$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0d34bc8-f73e-350d-9333-c315d1493e60.roa File: f0d34bc8-f73e-350d-9333-c315d1493e60.roa (raw, json) Hash identifier: dwkUpAHnRE5XPRRjTcjwXpltanZS2tGjIAQjTY/uCAE= Subject key identifier: BC:19:2A:30:8B:1F:DC:B5:42:78:5A:60:0D:C2:4B:42:BC:A4:81:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A400DC0C4E310DBFC50DB280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0d34bc8-f73e-350d-9333-c315d1493e60.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.193.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:dc:0c:4e:31:0d:bf:c5:0d:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=99800b85-cba5-44a8-ae11-0e980140da68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:be:9c:ba:6b:52:5e:7e:06:a4:e8:b3:4b:6b: e3:a9:8d:d9:69:fd:81:f3:aa:20:e2:c8:e2:1e:22: 6a:2c:7d:93:bb:bd:81:2e:25:e1:5a:33:f6:58:e1: f3:c6:c1:bb:a4:d6:d6:bf:e8:50:4d:a2:83:eb:d4: 90:37:22:30:ec:aa:ba:f0:be:b0:5b:c5:84:31:b9: e1:78:ac:7b:01:75:69:72:ec:12:e1:d5:5d:9c:64: 43:38:9d:d3:5b:10:26:99:18:36:a0:a9:b8:c3:7a: 13:e0:a7:f0:d4:dc:f6:31:d0:7b:2d:07:a0:ad:f7: 4f:23:dd:00:4d:6d:98:9c:b0:75:95:47:88:63:fe: 7f:73:2b:e1:61:d3:ff:ac:12:03:e2:87:b0:1e:92: f5:90:c0:40:b9:2b:6c:c2:a6:db:da:1e:d0:c6:29: 51:a7:07:2e:8c:05:85:b3:e9:eb:5c:17:f6:77:32: 70:7c:28:70:eb:fc:99:8c:17:b0:d1:39:5d:0e:4c: ca:0c:cc:c8:b3:87:2f:62:ba:0c:98:96:e3:b1:b3: 7f:24:49:89:15:c0:61:3e:40:cd:05:97:11:72:40: c8:69:26:a7:d2:40:33:af:eb:9f:dd:cb:9a:fd:a0: ac:4e:d2:98:75:f5:70:e9:08:7d:c8:fb:fc:b4:fb: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:19:2A:30:8B:1F:DC:B5:42:78:5A:60:0D:C2:4B:42:BC:A4:81:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0d34bc8-f73e-350d-9333-c315d1493e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c9:29:d9:b5:f2:ca:76:c4:84:2c:af:4e:60:de:ba:f6:42: d0:2a:f2:d8:eb:b4:6b:c3:b5:fc:72:30:5d:db:ea:96:97:72: 30:a1:58:a6:82:04:da:54:1f:8a:ce:72:60:6b:65:1a:f1:3f: 54:bd:ad:2e:46:88:76:ab:f2:a2:f4:43:2d:92:06:17:bf:9b: 26:7c:3a:5f:ad:7b:27:fb:45:8d:80:1f:03:5b:a9:0e:a7:dd: 03:5c:2a:fb:50:03:68:67:57:c6:90:88:2b:f3:9c:fb:9b:26: d5:31:c1:b2:26:24:82:e6:59:fc:75:76:82:fd:fc:10:ab:aa: c6:90:70:79:2b:80:c5:4f:f9:62:dd:78:45:dc:cf:cc:2a:b4: 2b:7e:7a:c7:13:de:1d:9e:39:be:14:1c:60:0d:09:4a:38:4f: 9b:e7:17:b4:65:48:1f:6e:39:20:fd:d9:3f:9a:6a:2f:83:55: 0a:68:64:cc:70:07:03:4b:50:64:d8:92:58:00:8e:c7:ad:8a: 0c:8b:10:37:4f:0a:ea:29:e3:58:52:f9:fe:67:99:a7:88:44: 96:ef:68:fe:02:40:23:92:9a:ab:cf:15:c1:c7:ff:e0:e4:89: a2:f2:d9:3f:14:90:cf:7a:4a:85:c6:51:d5:62:47:72:9f:13: 23:36:a7:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANwMTjENv8UNsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OTk4MDBiODUtY2JhNS00NGE4LWFlMTEtMGU5ODAxNDBkYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr6cumtSXn4GpOizS2vjqY3Zaf2B86og4sji HiJqLH2Tu72BLiXhWjP2WOHzxsG7pNbWv+hQTaKD69SQNyIw7Kq68L6wW8WEMbnh eKx7AXVpcuwS4dVdnGRDOJ3TWxAmmRg2oKm4w3oT4Kfw1Nz2MdB7LQegrfdPI90A TW2YnLB1lUeIY/5/cyvhYdP/rBID4oewHpL1kMBAuStswqbb2h7QxilRpwcujAWF s+nrXBf2dzJwfChw6/yZjBew0TldDkzKDMzIs4cvYroMmJbjsbN/JEmJFcBhPkDN BZcRckDIaSan0kAzr+uf3cua/aCsTtKYdfVw6Qh9yPv8tPv9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwZKjCLH9y1QnhaYA3CS0K8pIEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjBkMzRiYzgtZjczZS0z NTBkLTkzMzMtYzMxNWQxNDkzZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbJKdm18sp2xIQsr05g3rr2QtAq8tjrtGvDtfxyMF3b6paXcjChWKaC BNpUH4rOcmBrZRrxP1S9rS5GiHar8qL0Qy2SBhe/myZ8Ol+teyf7RY2AHwNbqQ6n 3QNcKvtQA2hnV8aQiCvznPubJtUxwbImJILmWfx1doL9/BCrqsaQcHkrgMVP+WLd eEXcz8wqtCt+escT3h2eOb4UHGANCUo4T5vnF7RlSB9uOSD92T+aai+DVQpoZMxw BwNLUGTYklgAjsetigyLEDdPCuop41hS+f5nmaeIRJbvaP4CQCOSmqvPFcHH/+Dk iaLy2T8UkM96SoXGUdViR3KfEyM2p9I= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:33 2025 by rpki-client