$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf3a685-cb31-376f-b954-f1e91e3a3b31.roa File: 6bf3a685-cb31-376f-b954-f1e91e3a3b31.roa (raw, json) Hash identifier: 8/CbRx0nzMrdrR1fUnvhmMSf5M0hASaNpkI2Ps6PUa0= Subject key identifier: 84:CA:35:56:FD:68:BE:2B:33:50:50:B0:48:8A:B6:F4:1B:92:7E:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF45369B0E195D8C69DF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf3a685-cb31-376f-b954-f1e91e3a3b31.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.215.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:45:36:9b:0e:19:5d:8c:69:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=f12057ad-a44b-4d3d-a7ce-71ba6a3adc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:8e:96:10:fe:02:01:a7:21:e8:e5:97:64: 90:1b:ec:77:de:35:dd:aa:08:97:88:42:ca:73:8d: ce:b9:b4:47:ff:a7:cf:fe:4c:66:74:af:6b:46:8a: 31:5a:27:5e:1c:aa:48:22:72:43:5e:f3:91:84:3b: 29:32:c3:1f:7d:6a:53:cb:40:a3:ff:5a:9a:89:42: ab:bd:30:bf:d8:a8:5d:27:0b:08:23:00:32:5e:db: 0a:53:70:48:de:39:4e:f2:28:16:66:a4:72:b4:06: c6:8e:a8:83:87:2d:cd:18:4e:6e:e0:19:d8:d7:8d: 11:8a:25:e3:9c:ba:fe:0b:8f:b8:76:98:93:59:16: 12:cd:b2:bb:d2:63:57:16:fd:34:fe:f0:a4:51:d5: 01:9d:09:39:50:a4:57:69:3e:49:e3:01:c8:39:5f: d8:0d:60:79:b4:4c:61:a5:ee:a0:bc:0b:eb:eb:3a: 56:1f:e9:51:8a:3a:49:c3:c2:22:3d:d7:e6:d9:30: 41:d5:a4:41:bf:20:07:b4:b4:1c:c5:9d:a5:1f:3b: a4:68:98:12:26:34:70:02:6b:1a:47:33:86:d3:af: 48:98:1a:d5:e5:2c:21:85:e9:31:7b:45:8b:ac:50: 81:37:f9:81:5c:4d:d9:2c:4d:74:38:2e:79:c1:07: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CA:35:56:FD:68:BE:2B:33:50:50:B0:48:8A:B6:F4:1B:92:7E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf3a685-cb31-376f-b954-f1e91e3a3b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bd:99:33:97:92:43:88:10:e8:b0:69:37:f1:fa:07:c4:ab: 87:11:f6:4b:ca:88:5b:b6:02:82:4d:e0:44:66:1c:c5:5a:92: 97:f8:35:b0:a8:67:ed:c7:71:66:ef:d3:66:4e:89:d9:c8:70: ad:d6:cb:ff:6f:3f:f0:0a:40:d3:12:9e:88:d1:4a:a7:b3:31: 63:e2:b4:3c:48:e9:2d:6f:f0:24:1b:74:be:5a:90:01:9e:f0: 53:26:fd:b5:1c:b5:e7:ea:5d:dd:7e:d9:a9:b5:5f:94:b9:d1: ea:13:ca:ae:18:33:14:57:55:7c:ef:ea:0a:b3:cf:cb:c0:42: 75:2f:68:10:71:ed:37:c3:46:f8:cf:53:bf:d4:de:25:7e:cb: 25:6f:9a:d5:ed:cf:d5:28:63:5b:eb:ad:14:32:77:90:13:01: 6a:a6:3a:4c:a0:bb:d9:9d:7c:7d:53:01:de:ed:7c:cd:f8:63: 82:cc:fc:16:49:da:20:f3:a7:9c:ed:ae:df:7c:9d:01:b8:bf: aa:4f:09:c2:9d:f0:eb:f9:b5:e0:1d:35:dd:43:71:46:f9:9b: 12:43:d7:c9:fe:c9:42:e0:6d:70:e4:f2:90:98:32:85:8d:5b: b3:f1:09:56:b0:c7:09:17:20:94:6c:99:86:9b:9a:40:80:6a: ad:d0:f6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0U2mw4ZXYxp34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjEyMDU3YWQtYTQ0Yi00ZDNkLWE3Y2UtNzFiYTZhM2FkYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7yOlhD+AgGnIejll2SQG+x33jXdqgiXiELK c43OubRH/6fP/kxmdK9rRooxWideHKpIInJDXvORhDspMsMffWpTy0Cj/1qaiUKr vTC/2KhdJwsIIwAyXtsKU3BI3jlO8igWZqRytAbGjqiDhy3NGE5u4BnY140RiiXj nLr+C4+4dpiTWRYSzbK70mNXFv00/vCkUdUBnQk5UKRXaT5J4wHIOV/YDWB5tExh pe6gvAvr6zpWH+lRijpJw8IiPdfm2TBB1aRBvyAHtLQcxZ2lHzukaJgSJjRwAmsa RzOG069ImBrV5Swhhekxe0WLrFCBN/mBXE3ZLE10OC55wQdQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITKNVb9aL4rM1BQsEiKtvQbkn7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJmM2E2ODUtY2IzMS0z NzZmLWI5NTQtZjFlOTFlM2EzYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9cHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy9mTOXkkOIEOiwaTfx+gfEq4cR9kvKiFu2AoJN4ERmHMVakpf4NbCo Z+3HcWbv02ZOidnIcK3Wy/9vP/AKQNMSnojRSqezMWPitDxI6S1v8CQbdL5akAGe 8FMm/bUctefqXd1+2am1X5S50eoTyq4YMxRXVXzv6gqzz8vAQnUvaBBx7TfDRvjP U7/U3iV+yyVvmtXtz9UoY1vrrRQyd5ATAWqmOkygu9mdfH1TAd7tfM34Y4LM/BZJ 2iDzp5ztrt98nQG4v6pPCcKd8Ov5teAdNd1DcUb5mxJD18n+yULgbXDk8pCYMoWN W7PxCVawxwkXIJRsmYabmkCAaq3Q9nQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:55:47 2025 by rpki-client