$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e78c81-5633-389a-bb9e-891c33778a16.roa File: 18e78c81-5633-389a-bb9e-891c33778a16.roa (raw, json) Hash identifier: anTSl16jBMqJ9UfXYgpLyIF7thv28PsPc2YVMbGCvXY= Subject key identifier: 8C:52:59:81:DB:05:0F:39:4D:76:05:13:DC:E6:28:F9:F7:AF:99:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF455691A719DE1F229600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e78c81-5633-389a-bb9e-891c33778a16.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.215.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:45:56:91:a7:19:de:1f:22:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=002b1cf0-1e76-4131-887a-35aba82dd404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:93:e5:28:b7:6e:a8:f5:4a:29:8f:5f:bd: b6:da:28:b1:20:73:2d:75:a0:0a:04:e9:05:53:60: 08:a6:aa:76:52:f1:68:c8:94:ff:08:ba:35:e3:6a: d5:a6:f7:cb:d8:f5:a9:82:fe:8b:14:8e:33:b2:d6: 41:92:a9:d8:4c:29:ed:b0:7e:55:f7:38:3e:a5:d6: c1:7d:11:8f:b8:dd:4a:4f:25:7c:3a:e9:20:d7:f6: 09:97:76:92:7f:c9:93:51:3b:6d:e8:d9:03:ea:ff: 7e:36:50:34:65:78:7a:71:51:d3:2f:42:88:fe:5e: 4f:91:eb:fb:e4:88:50:87:85:54:03:c9:2d:47:8e: 75:2f:f6:3b:ee:a5:e1:6e:8f:45:13:e8:11:c2:8a: d5:bd:56:05:23:73:0a:21:87:75:e8:15:8f:e1:8c: c4:48:30:77:ac:3c:cb:b6:4a:42:41:75:f0:68:3d: 27:c6:e2:b6:ab:f8:44:32:8d:97:e2:85:48:65:10: d1:02:2e:66:d8:4f:cc:a3:91:6b:18:51:bf:17:7d: 0d:08:e9:68:dd:57:86:74:08:68:24:67:a4:ab:08: fe:06:95:30:49:87:75:72:6a:71:84:88:1a:9f:15: ac:76:38:3b:7f:74:33:65:43:31:97:ee:9f:41:04: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:52:59:81:DB:05:0F:39:4D:76:05:13:DC:E6:28:F9:F7:AF:99:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e78c81-5633-389a-bb9e-891c33778a16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8d:fb:7a:5b:89:98:f3:ba:8f:d8:fe:bf:0f:06:0d:07:89: 26:41:f1:d7:60:f8:63:e9:3e:2f:4c:a9:37:0f:92:b1:1f:0c: 51:6f:f3:c3:63:5d:2a:28:6d:e3:b3:a9:39:3c:e4:ca:d3:e4: 4d:6c:25:d8:5c:d4:cc:a8:cb:1a:57:a4:95:8f:a0:ad:4e:e2: aa:d7:13:bc:93:3e:b6:f1:2d:c1:c7:bd:d7:20:55:7f:35:a1: ba:2f:e0:83:bb:3a:47:d2:be:6d:b8:46:36:82:16:13:b1:48: bb:7f:fb:a1:30:58:67:ff:a1:0e:18:ab:6f:05:03:d7:2e:b4: 57:a8:a2:5b:a1:72:7c:55:ad:09:4f:bf:37:7b:f8:13:1a:88: 89:9e:41:98:e5:b7:0f:15:2f:fc:c3:a3:ea:fa:72:ac:d9:e1: 67:1a:5a:1c:a1:53:80:a7:c7:f1:08:88:66:bc:28:47:2d:ce: c3:4e:57:cc:e7:3d:85:e3:ea:43:44:d8:4e:f4:0f:38:0b:91: 07:eb:b8:7e:5d:8c:6e:05:e9:3d:8d:f5:4e:e4:b6:c8:c9:bf: 36:1e:9d:66:d2:2c:22:38:72:f1:cb:d7:0d:de:ea:74:e7:f9: f7:af:c7:47:7e:57:ed:ae:2e:fd:65:65:94:19:18:64:f7:d1: 7f:14:c3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0VWkacZ3h8ilgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MDAyYjFjZjAtMWU3Ni00MTMxLTg4N2EtMzVhYmE4MmRkNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldKT5Si3bqj1SimPX7222iixIHMtdaAKBOkF U2AIpqp2UvFoyJT/CLo142rVpvfL2PWpgv6LFI4zstZBkqnYTCntsH5V9zg+pdbB fRGPuN1KTyV8Oukg1/YJl3aSf8mTUTtt6NkD6v9+NlA0ZXh6cVHTL0KI/l5Pkev7 5IhQh4VUA8ktR451L/Y77qXhbo9FE+gRworVvVYFI3MKIYd16BWP4YzESDB3rDzL tkpCQXXwaD0nxuK2q/hEMo2X4oVIZRDRAi5m2E/Mo5FrGFG/F30NCOlo3VeGdAho JGekqwj+BpUwSYd1cmpxhIganxWsdjg7f3QzZUMxl+6fQQQfPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxSWYHbBQ85TXYFE9zmKPn3r5mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMThlNzhjODEtNTYzMy0z ODlhLWJiOWUtODkxYzMzNzc4YTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9ccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqN+3pbiZjzuo/Y/r8PBg0HiSZB8ddg+GPpPi9MqTcPkrEfDFFv88Nj XSoobeOzqTk85MrT5E1sJdhc1MyoyxpXpJWPoK1O4qrXE7yTPrbxLcHHvdcgVX81 obov4IO7OkfSvm24RjaCFhOxSLt/+6EwWGf/oQ4Yq28FA9cutFeooluhcnxVrQlP vzd7+BMaiImeQZjltw8VL/zDo+r6cqzZ4WcaWhyhU4Cnx/EIiGa8KEctzsNOV8zn PYXj6kNE2E70DzgLkQfruH5djG4F6T2N9U7ktsjJvzYenWbSLCI4cvHL1w3e6nTn +fevx0d+V+2uLv1lZZQZGGT30X8Uw8Q= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:41 2025 by rpki-client