$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa File: 0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa (raw, json) Hash identifier: pnpLusOxKeCMujKvi68CWPdMsygsqptUpme6qBuTxdU= Subject key identifier: E1:0F:95:56:21:87:13:0D:FA:CC:8B:F7:FD:05:AA:12:C4:35:20:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964846D5F24930634613CAA60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.53.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6d:5f:24:93:06:34:61:3c:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=49e8158b-6c8d-4f97-8b67-b90c6f213f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:18:ff:4f:07:6b:27:1e:e5:57:02:39:96: e9:b9:52:ec:7e:6c:ef:8c:08:90:40:4f:58:79:a6: 52:4d:d9:d3:66:38:f4:c9:ba:bf:1f:ce:8c:4b:8f: b5:48:20:84:1f:a4:96:95:5d:47:c7:ec:80:2d:c4: 87:74:07:4f:a5:f1:61:3d:48:41:0a:7f:29:02:cd: 74:ea:b2:64:7b:04:cf:ce:1f:e4:62:b3:68:be:73: 06:71:b7:5e:90:9b:0d:ba:6f:0f:ba:c0:60:3e:ef: f1:1c:88:aa:15:87:c3:f9:2c:f3:c2:df:46:ec:fa: 07:86:77:9f:cc:23:29:0a:9c:a2:65:26:3f:d1:c2: 2c:f8:ef:73:13:0e:96:23:53:67:1a:05:fc:d6:30: dc:50:8e:15:be:38:27:5e:8e:c7:a8:2d:84:2c:a3: ee:c0:31:d6:d8:80:6f:08:fb:00:74:f0:e1:4d:00: fc:49:fd:fc:35:5d:28:ab:ad:16:bc:7e:c9:e1:24: 93:9f:df:cf:20:81:7e:cd:fd:a2:c5:e6:39:f9:ee: e6:c1:17:31:c3:98:d6:5f:c9:5f:90:9c:6c:e2:11: 9e:9c:ba:55:ae:ac:99:37:93:8f:a5:20:40:57:1c: 79:ba:88:27:a7:48:62:4d:76:61:2a:9c:a9:93:e1: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0F:95:56:21:87:13:0D:FA:CC:8B:F7:FD:05:AA:12:C4:35:20:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e2074e0-625c-369f-9d1b-e49991b9cf1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:36:7b:7f:b5:8c:f0:cb:7d:d7:3d:59:82:ad:7c:29:54:5b: 3d:f2:cb:34:0e:25:18:6e:06:9f:d3:d7:c5:99:8b:16:ea:b4: da:e9:1a:c5:11:4b:5f:36:8d:69:1d:4b:e7:19:5b:1f:5c:3b: 25:12:5f:18:d2:6c:51:be:5a:5f:5e:b6:c0:14:61:c5:eb:39: 0f:8b:07:00:c5:62:0a:c2:af:33:18:b2:32:a8:a1:d3:b9:2a: ff:8b:48:05:dc:ae:ba:c6:36:71:58:9f:9b:4c:a2:ef:20:cb: 1f:7a:99:d8:6e:94:38:aa:30:cf:78:29:92:2c:40:de:13:f4: 79:f9:78:3b:3f:37:ca:3d:23:55:9a:36:9a:20:10:3d:9b:c4: 67:9d:bc:6b:d2:b8:d1:5a:e7:b9:2f:a8:b5:ee:fe:eb:d0:81: 8a:73:00:9d:ca:d3:50:42:12:19:e1:a2:45:9e:6f:e9:c6:4b: d5:5e:70:21:fa:c6:19:a4:73:3d:39:33:cb:e9:fa:6b:14:24: 71:05:f2:cf:eb:d3:fa:a4:96:17:ed:86:16:e0:7c:9b:83:30: a0:f5:23:d7:a1:66:c1:80:07:70:d1:33:f2:09:3d:d3:26:6c: 58:03:c2:7e:ab:da:e3:13:3f:a4:3f:97:33:c9:48:d9:cb:3a: b5:8c:0b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhG1fJJMGNGE8qmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NDllODE1OGItNmM4ZC00Zjk3LThiNjctYjkwYzZmMjEzZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/AY/08Hayce5VcCOZbpuVLsfmzvjAiQQE9Y eaZSTdnTZjj0ybq/H86MS4+1SCCEH6SWlV1Hx+yALcSHdAdPpfFhPUhBCn8pAs10 6rJkewTPzh/kYrNovnMGcbdekJsNum8PusBgPu/xHIiqFYfD+Szzwt9G7PoHhnef zCMpCpyiZSY/0cIs+O9zEw6WI1NnGgX81jDcUI4VvjgnXo7HqC2ELKPuwDHW2IBv CPsAdPDhTQD8Sf38NV0oq60WvH7J4SSTn9/PIIF+zf2ixeY5+e7mwRcxw5jWX8lf kJxs4hGenLpVrqyZN5OPpSBAVxx5uognp0hiTXZhKpypk+Fc5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEPlVYhhxMN+syL9/0FqhLENSC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGUyMDc0ZTAtNjI1Yy0z NjlmLTlkMWItZTQ5OTkxYjljZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw2e3+1jPDLfdc9WYKtfClUWz3yyzQOJRhuBp/T18WZixbqtNrpGsUR S182jWkdS+cZWx9cOyUSXxjSbFG+Wl9etsAUYcXrOQ+LBwDFYgrCrzMYsjKoodO5 Kv+LSAXcrrrGNnFYn5tMou8gyx96mdhulDiqMM94KZIsQN4T9Hn5eDs/N8o9I1Wa NpogED2bxGedvGvSuNFa57kvqLXu/uvQgYpzAJ3K01BCEhnhokWeb+nGS9VecCH6 xhmkcz05M8vp+msUJHEF8s/r0/qklhfthhbgfJuDMKD1I9ehZsGAB3DRM/IJPdMm bFgDwn6r2uMTP6Q/lzPJSNnLOrWMC8s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:26 2025 by rpki-client