$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f21f4ed4-2dd6-39ae-bc61-852e4eb3489b.roa File: f21f4ed4-2dd6-39ae-bc61-852e4eb3489b.roa (raw, json) Hash identifier: zimW3qnrmBf9G3B00O3xYYtF5amyeS+I1+jhnEyaYQ8= Subject key identifier: 0D:43:F5:45:7A:09:52:CD:D0:15:4D:DC:FA:07:BD:AD:BF:DD:C7:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584913AC4485137ED62A1F0A463C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f21f4ed4-2dd6-39ae-bc61-852e4eb3489b.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.215.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:44:85:13:7e:d6:2a:1f:0a:46:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=cc6a737d-b878-4468-97ec-de2e7fe6c5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:52:ee:18:d6:b5:2c:b6:89:fc:a4:97:c8: 15:ac:b5:42:12:61:2a:65:96:8a:75:a2:03:42:b0: cc:45:3e:8f:7a:97:a0:12:f7:3d:a5:88:0d:a3:5b: e3:e2:90:36:bb:84:74:97:47:25:12:8d:55:52:b6: a4:70:75:e9:7c:41:bd:e3:5a:28:0a:fb:3e:e2:c7: 3b:95:60:4b:f8:11:24:d1:cd:0c:54:d7:b9:34:08: 1b:56:f3:4c:ba:e4:fd:d0:a2:83:ae:96:47:d3:18: 54:82:78:7c:8a:4b:56:ee:34:9c:7c:10:d1:a2:33: 4b:17:41:a5:be:1f:b0:3e:e3:a2:43:c4:69:12:89: e2:52:55:10:ec:9d:04:f9:4f:49:c8:46:7a:ab:c3: 7c:3f:11:4a:40:09:fd:c2:1b:d4:fb:d1:67:84:90: aa:73:ce:41:ef:bb:b6:8a:b9:44:ab:e9:4e:10:bf: 16:52:d3:7e:46:19:f7:cf:37:81:44:e6:35:16:1f: 8f:6d:a7:00:5a:19:b5:61:14:77:03:a5:bf:ae:b2: e6:e8:be:3b:f8:52:39:f1:ad:e2:eb:b3:4e:a3:b7: 67:1a:eb:a3:49:0b:98:2f:2a:57:18:ae:a5:e5:df: 9f:4f:56:f7:07:38:4b:59:1c:80:d4:f0:cf:8a:f3: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:43:F5:45:7A:09:52:CD:D0:15:4D:DC:FA:07:BD:AD:BF:DD:C7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f21f4ed4-2dd6-39ae-bc61-852e4eb3489b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:39:4b:0c:46:52:64:7d:83:e1:27:49:ed:6e:f8:93:a1:e7: 7d:f3:74:8b:33:1d:47:d0:dd:fd:66:53:c1:dc:b0:70:9a:31: 38:b9:4e:ba:24:6b:2f:9d:29:25:d1:58:ef:86:81:3d:25:36: 90:d8:1a:ee:f1:35:a5:ad:88:ab:f7:8d:8d:58:a3:86:ba:8b: 5d:07:af:94:3b:5e:ac:d0:e3:2e:d3:79:46:b8:c6:38:2b:9e: 48:1f:9b:7f:91:9c:a9:77:09:54:3e:74:c9:4c:f4:23:2b:48: 74:2a:c8:cb:d8:ed:dd:1e:7b:e3:bf:fd:e3:ab:c3:95:4e:61: b0:19:b8:c0:69:55:49:98:f2:94:ff:f0:82:5e:3f:bf:8a:10: d2:2b:ac:30:2a:51:af:0a:1d:5c:40:fc:45:e8:2e:9a:9b:c7: 98:5c:5a:2d:ec:67:7a:36:ed:f7:ce:1d:d4:03:ac:a7:22:85: ff:ed:0d:c5:d1:3d:64:af:94:20:42:d2:77:61:80:2f:cb:5a: d9:f8:0a:01:60:97:c0:c9:aa:cc:f6:0f:67:d3:82:cf:4c:fa: 93:89:f3:d6:4b:78:70:e3:8e:e5:cd:e0:4b:b3:e5:95:5c:97: 38:c6:65:67:b4:93:2c:1d:6c:5c:4f:a1:7b:09:00:a9:58:2c: 20:5a:e6:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrESFE37WKh8KRjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk Y2M2YTczN2QtYjg3OC00NDY4LTk3ZWMtZGUyZTdmZTZjNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWBS7hjWtSy2ifykl8gVrLVCEmEqZZaKdaID QrDMRT6PepegEvc9pYgNo1vj4pA2u4R0l0clEo1VUrakcHXpfEG941ooCvs+4sc7 lWBL+BEk0c0MVNe5NAgbVvNMuuT90KKDrpZH0xhUgnh8iktW7jScfBDRojNLF0Gl vh+wPuOiQ8RpEoniUlUQ7J0E+U9JyEZ6q8N8PxFKQAn9whvU+9FnhJCqc85B77u2 irlEq+lOEL8WUtN+Rhn3zzeBROY1Fh+PbacAWhm1YRR3A6W/rrLm6L47+FI58a3i 67NOo7dnGuujSQuYLypXGK6l5d+fT1b3BzhLWRyA1PDPivMSzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1D9UV6CVLN0BVN3PoHva2/3ceaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIxZjRlZDQtMmRkNi0z OWFlLWJjNjEtODUyZTRlYjM0ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg5SwxGUmR9g+EnSe1u+JOh533zdIszHUfQ3f1mU8HcsHCaMTi5Trok ay+dKSXRWO+GgT0lNpDYGu7xNaWtiKv3jY1Yo4a6i10Hr5Q7XqzQ4y7TeUa4xjgr nkgfm3+RnKl3CVQ+dMlM9CMrSHQqyMvY7d0ee+O//eOrw5VOYbAZuMBpVUmY8pT/ 8IJeP7+KENIrrDAqUa8KHVxA/EXoLpqbx5hcWi3sZ3o27ffOHdQDrKcihf/tDcXR PWSvlCBC0ndhgC/LWtn4CgFgl8DJqsz2D2fTgs9M+pOJ89ZLeHDjjuXN4Euz5ZVc lzjGZWe0kywdbFxPoXsJAKlYLCBa5ug= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:13 2025 by rpki-client