$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eccb94c7-930d-3904-b656-2f3421a21427.roa File: eccb94c7-930d-3904-b656-2f3421a21427.roa (raw, json) Hash identifier: lZQLZtOQm1FhTGcSsMy7CfCX2XncsYkBtk3BNh3QeZ8= Subject key identifier: D4:43:D7:A8:4F:0D:D5:11:C6:DA:BB:95:B1:BA:E7:FE:3C:31:86:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF403A7C46ACE961255700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eccb94c7-930d-3904-b656-2f3421a21427.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.215.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:40:3a:7c:46:ac:e9:61:25:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=fffe90a3-cab5-4f1d-857d-23834697dcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:bd:4f:25:61:04:f2:2a:e6:d0:46:fd:62: 4f:69:c5:df:2b:21:4d:37:a4:96:03:c4:bc:4a:f1: a6:a2:91:5e:f5:31:bb:d8:11:b1:df:d5:dc:6a:77: 42:03:b0:c7:95:c9:60:07:a1:cd:9e:15:29:6c:99: 4b:d7:7b:f1:aa:04:05:7d:a1:54:fd:2c:f1:48:d3: b0:c3:63:e6:0b:5a:26:25:63:3b:a2:7f:58:3c:6a: aa:3e:db:84:a3:33:75:e1:fa:d1:4c:9b:21:f1:b0: ac:e4:fc:92:e8:c7:af:2c:35:79:f3:10:d4:82:37: 1b:73:3f:eb:52:5d:19:62:a3:23:e3:da:95:b6:f4: 1f:e3:b6:ad:bc:5f:dc:80:7f:c1:14:6f:3c:e4:53: 25:fb:ba:de:b4:d1:da:db:cc:30:0c:77:ac:53:8b: 77:e1:5a:48:42:cc:86:c9:35:78:34:57:c8:7f:7c: c4:e8:9c:65:61:bd:b8:08:d8:14:b6:79:e2:4e:46: 26:b3:a7:1e:81:4e:0d:07:9c:26:0c:ed:15:ee:38: e2:81:0f:6d:3e:a4:60:89:25:79:64:1c:c6:4a:49: 8a:c4:e5:13:27:fa:d2:6e:e4:ef:f6:93:01:a5:f5: db:b9:01:02:aa:d9:49:6a:e1:77:3a:93:f0:48:53: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:43:D7:A8:4F:0D:D5:11:C6:DA:BB:95:B1:BA:E7:FE:3C:31:86:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eccb94c7-930d-3904-b656-2f3421a21427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6e:e9:03:be:b5:24:5e:98:cc:28:77:40:98:90:a2:87:8e: b5:2d:fd:9c:32:83:d2:1e:cd:e1:ad:b1:46:e7:60:d1:27:59: f2:c7:91:0f:1a:ab:d5:4c:23:34:3b:b6:a4:42:a5:0c:61:bb: 7f:38:b9:47:c8:85:a5:8c:1a:18:98:14:c2:30:4c:87:ff:35: fd:37:f9:70:2f:9a:0b:c7:74:54:5a:26:32:da:7a:3f:f2:37: ec:df:ed:0c:e1:ed:ad:83:55:16:a3:13:5b:f0:d3:2f:27:45: c3:3f:2c:55:1b:97:57:fb:6c:fa:c4:c3:a1:38:7d:18:52:c4: c3:bb:9c:50:20:d6:11:29:5b:83:4b:7b:de:5c:9d:37:64:03: 40:0b:41:94:56:ca:63:5d:57:6f:5f:47:3e:f8:19:3d:dc:94: 93:c9:19:08:b9:9f:75:af:50:93:fd:c8:14:ce:12:c5:18:57: 69:16:26:2c:09:a4:0a:33:48:b4:ed:52:b1:3b:bf:b1:e8:e8: 7c:a4:ab:60:94:ec:3c:f0:ab:ff:04:11:e2:26:4e:61:15:70: 13:6e:60:24:b9:89:63:a4:38:17:ee:21:12:b7:65:a8:0b:69: 03:ee:5d:59:da:7e:d6:8f:02:c9:03:d4:1a:b6:22:33:b0:02: 55:f5:91:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0A6fEas6WElVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZmZmZTkwYTMtY2FiNS00ZjFkLTg1N2QtMjM4MzQ2OTdkY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoi9TyVhBPIq5tBG/WJPacXfKyFNN6SWA8S8 SvGmopFe9TG72BGx39XcandCA7DHlclgB6HNnhUpbJlL13vxqgQFfaFU/SzxSNOw w2PmC1omJWM7on9YPGqqPtuEozN14frRTJsh8bCs5PyS6MevLDV58xDUgjcbcz/r Ul0ZYqMj49qVtvQf47atvF/cgH/BFG885FMl+7retNHa28wwDHesU4t34VpIQsyG yTV4NFfIf3zE6JxlYb24CNgUtnniTkYms6cegU4NB5wmDO0V7jjigQ9tPqRgiSV5 ZBzGSkmKxOUTJ/rSbuTv9pMBpfXbuQECqtlJauF3OpPwSFNCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRD16hPDdURxtq7lbG65/48MYYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWNjYjk0YzctOTMwZC0z OTA0LWI2NTYtMmYzNDIxYTIxNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJu6QO+tSRemMwod0CYkKKHjrUt/Zwyg9IezeGtsUbnYNEnWfLHkQ8a q9VMIzQ7tqRCpQxhu384uUfIhaWMGhiYFMIwTIf/Nf03+XAvmgvHdFRaJjLaej/y N+zf7Qzh7a2DVRajE1vw0y8nRcM/LFUbl1f7bPrEw6E4fRhSxMO7nFAg1hEpW4NL e95cnTdkA0ALQZRWymNdV29fRz74GT3clJPJGQi5n3WvUJP9yBTOEsUYV2kWJiwJ pAozSLTtUrE7v7Ho6Hykq2CU7Dzwq/8EEeImTmEVcBNuYCS5iWOkOBfuIRK3ZagL aQPuXVnaftaPAskD1Bq2IjOwAlX1kTg= -----END CERTIFICATE-----Generated at Sat Apr 26 21:59:14 2025 by rpki-client