$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75de4ba3-03c5-3d04-9bfa-b39d3e5a9999.roa File: 75de4ba3-03c5-3d04-9bfa-b39d3e5a9999.roa (raw, json) Hash identifier: cfEOb6IWvCVvo3pC6kjBoz4EAe9+PAgn1PPkbmzctw0= Subject key identifier: 59:95:4C:2E:3F:53:54:7A:50:80:7E:C4:E5:2E:09:16:EC:79:11:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF3F0D9B668E52BA05ACC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75de4ba3-03c5-3d04-9bfa-b39d3e5a9999.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.215.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3f:0d:9b:66:8e:52:ba:05:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=5a3ad69c-6105-4c33-8204-3e1dca9048bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:69:65:a5:a3:05:c4:7d:f8:ad:22:fc:0b: 28:63:b8:6b:94:ee:bb:9a:54:ac:91:5c:35:18:1a: e0:75:45:e1:3c:c6:59:60:0c:c9:4c:cd:d6:5a:69: 00:b4:62:7c:fe:59:60:70:c9:41:cb:cb:ea:4c:30: a8:c9:9e:86:0d:e8:cb:12:a4:f7:78:94:69:19:82: 3d:4f:68:0a:32:d8:87:fc:b4:77:b2:c4:8a:18:f7: 02:95:fc:c4:4b:fd:62:d9:aa:cb:5d:df:0b:10:37: dc:6b:06:ab:06:48:a3:5e:29:6a:4f:14:15:7b:99: 4a:dd:ef:8e:d0:1d:0e:3f:49:1a:76:08:96:ed:21: dd:58:16:2e:9c:8f:8e:60:37:47:0a:05:72:76:bf: 22:5c:e2:01:ee:e0:9d:1b:b3:bc:0a:19:4e:5a:04: 1f:84:3a:c7:3a:ec:94:32:0b:d9:4e:de:2a:b4:39: 2f:a2:4e:1a:22:c7:70:fb:9d:00:04:9c:6b:2f:96: 45:fd:b5:12:33:80:3c:7d:7f:5f:45:6e:00:9c:29: 2c:d0:0b:58:ca:4e:73:b1:06:a8:50:da:cf:a5:08: d0:d8:92:55:18:40:ba:95:0d:71:65:6a:cf:4f:20: 33:36:e3:b7:11:dc:73:e7:9a:a7:a3:f5:de:5e:cf: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:4C:2E:3F:53:54:7A:50:80:7E:C4:E5:2E:09:16:EC:79:11:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75de4ba3-03c5-3d04-9bfa-b39d3e5a9999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:de:97:78:83:7e:5d:6c:55:ac:21:60:3e:73:83:49:f7:2f: c4:53:62:08:1f:e3:bc:9e:57:44:94:96:a4:d4:fb:9f:81:89: 89:34:1b:69:6a:fa:f8:ea:79:56:79:d5:fe:77:91:60:35:73: 05:df:61:1e:39:b3:44:3c:86:32:c1:68:66:1c:0d:73:5f:37: ab:07:48:6c:15:e9:36:3e:be:03:04:f4:11:7a:b4:1b:0f:57: bb:ad:db:61:a3:e6:98:a3:f9:37:b7:54:96:85:b3:b9:e9:f0: 93:87:78:af:e0:29:67:6e:5a:b8:06:1c:c2:51:bb:0e:d9:cf: 67:46:cd:f8:4e:61:b0:78:29:57:58:98:e5:46:c4:97:f5:b4: b1:ce:ef:4f:c3:c0:27:f2:26:f3:d0:f5:75:43:de:3e:19:60: d9:0c:6a:df:a5:81:31:5e:07:6b:08:ce:d7:46:99:d7:0c:10: 7a:93:19:94:4c:a1:77:5f:48:19:12:27:9c:9d:ec:b6:d4:64: fc:a3:71:c0:4b:a2:e9:dc:27:e1:d8:91:bd:8b:54:0e:b7:ce: 53:34:01:23:ea:1e:af:e3:0c:55:4b:48:7a:93:4b:20:b1:3a: ef:08:f3:2f:38:5d:1c:03:81:b2:24:fb:f1:a1:8c:83:b0:46: 03:98:18:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvz8Nm2aOUroFrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NWEzYWQ2OWMtNjEwNS00YzMzLTgyMDQtM2UxZGNhOTA0OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzadpZaWjBcR9+K0i/AsoY7hrlO67mlSskVw1 GBrgdUXhPMZZYAzJTM3WWmkAtGJ8/llgcMlBy8vqTDCoyZ6GDejLEqT3eJRpGYI9 T2gKMtiH/LR3ssSKGPcClfzES/1i2arLXd8LEDfcawarBkijXilqTxQVe5lK3e+O 0B0OP0kadgiW7SHdWBYunI+OYDdHCgVydr8iXOIB7uCdG7O8ChlOWgQfhDrHOuyU MgvZTt4qtDkvok4aIsdw+50ABJxrL5ZF/bUSM4A8fX9fRW4AnCks0AtYyk5zsQao UNrPpQjQ2JJVGEC6lQ1xZWrPTyAzNuO3Edxz55qno/XeXs/aJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmVTC4/U1R6UIB+xOUuCRbseRGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzVkZTRiYTMtMDNjNS0z ZDA0LTliZmEtYjM5ZDNlNWE5OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9cxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPel3iDfl1sVawhYD5zg0n3L8RTYggf47yeV0SUlqTU+5+BiYk0G2lq +vjqeVZ51f53kWA1cwXfYR45s0Q8hjLBaGYcDXNfN6sHSGwV6TY+vgME9BF6tBsP V7ut22Gj5pij+Te3VJaFs7np8JOHeK/gKWduWrgGHMJRuw7Zz2dGzfhOYbB4KVdY mOVGxJf1tLHO70/DwCfyJvPQ9XVD3j4ZYNkMat+lgTFeB2sIztdGmdcMEHqTGZRM oXdfSBkSJ5yd7LbUZPyjccBLouncJ+HYkb2LVA63zlM0ASPqHq/jDFVLSHqTSyCx Ou8I8y84XRwDgbIk+/GhjIOwRgOYGJY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:40:54 2025 by rpki-client