$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daa46e25-f37a-3fa4-84d4-b25726b6035e.roa File: daa46e25-f37a-3fa4-84d4-b25726b6035e.roa (raw, json) Hash identifier: Glyi86m9MY3Xe2k1Bg8KgNtt8xZc6MrmVCBTdnrHodE= Subject key identifier: FA:B3:A9:BB:54:EF:3F:93:DD:83:BD:78:09:8A:A5:E9:7A:3E:C4:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF402ABED860DBD1C874E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daa46e25-f37a-3fa4-84d4-b25726b6035e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.215.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:40:2a:be:d8:60:db:d1:c8:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=ada615a5-8d25-4429-a1ca-ef8da4cb5754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:c9:2b:61:f9:4d:80:25:89:ad:6e:7b:6a: d8:b8:61:af:d7:7b:c9:18:de:1f:20:65:16:1c:2a: 4b:8a:2c:1b:8e:78:90:cd:41:17:2e:50:f5:b4:51: 6c:fa:dc:23:88:8c:6f:0d:5b:f2:b4:b5:a6:0c:f1: cb:99:00:8e:69:70:76:aa:fc:57:35:c4:e6:d3:b4: 09:d9:c9:e6:47:2d:6d:05:d0:4a:70:d6:00:46:e2: 68:bd:0d:fa:f1:7f:43:2c:0c:5a:76:13:e2:18:27: c8:ef:df:ea:30:a3:21:df:7e:19:eb:cf:0c:1a:f4: 28:f7:45:6d:ec:0f:63:92:98:7e:46:b4:f8:0d:6a: ab:a0:bc:8f:3e:ca:82:4a:f5:84:39:28:4d:fc:97: e5:5b:8d:54:cf:89:43:c6:c6:b3:88:7d:0b:00:b0: cf:fd:29:c0:cb:88:6d:f4:1e:9b:91:2a:0c:e5:62: c5:59:23:20:49:0a:78:01:9c:e9:15:c3:ab:d5:49: 42:78:1c:f3:a6:fc:f5:aa:df:a6:d2:fd:f0:1f:21: 0e:19:ed:d2:c6:1a:1d:ba:a3:39:1c:5d:19:b2:e2: e2:f5:8a:92:49:f9:1f:79:83:7a:5f:44:90:51:3e: 09:19:78:7e:ce:4d:1e:9a:c3:2e:3a:c9:6b:87:13: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B3:A9:BB:54:EF:3F:93:DD:83:BD:78:09:8A:A5:E9:7A:3E:C4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daa46e25-f37a-3fa4-84d4-b25726b6035e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:84:fa:05:df:11:3e:cf:d2:67:9d:15:05:4a:d3:5e:ce:84: 91:fa:a3:35:44:e5:ea:fb:b6:61:e7:70:45:3b:7b:ab:4e:df: a7:95:55:ab:29:f2:87:49:1e:79:a2:87:2e:f0:47:d8:0b:8b: 3f:c6:92:d4:33:11:30:ee:4a:35:80:4e:2a:4a:50:57:10:da: c2:31:1f:77:97:00:24:44:71:13:b2:17:b6:ff:fc:1a:6c:4d: 85:95:e6:87:c7:6a:c6:cd:5d:42:e3:9d:86:71:8c:2b:ba:66: 8d:9c:a4:f1:05:14:ac:a6:5b:ed:9b:38:18:3f:b6:f7:a4:b4: 1b:eb:6e:ad:a9:80:bc:16:66:3e:76:d6:11:1e:cd:17:5d:b9: 77:e5:f5:85:c1:a1:ca:f4:86:24:0e:c9:a1:78:5f:23:cd:91: 7f:3a:b7:07:d0:fd:73:63:c1:e4:d8:e8:ab:a3:f1:54:82:20: 24:69:2b:63:70:05:7a:93:6a:a2:f2:2b:e4:00:09:2e:fd:67: 33:1b:2b:8d:93:4a:d5:56:84:ba:b8:2e:c5:3c:8e:45:ab:41: 7b:a8:6f:cd:f1:bd:cf:40:56:4f:f4:72:2e:3e:40:db:8d:21: e9:ec:29:37:a1:b8:c5:88:7f:d2:ea:75:30:da:e6:6d:e6:82: b6:48:12:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0Aqvthg29HIdOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YWRhNjE1YTUtOGQyNS00NDI5LWExY2EtZWY4ZGE0Y2I1NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUvJK2H5TYAlia1ue2rYuGGv13vJGN4fIGUW HCpLiiwbjniQzUEXLlD1tFFs+twjiIxvDVvytLWmDPHLmQCOaXB2qvxXNcTm07QJ 2cnmRy1tBdBKcNYARuJovQ368X9DLAxadhPiGCfI79/qMKMh334Z688MGvQo90Vt 7A9jkph+RrT4DWqroLyPPsqCSvWEOShN/JflW41Uz4lDxsaziH0LALDP/SnAy4ht 9B6bkSoM5WLFWSMgSQp4AZzpFcOr1UlCeBzzpvz1qt+m0v3wHyEOGe3SxhoduqM5 HF0ZsuLi9YqSSfkfeYN6X0SQUT4JGXh+zk0emsMuOslrhxOQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqzqbtU7z+T3YO9eAmKpel6PsSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFhNDZlMjUtZjM3YS0z ZmE0LTg0ZDQtYjI1NzI2YjYwMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9e8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiE+gXfET7P0medFQVK017OhJH6ozVE5er7tmHncEU7e6tO36eVVasp 8odJHnmihy7wR9gLiz/GktQzETDuSjWATipKUFcQ2sIxH3eXACREcROyF7b//Bps TYWV5ofHasbNXULjnYZxjCu6Zo2cpPEFFKymW+2bOBg/tvektBvrbq2pgLwWZj52 1hEezRdduXfl9YXBocr0hiQOyaF4XyPNkX86twfQ/XNjweTY6Kuj8VSCICRpK2Nw BXqTaqLyK+QACS79ZzMbK42TStVWhLq4LsU8jkWrQXuob83xvc9AVk/0ci4+QNuN IensKTehuMWIf9LqdTDa5m3mgrZIEic= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:00 2025 by rpki-client