$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa File: e3aafe85-c8b6-3789-be4c-594350312c1d.roa (raw, json) Hash identifier: ZmnHOQ65rxz6ZnRbJzi2KseLUI6/ndFP/ur0e2NrGTM= Subject key identifier: 8B:01:75:78:21:8C:C9:C7:F2:00:B5:0A:D3:10:CE:ED:0E:23:63:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489340B9BF902B2AD6701163F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 34164 IP address blocks: 23.214.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:b9:bf:90:2b:2a:d6:70:11:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=7f4a6369-4cd6-4b13-9a13-e759859ace58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:3a:ae:72:6d:0c:1f:82:39:a8:4f:07:4d: b5:34:7d:5c:e0:6e:5b:20:cc:e4:2c:af:18:10:2e: 61:a2:91:f3:d6:9b:f1:f5:ac:0b:a2:7b:21:08:50: dd:da:b9:fc:28:f6:88:ad:7b:db:e4:66:46:17:e5: c5:ec:15:2e:41:42:f5:c0:e6:15:6b:3f:1d:ff:a3: e9:ae:d8:31:01:dd:af:dc:66:09:4a:93:af:53:76: a7:78:b6:13:a3:c4:0a:1e:fc:b9:d6:d0:1f:a8:f4: db:82:51:e3:fe:c0:79:4e:16:00:06:c3:43:77:da: 2b:f6:67:cb:b3:3e:8f:c6:c0:06:c0:25:66:31:03: 49:48:15:74:04:b8:53:1b:22:ea:7b:2d:53:9a:f3: b4:04:94:9b:4f:2c:6f:f4:6a:a6:fa:3f:db:ba:13: ad:33:05:2f:09:94:95:76:fe:82:e3:a6:e5:85:50: 6f:6f:02:ec:f6:17:d6:30:f2:3d:fe:66:19:c8:2a: e7:48:e0:e4:1f:cc:bb:61:a8:2a:57:6d:f9:f6:f5: 98:b9:14:44:1a:6e:f7:d6:5f:cb:a2:8f:16:c1:2f: b4:bf:a3:71:3d:31:2c:c0:15:30:98:44:50:ff:b6: 6e:98:75:ec:28:7e:42:c4:e7:87:80:32:08:a1:1c: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:75:78:21:8C:C9:C7:F2:00:B5:0A:D3:10:CE:ED:0E:23:63:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4f:ea:f9:7c:a8:80:fd:87:24:ce:0a:12:6f:df:50:d6:f6: 64:4c:42:aa:a4:02:53:26:33:cc:09:d5:4b:33:b8:fe:b9:d7: 7c:86:2d:ae:46:42:e6:68:3d:eb:2c:3d:26:44:2b:86:87:2d: a7:31:fc:ba:70:36:59:3d:cd:30:63:62:23:3f:1f:cf:c8:1a: c4:0d:9d:c6:b2:93:24:21:e3:c0:7a:28:61:5a:78:14:d1:c7: 4b:85:28:b7:ca:57:20:2f:90:25:46:9c:eb:33:f6:0a:4e:81: e4:6f:4f:86:e8:b8:85:e1:95:fe:5c:c1:0b:9b:89:3f:ca:b2: c5:9f:5b:94:14:1c:47:2f:ff:ea:70:47:90:b1:95:04:bc:8a: bf:c2:3c:17:21:e6:0e:a7:f9:9a:cc:00:2b:a1:8d:bd:54:03: 71:ae:8a:0d:3a:52:be:57:8e:b3:59:53:51:61:46:57:9a:65: 48:17:9a:ad:16:dd:19:27:38:9e:1f:ba:d1:5d:be:9a:93:f8: 6f:3c:d2:ff:8c:6d:19:a8:d6:9a:fb:75:17:17:23:a1:b5:e4: f1:90:f7:d2:20:05:d8:7a:6d:66:ec:45:1a:a7:20:19:b5:67: 05:9e:c7:02:44:e6:3a:c3:73:53:a2:d7:9f:9c:63:b4:60:38: f2:1d:10:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLm/kCsq1nARY/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk N2Y0YTYzNjktNGNkNi00YjEzLTlhMTMtZTc1OTg1OWFjZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqQ6rnJtDB+COahPB021NH1c4G5bIMzkLK8Y EC5hopHz1pvx9awLonshCFDd2rn8KPaIrXvb5GZGF+XF7BUuQUL1wOYVaz8d/6Pp rtgxAd2v3GYJSpOvU3aneLYTo8QKHvy51tAfqPTbglHj/sB5ThYABsNDd9or9mfL sz6PxsAGwCVmMQNJSBV0BLhTGyLqey1TmvO0BJSbTyxv9Gqm+j/buhOtMwUvCZSV dv6C46blhVBvbwLs9hfWMPI9/mYZyCrnSODkH8y7YagqV2359vWYuRREGm731l/L oo8WwS+0v6NxPTEswBUwmERQ/7ZumHXsKH5CxOeHgDIIoRwZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsBdXghjMnH8gC1CtMQzu0OI2PiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNhYWZlODUtYzhiNi0z Nzg5LWJlNGMtNTk0MzUwMzEyYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdP6vl8qID9hyTOChJv31DW9mRMQqqkAlMmM8wJ1UszuP6513yGLa5G QuZoPessPSZEK4aHLacx/LpwNlk9zTBjYiM/H8/IGsQNncaykyQh48B6KGFaeBTR x0uFKLfKVyAvkCVGnOsz9gpOgeRvT4bouIXhlf5cwQubiT/KssWfW5QUHEcv/+pw R5CxlQS8ir/CPBch5g6n+ZrMACuhjb1UA3Guig06Ur5XjrNZU1FhRleaZUgXmq0W 3RknOJ4futFdvpqT+G880v+MbRmo1pr7dRcXI6G15PGQ99IgBdh6bWbsRRqnIBm1 ZwWexwJE5jrDc1Oi15+cY7RgOPIdECs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:18 2025 by rpki-client