$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f78eeca3-c83a-3fcf-bcf6-7e7ae587ae8c.roa File: f78eeca3-c83a-3fcf-bcf6-7e7ae587ae8c.roa (raw, json) Hash identifier: +IPmFmaXvg03VdcNLpbss7+qSLDUTOc8vxfs0JK/TzI= Subject key identifier: 03:8F:6D:74:AA:CF:67:8D:55:96:B9:2E:9D:05:3C:4F:97:A6:5C:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489BD9D30403F6E2D79464FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f78eeca3-c83a-3fcf-bcf6-7e7ae587ae8c.roa Signing time: Mon 20 Jan 2025 15:56:04 +0000 ROA not before: Mon 20 Jan 2025 15:56:04 +0000 ROA not after: Sun 20 Apr 2025 14:56:04 +0000 asID: 16625 IP address blocks: 23.222.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:d9:d3:04:03:f6:e2:d7:94:64:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 20 15:56:04 2025 GMT Not After : Apr 20 14:56:04 2025 GMT Subject: CN=4914a5a6-c18f-43d2-a2ba-5aa371d0f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:e3:a6:8b:50:0b:35:3b:74:b6:2d:c5:7d: e9:d3:63:98:9e:eb:24:d0:7b:ee:78:3b:6f:b5:4b: a2:29:86:7f:a1:26:fa:4b:dc:21:bd:65:e3:60:bc: a8:97:c0:f0:5a:58:27:10:ad:69:0b:f5:08:f5:d3: cc:5e:a9:ff:6c:13:0a:af:02:a7:4c:44:e4:a7:33: 9c:bd:df:0b:fe:ea:03:bc:f2:f2:84:8b:1b:d9:33: 0a:c4:35:bb:83:c5:2e:6f:24:29:7e:a2:a2:52:65: de:31:74:21:6e:e2:ed:4a:3d:15:68:58:28:9a:75: e9:b8:9f:97:f1:66:fc:64:ea:10:38:4c:e0:61:cd: 1c:e3:78:15:b7:ff:88:f8:a8:22:2b:a3:92:f1:17: 5d:aa:f2:eb:4d:1f:14:76:5c:4d:51:f0:16:15:e2: 6f:ef:a4:5b:02:97:9d:1f:3f:41:72:18:5e:01:ee: d5:57:50:26:4d:d1:18:13:47:5a:e0:bb:0e:0a:37: ea:52:ac:c2:9d:94:71:e4:da:81:a3:04:9e:33:15: fa:34:76:25:b5:7b:76:62:1b:1d:8b:95:96:54:bc: 3d:a6:69:ad:94:2d:a4:82:35:0c:20:47:13:eb:b1: 7e:c1:ef:ee:c8:25:3a:0f:32:33:ec:3b:c8:9e:e6: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8F:6D:74:AA:CF:67:8D:55:96:B9:2E:9D:05:3C:4F:97:A6:5C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f78eeca3-c83a-3fcf-bcf6-7e7ae587ae8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c2:3d:ce:fb:f6:38:60:1e:17:cf:58:1a:39:98:9a:fa:a1: 47:fb:7f:21:f0:5b:0c:9b:7e:13:81:aa:32:16:9b:80:0b:93: b6:9b:81:91:68:1f:b5:87:da:04:f4:7e:d2:21:ed:fc:e0:8c: 37:d8:57:98:6c:d7:dd:19:2e:a1:d6:d1:ed:1f:ec:83:8f:21: 09:77:8f:a9:ec:4f:a7:6e:25:a8:2c:d4:a8:bb:36:d6:4c:cd: c9:07:e0:db:9c:e8:b1:5b:1b:2f:7d:ec:c2:4e:3a:ed:ea:bc: 8f:a2:5b:d5:e3:86:6b:3f:01:de:17:e7:bf:fc:86:be:d8:14: f2:ee:ae:d4:ca:b8:16:6a:6f:73:2a:bc:9e:a9:1f:c2:65:f0: 81:76:5c:d0:d4:3e:e4:e2:c3:05:92:fa:48:88:7d:c2:eb:67: b8:cf:29:9c:ea:3e:6f:57:42:a7:ac:52:cc:91:29:1a:43:d8: f8:4b:b2:50:6b:c9:2c:40:be:ae:d4:97:c9:89:f1:aa:b8:54: a3:5d:94:0b:32:cf:0e:af:84:e6:bc:45:7f:25:b9:53:c2:00: 04:62:5d:2f:0f:50:dc:a2:aa:fd:1f:1e:fb:c6:09:94:79:31: 52:89:fa:dc:bc:ab:af:e2:6f:d6:f3:c0:f0:7b:b1:8d:a0:6d: ab:83:37:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEib2dMEA/bi15Rk/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMDE1NTYwNFoXDTI1MDQyMDE0NTYwNFowLzEtMCsGA1UEAxMk NDkxNGE1YTYtYzE4Zi00M2QyLWEyYmEtNWFhMzcxZDBmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTjpotQCzU7dLYtxX3p02OYnusk0HvueDtv tUuiKYZ/oSb6S9whvWXjYLyol8DwWlgnEK1pC/UI9dPMXqn/bBMKrwKnTETkpzOc vd8L/uoDvPLyhIsb2TMKxDW7g8UubyQpfqKiUmXeMXQhbuLtSj0VaFgomnXpuJ+X 8Wb8ZOoQOEzgYc0c43gVt/+I+KgiK6OS8RddqvLrTR8UdlxNUfAWFeJv76RbAped Hz9BchheAe7VV1AmTdEYE0da4LsOCjfqUqzCnZRx5NqBowSeMxX6NHYltXt2Yhsd i5WWVLw9pmmtlC2kgjUMIEcT67F+we/uyCU6DzIz7DvInubxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOPbXSqz2eNVZa5Lp0FPE+XplyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjc4ZWVjYTMtYzgzYS0z ZmNmLWJjZjYtN2U3YWU1ODdhZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF95QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfCPc779jhgHhfPWBo5mJr6oUf7fyHwWwybfhOBqjIWm4ALk7abgZFo H7WH2gT0ftIh7fzgjDfYV5hs190ZLqHW0e0f7IOPIQl3j6nsT6duJags1Ki7NtZM zckH4Nuc6LFbGy997MJOOu3qvI+iW9Xjhms/Ad4X57/8hr7YFPLurtTKuBZqb3Mq vJ6pH8Jl8IF2XNDUPuTiwwWS+kiIfcLrZ7jPKZzqPm9XQqesUsyRKRpD2PhLslBr ySxAvq7Ul8mJ8aq4VKNdlAsyzw6vhOa8RX8luVPCAARiXS8PUNyiqv0fHvvGCZR5 MVKJ+ty8q6/ib9bzwPB7sY2gbauDN7Q= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:59 2025 by rpki-client