$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23963b0e-3613-3e78-8347-712a0f14cd74.roa File: 23963b0e-3613-3e78-8347-712a0f14cd74.roa (raw, json) Hash identifier: GSPb77xurc5ItxHpf3ICVuTZ335wx8hXTJR1jf/nPAg= Subject key identifier: 15:52:F6:48:E7:B1:D9:21:8C:4A:31:07:0F:90:6D:56:81:2A:11:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF45BBEC7CE7BFB165FB58 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23963b0e-3613-3e78-8347-712a0f14cd74.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.215.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:45:bb:ec:7c:e7:bf:b1:65:fb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=5945d47e-b7d0-47ab-8885-d21a3ec34c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:f6:f0:8c:dc:dd:c3:78:a4:00:26:2a:8d: 27:3b:02:19:84:59:af:f6:9a:df:ca:f0:dc:d1:c8: 72:6b:23:75:ac:38:6a:78:f0:83:4f:36:2e:05:b6: 55:f3:df:6f:e1:ea:c6:7d:aa:f1:ee:37:91:b8:cf: 7d:f4:cd:1e:5e:a9:23:18:3e:1a:3b:39:66:f4:ca: fe:a5:7a:62:4b:3a:90:49:52:d6:09:ee:08:b2:3e: c2:fd:e1:23:2f:9a:80:3f:bd:2e:6c:2a:63:e2:83: 44:b9:54:36:75:59:71:f8:ea:93:f3:38:31:2c:5a: e6:21:08:67:eb:c7:6f:88:4f:15:87:a0:8a:be:90: fc:46:82:10:28:19:90:a5:02:b0:5c:75:a6:ef:35: 5f:98:b1:a5:dc:39:5e:a2:3d:d4:13:5c:c5:62:31: 80:5b:17:b8:cd:5d:1a:e1:49:f1:9e:37:78:60:14: c1:5d:c9:af:89:02:28:73:24:4b:b1:f7:94:3f:9d: bf:84:b4:67:61:17:c6:4e:8b:6c:ff:96:0a:a8:77: da:bf:5a:bf:94:b5:52:f5:60:51:3b:dc:ca:f8:2f: c7:8a:bb:2e:28:4b:b4:64:85:17:12:39:68:09:41: 83:f3:3f:60:f8:50:e0:d6:eb:19:b1:fd:9b:98:d8: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:52:F6:48:E7:B1:D9:21:8C:4A:31:07:0F:90:6D:56:81:2A:11:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23963b0e-3613-3e78-8347-712a0f14cd74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:42:5f:a6:a6:f7:ac:6c:f1:26:3b:20:9f:13:fa:1b:f4:60: d1:1d:67:48:93:52:d7:8e:6c:7b:9f:9a:bf:84:bf:51:40:56: 31:97:f4:23:cf:a8:a5:b6:d9:02:33:09:d7:f9:52:ef:49:a8: a6:bd:47:fa:db:87:5e:ec:53:5e:b0:08:c2:99:1a:e9:83:03: 97:78:ff:38:74:ea:e6:53:3c:db:ad:3c:99:70:f6:0b:5b:1a: 9f:0e:dc:c9:01:0c:77:c0:59:14:34:4d:ae:ab:4c:78:71:d5: ce:75:4c:a6:50:c0:ed:0a:4c:89:9d:e0:d5:08:34:19:e8:8a: d8:c4:bd:8c:18:b6:7c:8b:51:b8:25:28:32:53:54:40:44:d7: 3e:05:d8:53:0e:e1:cc:49:54:24:4a:7a:51:fa:9b:fc:34:bc: a5:f7:8f:5a:9d:da:91:d4:a5:11:c5:d7:6f:d5:9e:bd:68:ab: 56:15:80:d5:58:4c:4d:7c:ce:77:7c:4f:6a:68:f0:60:ee:eb: 8e:aa:83:8a:89:d6:b9:b7:21:45:a0:ef:ec:53:4d:ec:52:ec: 9b:f4:51:36:eb:99:98:08:bb:a4:e2:b1:16:3a:37:69:4a:d1: e5:af:b0:0b:12:31:b4:59:42:cf:ca:af:70:7d:82:0a:80:e6: fe:29:13:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0W77Hznv7Fl+1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTk0NWQ0N2UtYjdkMC00N2FiLTg4ODUtZDIxYTNlYzM0YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n28Izc3cN4pAAmKo0nOwIZhFmv9prfyvDc 0chyayN1rDhqePCDTzYuBbZV899v4erGfarx7jeRuM999M0eXqkjGD4aOzlm9Mr+ pXpiSzqQSVLWCe4Isj7C/eEjL5qAP70ubCpj4oNEuVQ2dVlx+OqT8zgxLFrmIQhn 68dviE8Vh6CKvpD8RoIQKBmQpQKwXHWm7zVfmLGl3Dleoj3UE1zFYjGAWxe4zV0a 4Unxnjd4YBTBXcmviQIocyRLsfeUP52/hLRnYRfGTots/5YKqHfav1q/lLVS9WBR O9zK+C/HirsuKEu0ZIUXEjloCUGD8z9g+FDg1usZsf2bmNit3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVS9kjnsdkhjEoxBw+QbVaBKhFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM5NjNiMGUtMzYxMy0z ZTc4LTgzNDctNzEyYTBmMTRjZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9czMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1CX6am96xs8SY7IJ8T+hv0YNEdZ0iTUteObHufmr+Ev1FAVjGX9CPP qKW22QIzCdf5Uu9JqKa9R/rbh17sU16wCMKZGumDA5d4/zh06uZTPNutPJlw9gtb Gp8O3MkBDHfAWRQ0Ta6rTHhx1c51TKZQwO0KTImd4NUINBnoitjEvYwYtnyLUbgl KDJTVEBE1z4F2FMO4cxJVCRKelH6m/w0vKX3j1qd2pHUpRHF12/Vnr1oq1YVgNVY TE18znd8T2po8GDu646qg4qJ1rm3IUWg7+xTTexS7Jv0UTbrmZgIu6TisRY6N2lK 0eWvsAsSMbRZQs/Kr3B9ggqA5v4pE1o= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:11 2025 by rpki-client