$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa File: e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa (raw, json) Hash identifier: OrrFMmjvKnb0pZ5xR3pTcQgapt160vme6YkJ4qvFnGs= Subject key identifier: 4A:0F:D9:B0:BD:D0:72:3E:91:79:81:92:77:86:12:73:9D:7F:F0:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EBABDACFB7792ACF2B53E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa Signing time: Mon 31 Mar 2025 11:16:04 +0000 ROA not before: Mon 31 Mar 2025 11:16:04 +0000 ROA not after: Sun 29 Jun 2025 11:16:04 +0000 asID: 20940 IP address blocks: 23.209.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ba:bd:ac:fb:77:92:ac:f2:b5:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 11:16:04 2025 GMT Not After : Jun 29 11:16:04 2025 GMT Subject: CN=551e37c7-335b-45cd-84f6-d4775c960268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:e4:74:e3:4f:18:64:f3:45:fd:e8:8d:bd: 2b:4c:8a:f4:e7:f4:d0:78:a5:2f:7f:17:a2:b7:ae: 8c:7c:da:85:58:c5:d3:bd:e5:61:7e:15:1e:2e:ac: ba:f5:80:ac:22:c9:5f:6f:da:5d:d5:0a:26:8f:d2: 13:d8:95:3d:7e:ae:80:1a:39:a3:ad:75:22:ac:90: a1:fd:2c:32:0a:c6:5f:b5:0e:49:12:36:c6:75:b9: bd:44:d9:06:b9:18:e8:9f:0c:92:bd:0a:9c:1e:30: 5e:79:d3:d7:61:ac:cb:09:eb:d4:cc:f4:c9:a6:f4: e3:c5:04:2b:32:70:72:cc:ec:0d:53:86:6b:5d:a3: c9:4d:de:4e:0d:a2:f0:6c:95:35:21:44:dd:3e:e8: 12:90:27:ab:3e:2e:b6:6e:24:55:27:3a:b8:b1:8e: ad:fc:26:6e:0c:69:15:fb:fa:80:7c:a7:45:bf:de: 70:c7:d1:db:83:73:55:4a:b5:10:22:8f:e0:72:b8: 3d:0c:8f:23:38:a2:25:ec:d4:89:a6:b0:a9:12:b1: 52:d9:75:53:05:ac:14:74:20:f3:33:8d:a3:f2:88: 2b:d6:d7:76:fa:8a:47:66:10:43:39:55:6e:01:48: 01:19:18:0f:16:98:29:05:0a:93:c4:92:1d:b1:4b: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0F:D9:B0:BD:D0:72:3E:91:79:81:92:77:86:12:73:9D:7F:F0:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c0:b4:39:68:db:c6:97:c6:5e:18:64:ea:e7:10:e7:ea:b0: c1:f1:72:86:70:49:15:39:70:82:88:ea:88:6d:7a:23:d2:3f: b1:c6:05:b2:67:29:3b:cf:3c:a0:b8:93:b8:33:ad:ac:f5:e1: 9f:d3:e1:6a:b1:07:e8:15:6f:c6:51:9f:27:83:49:81:6b:ce: de:86:30:c8:16:cc:a2:6d:1c:a1:6a:b0:ab:76:4e:7b:43:22: 21:4c:aa:20:2a:a9:e6:c1:6e:7f:5b:5a:55:cd:08:f6:99:4d: 12:bb:8d:db:5d:83:d0:c1:26:ee:f2:90:d7:79:a7:0d:71:84: b9:cc:25:73:69:1f:43:31:c1:38:69:5e:fc:76:4e:28:35:1a: fe:47:a0:23:61:ee:41:35:76:0f:eb:87:7f:f5:92:1a:e4:30: 0a:56:b7:0f:1f:96:37:fd:d3:31:5c:7e:54:2e:80:06:0e:02: 9a:17:cf:ed:6c:5e:55:b2:3f:20:77:17:20:83:47:45:50:33: 8c:4b:13:5d:73:51:8d:c1:53:7d:c1:b9:ea:c9:96:d5:d9:5e: 9f:5b:3f:aa:cb:e9:96:72:23:6d:82:65:32:0d:f2:cf:bd:33: d0:5f:e7:40:b7:5e:da:34:a3:32:b8:cc:c3:31:e0:2c:41:f3: d3:b8:8e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEleur2s+3eSrPK1PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTExMTYwNFoXDTI1MDYyOTExMTYwNFowLzEtMCsGA1UEAxMk NTUxZTM3YzctMzM1Yi00NWNkLTg0ZjYtZDQ3NzVjOTYwMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKjkdONPGGTzRf3ojb0rTIr05/TQeKUvfxei t66MfNqFWMXTveVhfhUeLqy69YCsIslfb9pd1Qomj9IT2JU9fq6AGjmjrXUirJCh /SwyCsZftQ5JEjbGdbm9RNkGuRjonwySvQqcHjBeedPXYazLCevUzPTJpvTjxQQr MnByzOwNU4ZrXaPJTd5ODaLwbJU1IUTdPugSkCerPi62biRVJzq4sY6t/CZuDGkV +/qAfKdFv95wx9Hbg3NVSrUQIo/gcrg9DI8jOKIl7NSJprCpErFS2XVTBawUdCDz M42j8ogr1td2+opHZhBDOVVuAUgBGRgPFpgpBQqTxJIdsUt9HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoP2bC90HI+kXmBkneGEnOdf/CIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkwOGEwMWQtNWI5Ny0z OWNiLThlM2UtYmNkMzY5ZDcyZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbAtDlo28aXxl4YZOrnEOfqsMHxcoZwSRU5cIKI6ohteiPSP7HGBbJn KTvPPKC4k7gzraz14Z/T4WqxB+gVb8ZRnyeDSYFrzt6GMMgWzKJtHKFqsKt2TntD IiFMqiAqqebBbn9bWlXNCPaZTRK7jdtdg9DBJu7ykNd5pw1xhLnMJXNpH0MxwThp Xvx2Tig1Gv5HoCNh7kE1dg/rh3/1khrkMApWtw8fljf90zFcflQugAYOApoXz+1s XlWyPyB3FyCDR0VQM4xLE11zUY3BU33BuerJltXZXp9bP6rL6ZZyI22CZTIN8s+9 M9Bf50C3Xto0ozK4zMMx4CxB89O4jv8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:58 2025 by rpki-client