e7:47:c6:65:b6:1c:23:b7:93:0a:d8: b7:e1:db:d0:bf:bb:ef:89:42:b1:9f:6a:d8:46:42: 49:43:e9:b1:5f:79:ac:cc:71:03:f8:dd:34:62:97: a0:ec:85:e7:45:77:29:e7:90:b3:42:f2:81:f5:38: 3e:9f:ad:6f:d8:ae:50:ed:e7:83:1c:59:f4:c5:60: 9b:ad:34:60:3a:ee:70:8e:44:b8:4d:33:52:f8:8c: 2c:90:44:4e:78:c2:e2:5e:f8:8c:8e:62:7d:2f:ae: d0:a6:90:36:41:98:72:33:5d:42:6d:b8:1c:e8:93: 6f:0c:ca:89:d2:98:93:fc:06:65:30:46:e9:d2:97: 84:23:c6:a0:1b:71:c1:56:ad:b8:56:84:cf:8e:f0: 97:b6:92:88:48:cd:2c:9a:5b:34:3a:3e:83:71:52: 05:20:d8:19:f6:f0:42:d6:5e:b0:52:fe:bf:96:56: 33:ba:84:98:65:36:b7:bb:04:23:63:26:82:08:99: 97:d9:b4:52:52:bc:a2:de:f8:4d:a3:02:3e:ab:af: c8:5f:af:15:6f:70:86:65:95:de:37:87:31:41:0f: 66:2d:7a:27:03:f7:8a:fa:85:a7:7c:62:ed:64:f3: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:ED:D3:E0:C1:7E:16:DC:9B:37:04:4D:9B:6F:70:31:37:F5:46:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:20:ff:1e:42:64:17:f5:54:00:33:9a:bb:e5:93:40:cd:d2: 3b:b1:60:1f:b1:51:8c:81:43:0b:45:79:cd:90:30:b9:9d:21: 7a:12:5d:20:8a:52:8a:36:4a:12:dc:7c:d9:07:55:00:85:8d: 62:4c:b1:6a:ee:07:f7:8c:43:92:a9:f0:c3:af:c1:96:42:07: 58:51:f0:4f:81:03:05:25:b9:e6:71:c5:c0:11:0f:07:16:a4: cc:f5:8e:2e:8b:bf:c0:bb:ea:8b:d9:1e:0c:6d:71:6c:b1:ec: 7a:75:7b:f9:b5:53:9e:8b:5e:74:5a:e4:71:6b:d7:dc:13:65: 40:24:f1:d9:d1:75:e6:a4:5d:ba:68:92:1c:44:41:b0:f7:58: 9b:ca:7f:94:70:45:23:3f:be:f6:0d:fd:f7:94:4c:37:2c:80: 06:b5:b5:d6:71:ce:0a:d0:56:ae:81:85:bf:a9:ca:1b:f6:c1: a1:f6:00:2b:c0:bb:e7:56:bd:b2:c1:42:ff:a9:8f:d8:3b:9e: 65:92:da:52:9b:86:4f:8e:75:6f:91:c4:1c:8a:21:c2:be:a8: fb:ac:b9:22:19:39:96:c3:86:3c:a6:0b:5e:63:9b:a9:b8:5d: e4:b0:2b:ee:7e:52:f3:b1:ee:48:81:a1:bd:17:63:2b:43:17: d9:38:d6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5LYL14hrChLaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk N2UxNzRiMWMtMGUxZS00ZjM2LTljNjktMWY4NjM4NjlkZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvybGdFW6rB8+/Q6/4sqpCRq750fGZbYcI7eT Cti34dvQv7vviUKxn2rYRkJJQ+mxX3mszHED+N00Ypeg7IXnRXcp55CzQvKB9Tg+ n61v2K5Q7eeDHFn0xWCbrTRgOu5wjkS4TTNS+IwskEROeMLiXviMjmJ9L67QppA2 QZhyM11Cbbgc6JNvDMqJ0piT/AZlMEbp0peEI8agG3HBVq24VoTPjvCXtpKISM0s mls0Oj6DcVIFINgZ9vBC1l6wUv6/llYzuoSYZTa3uwQjYyaCCJmX2bRSUryi3vhN owI+q6/IX68Vb3CGZZXeN4cxQQ9mLXonA/eK+oWnfGLtZPPT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7t0+DBfhbcmzcETZtvcDE39UZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJiYWE3YTgtYThmNi0z NmZhLThlNzUtM2VjYjhhY2EwMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADog/x5CZBf1VAAzmrvlk0DN0juxYB+xUYyBQwtFec2QMLmdIXoSXSCK Uoo2ShLcfNkHVQCFjWJMsWruB/eMQ5Kp8MOvwZZCB1hR8E+BAwUlueZxxcARDwcW pMz1ji6Lv8C76ovZHgxtcWyx7Hp1e/m1U56LXnRa5HFr19wTZUAk8dnRdeakXbpo khxEQbD3WJvKf5RwRSM/vvYN/feUTDcsgAa1tdZxzgrQVq6Bhb+pyhv2waH2ACvA u+dWvbLBQv+pj9g7nmWS2lKbhk+OdW+RxByKIcK+qPusuSIZOZbDhjymC15jm6m4 XeSwK+5+UvOx7kiBob0XYytDF9k41gM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:58 2025 by rpki-client