$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef864f59-73be-3ea0-913b-ae9a2d553700.roa File: ef864f59-73be-3ea0-913b-ae9a2d553700.roa (raw, json) Hash identifier: NHrFPy6ey/iUDu2WKv9JP7vMJL0KyMHTZywkAHd4Xjs= Subject key identifier: 22:32:45:8E:B4:EA:C1:C1:35:38:97:3B:1B:91:EB:6E:4B:98:E7:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849AA4F714902925F06DD524680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef864f59-73be-3ea0-913b-ae9a2d553700.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.214.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:71:49:02:92:5f:06:dd:52:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=4f1e1dc3-ccd0-4398-9a6a-484b0d1f4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:35:59:18:6a:e9:43:c3:94:d2:80:70:5a: ac:24:2e:00:55:f2:3f:b1:cb:67:b3:dc:da:08:2f: 0b:df:80:9a:dc:a8:cf:fe:72:2c:07:09:6a:f4:24: 7e:73:b6:93:8b:ba:c8:cd:08:1a:10:18:2b:12:96: 07:69:95:93:35:78:c4:8b:0f:5d:d5:93:ca:fb:33: 09:03:03:b5:f8:ad:04:66:68:38:c9:ea:1e:7f:17: 52:79:3f:2f:cc:5a:fa:0a:f3:05:0e:3d:1a:c9:80: 69:81:cf:99:d4:23:10:12:81:46:28:c6:b3:b5:99: c9:11:5e:49:75:82:f5:57:d6:26:fd:7d:c9:80:55: ff:dc:f2:e9:dd:d7:b8:af:b3:ea:3b:ef:43:f8:50: 99:f9:fd:c6:74:4a:dd:1f:f5:10:f8:82:94:e4:54: 5c:31:ad:26:b7:7d:12:32:c5:e6:e0:3f:c7:7a:02: 62:e6:62:4f:b7:26:84:fd:ad:65:4a:09:25:ab:06: cf:6d:4e:e7:22:2d:96:91:a2:55:7b:c1:c8:52:df: 8c:4a:a1:a1:cc:08:f8:41:dc:3a:05:70:27:4d:6f: de:38:12:54:e0:a9:b4:4c:7e:f4:01:47:1d:5d:29: 84:94:6e:b8:f8:75:79:35:03:5b:38:3d:14:a3:af: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:45:8E:B4:EA:C1:C1:35:38:97:3B:1B:91:EB:6E:4B:98:E7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef864f59-73be-3ea0-913b-ae9a2d553700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c6:49:c7:1e:31:cf:5c:21:45:21:e5:a9:7c:b9:01:3c:1b: 76:24:39:09:21:eb:41:a6:0e:47:f5:34:65:42:ad:63:0a:a5: ee:18:29:e7:a9:12:f3:bc:57:4d:af:bc:7c:7d:db:52:52:44: 02:4b:56:6e:19:fa:82:0f:f7:21:2c:54:26:55:ae:56:c0:38: d5:eb:3c:fe:41:fa:3c:65:3d:04:92:54:89:4a:b9:71:0f:7c: d0:d4:4e:0b:ca:8f:d2:95:06:bd:bb:03:b6:2d:68:99:b9:5b: 48:e5:01:a3:34:a1:43:5d:8e:a6:d0:9e:2c:b4:7d:bb:d0:1c: 36:19:05:45:88:a8:0d:4c:79:3e:50:33:57:2f:d4:88:ba:66: a2:4d:36:41:05:71:8e:bc:76:5b:1c:22:5e:23:f0:dc:43:c4: 6c:ab:0b:f7:45:e0:13:2b:4f:70:43:63:56:6b:f4:6d:98:a9: 01:2c:fd:45:6a:5c:b1:d8:78:58:b9:9e:23:f7:d9:f0:72:d7: 85:af:2d:ed:e6:b4:df:1e:ec:81:bb:7b:23:d6:ce:bb:51:96: ee:fd:63:33:5c:7d:53:59:d0:7d:7a:80:ad:08:80:72:7d:e0: 2a:25:aa:3e:f1:9f:d8:ef:65:a9:ee:1e:c9:52:5d:96:bd:88: ba:b8:2e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3FJApJfBt1SRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NGYxZTFkYzMtY2NkMC00Mzk4LTlhNmEtNDg0YjBkMWY0NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAius1WRhq6UPDlNKAcFqsJC4AVfI/sctns9za CC8L34Ca3KjP/nIsBwlq9CR+c7aTi7rIzQgaEBgrEpYHaZWTNXjEiw9d1ZPK+zMJ AwO1+K0EZmg4yeoefxdSeT8vzFr6CvMFDj0ayYBpgc+Z1CMQEoFGKMaztZnJEV5J dYL1V9Ym/X3JgFX/3PLp3de4r7PqO+9D+FCZ+f3GdErdH/UQ+IKU5FRcMa0mt30S MsXm4D/HegJi5mJPtyaE/a1lSgklqwbPbU7nIi2WkaJVe8HIUt+MSqGhzAj4Qdw6 BXAnTW/eOBJU4Km0TH70AUcdXSmElG64+HV5NQNbOD0Uo69uVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIyRY606sHBNTiXOxuR625LmOcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWY4NjRmNTktNzNiZS0z ZWEwLTkxM2ItYWU5YTJkNTUzNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9YYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTGScceMc9cIUUh5al8uQE8G3YkOQkh60GmDkf1NGVCrWMKpe4YKeep EvO8V02vvHx921JSRAJLVm4Z+oIP9yEsVCZVrlbAONXrPP5B+jxlPQSSVIlKuXEP fNDUTgvKj9KVBr27A7YtaJm5W0jlAaM0oUNdjqbQniy0fbvQHDYZBUWIqA1MeT5Q M1cv1Ii6ZqJNNkEFcY68dlscIl4j8NxDxGyrC/dF4BMrT3BDY1Zr9G2YqQEs/UVq XLHYeFi5niP32fBy14WvLe3mtN8e7IG7eyPWzrtRlu79YzNcfVNZ0H16gK0IgHJ9 4Colqj7xn9jvZanuHslSXZa9iLq4LkM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:37 2025 by rpki-client