$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa File: be57316a-e536-36f6-980b-fd2fa53779d0.roa (raw, json) Hash identifier: 7Ctd2mL4RMxdiXpavWKBFObNphMr4jZVbGITe+n6/28= Subject key identifier: FD:9B:D5:7C:87:1E:D0:33:57:94:63:B4:41:AB:D4:5F:D2:4E:1B:1C Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F432858496FAF1303C7EF75ABB8E72909 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 152156 IP address blocks: 23.249.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:13:03:c7:ef:75:ab:b8:e7:29:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=38de5aff-9f72-483a-a90c-cb5610616aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:e0:11:3d:eb:13:33:ad:a3:1e:d1:c8:40: 38:41:25:ff:1f:78:17:00:e8:6b:ab:8e:84:32:65: 78:7b:3f:78:02:dd:e2:90:b3:f4:1f:4c:24:15:80: ce:f8:55:9e:ad:a3:e3:8d:04:24:e1:52:1b:cb:7d: 5b:d2:ce:fd:1d:59:88:52:67:36:6f:8c:d9:b7:1e: dc:ed:43:49:ee:67:0e:5a:df:36:63:35:f1:04:55: 3f:37:ee:09:6e:6f:51:57:e4:bf:3f:97:74:09:ea: 0a:d5:f6:01:29:16:40:c3:0f:87:58:e5:c0:5c:69: 6e:72:82:b1:be:7b:25:98:8d:eb:a8:79:63:38:13: f4:17:71:ec:23:b3:49:c9:84:4c:2e:f2:7a:88:32: c0:94:09:66:2f:f0:a8:d2:fa:fb:e0:4f:96:e9:0e: 04:68:a5:0e:c9:e1:e6:33:55:a2:17:9e:43:02:6d: 7c:cc:ea:1d:ea:c1:aa:fc:fa:f4:e7:6d:00:b9:fc: 2b:1a:88:8b:5e:79:d2:66:04:15:f1:92:6e:26:4e: cf:0f:ae:e4:0e:03:6a:55:b9:dc:94:96:66:00:1a: 14:2a:96:3d:39:72:f6:c8:c4:46:48:35:9c:25:0c: be:e8:d3:ab:c7:29:f4:a0:ef:74:df:f9:54:7f:1b: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9B:D5:7C:87:1E:D0:33:57:94:63:B4:41:AB:D4:5F:D2:4E:1B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/be57316a-e536-36f6-980b-fd2fa53779d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7d:12:f6:b6:a7:8a:fc:d1:04:20:b2:7e:dd:7b:47:a3:b7: 63:7d:4f:29:65:dc:fd:d7:6a:0b:9e:27:04:54:07:d8:06:1f: 61:34:df:b7:03:3f:e9:b0:6c:cf:72:fe:65:14:43:5f:6d:0e: 7f:26:ac:ff:ab:c2:de:13:82:c6:df:e1:a3:74:3f:95:9b:88: 7b:50:a5:45:f4:48:5f:4b:82:32:a4:b1:dd:49:40:86:51:89: 46:5e:78:40:5e:45:94:ae:16:f8:5a:b1:28:c7:86:1e:88:45: 74:5f:4f:3d:9b:8f:94:f1:9e:d5:a8:25:60:d0:36:29:0d:ca: ad:31:ad:25:0f:d9:15:0d:4f:11:8a:62:9e:14:37:0f:58:86: 0b:be:56:81:6d:71:07:24:92:b2:52:eb:51:6c:f2:a4:f5:aa: 1b:2c:03:22:33:2f:32:8b:f5:d9:29:1d:99:f2:5d:db:1d:3c: 67:a9:69:93:e4:1f:ff:82:a9:1d:2b:13:71:2f:4a:34:66:db: 3c:58:73:a3:9c:f4:1a:1e:7d:4d:27:4c:b1:06:63:3f:d5:7c: c5:8d:db:70:d8:19:18:14:7b:ff:67:f8:c0:8a:ca:99:88:f5: 54:1e:1e:03:ec:54:ec:c1:76:37:7c:53:46:f0:0f:82:44:97: f9:21:f9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxMDx+91q7jnKQkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MzhkZTVhZmYtOWY3Mi00ODNhLWE5MGMtY2I1NjEwNjE2YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpbgET3rEzOtox7RyEA4QSX/H3gXAOhrq46E MmV4ez94At3ikLP0H0wkFYDO+FWeraPjjQQk4VIby31b0s79HVmIUmc2b4zZtx7c 7UNJ7mcOWt82YzXxBFU/N+4Jbm9RV+S/P5d0CeoK1fYBKRZAww+HWOXAXGlucoKx vnslmI3rqHljOBP0F3HsI7NJyYRMLvJ6iDLAlAlmL/Co0vr74E+W6Q4EaKUOyeHm M1WiF55DAm18zOod6sGq/Pr0520AufwrGoiLXnnSZgQV8ZJuJk7PD67kDgNqVbnc lJZmABoUKpY9OXL2yMRGSDWcJQy+6NOrxyn0oO903/lUfxtvxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2b1XyHHtAzV5RjtEGr1F/SThscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYmU1NzMxNmEtZTUzNi0z NmY2LTk4MGItZmQyZmE1Mzc3OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF99Eva2p4r80QQgsn7de0ejt2N9Tyll3P3XagueJwRUB9gGH2E037cD P+mwbM9y/mUUQ19tDn8mrP+rwt4Tgsbf4aN0P5WbiHtQpUX0SF9LgjKksd1JQIZR iUZeeEBeRZSuFvhasSjHhh6IRXRfTz2bj5TxntWoJWDQNikNyq0xrSUP2RUNTxGK Yp4UNw9Yhgu+VoFtcQckkrJS61Fs8qT1qhssAyIzLzKL9dkpHZnyXdsdPGepaZPk H/+CqR0rE3EvSjRm2zxYc6Oc9BoefU0nTLEGYz/VfMWN23DYGRgUe/9n+MCKypmI 9VQeHgPsVOzBdjd8U0bwD4JEl/kh+ZY= -----END CERTIFICATE-----Generated at Mon Apr 28 01:09:35 2025 by rpki-client