$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa File: e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa (raw, json) Hash identifier: v4ATh+jW4sGnxo3cWYHfLua3bbl8MlL8xtLmSAysvrg= Subject key identifier: 19:DE:D5:46:07:07:91:EB:90:5F:23:CC:93:E4:61:DB:B8:34:1D:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49A8167C34BBABD47FF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.209.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9a:81:67:c3:4b:ba:bd:47:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=f7b3eae5-db2e-4e19-a68c-db61e22db529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:ab:52:7c:cc:f8:ce:07:57:f0:77:75:14: 79:fb:67:b8:71:cb:59:db:26:8d:94:22:18:cd:8c: 6d:ee:bc:66:7e:a1:e4:4f:51:d8:fc:17:0d:72:be: 61:ab:25:e4:f2:6f:02:55:05:65:6f:36:bb:f4:37: 5a:09:2e:56:55:e8:cb:15:ed:79:64:b6:05:19:ee: 18:ba:67:3c:47:00:1e:9e:c9:e5:9c:b9:07:57:40: 3a:b4:4b:8d:70:10:3c:b4:a5:04:88:10:05:f2:81: 26:59:f9:ae:8b:db:e3:9e:10:f7:3f:22:44:16:f5: 08:6e:43:f7:be:d7:7f:fa:f8:80:af:91:77:02:ca: fa:09:11:72:34:99:2d:55:28:0e:3e:a7:3e:f3:7b: 7e:72:f6:8f:6a:02:b6:a9:08:dc:ab:72:ea:8b:96: 97:3b:8c:13:94:df:14:dc:b7:55:11:2c:58:bd:b0: 29:88:c6:a8:b4:13:f3:aa:80:57:a9:ec:59:40:5b: f3:de:45:84:cf:40:86:30:53:3d:1d:21:c3:4f:7d: 9d:93:1d:9d:94:91:43:d4:c6:b2:5e:b9:1e:05:a6: 20:b0:36:d4:0f:57:f0:68:96:25:f7:07:da:09:a2: f0:a6:1f:d7:d5:a4:64:6e:02:4e:2a:61:ba:03:4c: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DE:D5:46:07:07:91:EB:90:5F:23:CC:93:E4:61:DB:B8:34:1D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2baa7a8-a8f6-36fa-8e75-3ecb8aca01b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:27:03:1a:62:3b:24:51:94:ad:f4:94:68:61:78:09:f6:95: df:1f:7e:4d:36:9b:f0:40:15:b0:cc:00:77:56:91:c6:14:ad: cb:28:92:dc:fb:77:ba:f9:00:e9:f2:03:93:2f:d5:00:74:f9: 13:73:ab:d0:16:9a:34:28:14:04:c7:c0:ae:3e:5c:bb:e6:10: 3c:08:3d:6e:f4:26:91:4a:7a:c0:c9:56:d7:32:60:c1:18:b6: d3:de:ba:6b:e8:14:82:d9:c9:e4:6b:a5:3c:f1:ba:61:60:6f: 3a:d3:ba:df:70:81:23:05:77:28:57:9a:bc:c7:38:b6:a5:8d: 93:e5:5a:98:22:fa:4d:67:2d:43:12:70:cd:bc:cf:21:b9:c9: e6:1b:68:32:8e:cd:f5:45:32:a7:29:d0:e3:fb:eb:f0:4a:43: d8:30:23:f1:db:6c:f1:71:8f:40:66:5f:2c:64:1c:50:dc:5d: d1:9f:39:48:26:4a:55:62:16:32:f5:fb:a7:50:cc:50:e3:98: 8f:4d:68:f0:6d:10:68:5b:f9:b8:a9:07:bd:f9:fe:dd:19:82: e6:19:39:7e:cb:42:b1:66:8f:66:d7:78:b2:87:46:a2:6c:ed: a0:43:7c:ee:18:30:e5:dd:1a:9d:f2:99:14:da:e8:3e:e8:03: 16:83:4f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JqBZ8NLur1H/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjdiM2VhZTUtZGIyZS00ZTE5LWE2OGMtZGI2MWUyMmRiNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI2rUnzM+M4HV/B3dRR5+2e4cctZ2yaNlCIY zYxt7rxmfqHkT1HY/BcNcr5hqyXk8m8CVQVlbza79DdaCS5WVejLFe15ZLYFGe4Y umc8RwAensnlnLkHV0A6tEuNcBA8tKUEiBAF8oEmWfmui9vjnhD3PyJEFvUIbkP3 vtd/+viAr5F3Asr6CRFyNJktVSgOPqc+83t+cvaPagK2qQjcq3Lqi5aXO4wTlN8U 3LdVESxYvbApiMaotBPzqoBXqexZQFvz3kWEz0CGMFM9HSHDT32dkx2dlJFD1May XrkeBaYgsDbUD1fwaJYl9wfaCaLwph/X1aRkbgJOKmG6A0wdpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBne1UYHB5HrkF8jzJPkYdu4NB3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJiYWE3YTgtYThmNi0z NmZhLThlNzUtM2VjYjhhY2EwMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAnAxpiOyRRlK30lGhheAn2ld8ffk02m/BAFbDMAHdWkcYUrcsoktz7 d7r5AOnyA5Mv1QB0+RNzq9AWmjQoFATHwK4+XLvmEDwIPW70JpFKesDJVtcyYMEY ttPeumvoFILZyeRrpTzxumFgbzrTut9wgSMFdyhXmrzHOLaljZPlWpgi+k1nLUMS cM28zyG5yeYbaDKOzfVFMqcp0OP76/BKQ9gwI/HbbPFxj0BmXyxkHFDcXdGfOUgm SlViFjL1+6dQzFDjmI9NaPBtEGhb+bipB735/t0ZguYZOX7LQrFmj2bXeLKHRqJs 7aBDfO4YMOXdGp3ymRTa6D7oAxaDT20= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:02 2025 by rpki-client