$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a39c690-fd9b-3de5-8250-5272e37862ad.roa File: 4a39c690-fd9b-3de5-8250-5272e37862ad.roa (raw, json) Hash identifier: v2cuw7SF0AUtTznpIricLXhEu2jaC2oPWocIq0W1GOw= Subject key identifier: 97:26:3F:EC:CB:16:EC:F5:B1:12:6E:46:3C:29:26:A1:F9:B1:E2:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496484516EB18FC8A164BDB800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a39c690-fd9b-3de5-8250-5272e37862ad.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.52.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:51:6e:b1:8f:c8:a1:64:bd:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=b86d47b0-e47f-4360-b9b0-127196f1161c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:33:d1:97:bd:ae:41:2f:b8:92:36:d4:9b: 36:7d:41:76:c7:98:00:2a:90:6a:90:8d:9b:36:48: f2:02:ab:76:6b:b9:e7:f8:c1:58:18:90:ac:3b:14: 2c:0f:15:ad:17:9b:f1:48:0d:19:54:de:23:d0:0c: a6:7a:7d:07:a6:78:1d:ea:94:5c:5c:56:cb:b9:bf: 87:92:f8:3e:88:fd:ec:f0:2a:49:60:b4:b9:a8:55: 90:ca:07:a3:9e:37:3f:d5:b6:a8:18:06:3c:d4:c8: 00:7d:ce:c9:02:99:37:ff:e3:f8:ab:49:98:10:ea: 7c:d1:57:3a:e4:e1:c1:00:5e:ed:83:52:0b:ec:73: ad:7a:9c:61:24:fd:4a:36:11:28:c9:9e:a6:42:31: fb:04:4d:25:3c:94:40:be:38:3b:1e:a9:a3:51:fb: 42:6c:1f:a7:64:bc:28:c5:38:01:11:db:1c:02:15: 3e:42:61:78:bc:a2:59:c6:6e:93:bf:78:60:fa:61: d2:3e:98:28:17:13:25:fa:e2:78:57:cc:20:61:ea: 28:c0:6f:c2:00:ca:4a:e6:0f:32:15:4f:8e:71:56: bb:2c:35:a1:9c:f9:19:ba:50:ce:92:7b:78:97:72: 58:42:e0:f4:25:97:5f:cf:fa:6e:a9:17:e3:a3:f3: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:3F:EC:CB:16:EC:F5:B1:12:6E:46:3C:29:26:A1:F9:B1:E2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a39c690-fd9b-3de5-8250-5272e37862ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:38:05:e4:19:5c:f2:4f:c9:9f:c2:0f:ab:84:95:82:eb:77: 78:20:1c:87:bb:bd:2a:e9:f5:fb:2f:b8:44:62:90:55:79:8e: 82:a5:33:0d:7d:7e:4f:f1:ec:a5:1a:32:42:75:ab:e3:e6:b0: 45:0a:8d:c1:2c:28:69:82:42:db:28:ec:f3:3c:71:26:5c:d4: bc:8e:f9:8e:4f:2d:cc:42:b4:a6:34:86:34:9d:5f:00:ae:51: c0:dd:29:0d:ac:62:f6:10:cb:79:47:99:95:30:cb:75:c6:4d: 5e:8c:e4:a8:6d:00:22:cd:c6:b4:b7:c0:3d:64:66:a8:1f:f8: c1:54:d3:6f:1f:d6:53:45:9e:c9:99:71:7e:76:37:50:0b:88: ea:2d:89:cb:4d:b0:39:39:c0:77:a8:eb:dc:e6:a4:ba:aa:6b: ab:d1:63:65:eb:9a:4f:c9:fd:46:79:9a:7e:14:68:17:db:ed: 76:a5:9b:ae:90:83:49:c6:05:72:ec:a4:c2:31:22:c6:0b:bc: b4:d9:7c:3a:69:ae:b1:3f:d3:6b:70:42:e6:aa:b8:d9:9f:01: 64:1c:ac:d9:2e:bb:04:73:fc:40:07:79:44:f8:8b:b8:e7:f9: b5:0c:de:e3:64:e4:62:58:f2:da:08:17:10:27:31:b5:f4:14: b7:43:b5:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFFusY/IoWS9uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk Yjg2ZDQ3YjAtZTQ3Zi00MzYwLWI5YjAtMTI3MTk2ZjExNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd0z0Ze9rkEvuJI21Js2fUF2x5gAKpBqkI2b NkjyAqt2a7nn+MFYGJCsOxQsDxWtF5vxSA0ZVN4j0Aymen0Hpngd6pRcXFbLub+H kvg+iP3s8CpJYLS5qFWQygejnjc/1baoGAY81MgAfc7JApk3/+P4q0mYEOp80Vc6 5OHBAF7tg1IL7HOtepxhJP1KNhEoyZ6mQjH7BE0lPJRAvjg7HqmjUftCbB+nZLwo xTgBEdscAhU+QmF4vKJZxm6Tv3hg+mHSPpgoFxMl+uJ4V8wgYeoowG/CAMpK5g8y FU+OcVa7LDWhnPkZulDOknt4l3JYQuD0JZdfz/puqRfjo/PO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcmP+zLFuz1sRJuRjwpJqH5seJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEzOWM2OTAtZmQ5Yi0z ZGU1LTgyNTAtNTI3MmUzNzg2MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY4BeQZXPJPyZ/CD6uElYLrd3ggHIe7vSrp9fsvuERikFV5joKlMw19 fk/x7KUaMkJ1q+PmsEUKjcEsKGmCQtso7PM8cSZc1LyO+Y5PLcxCtKY0hjSdXwCu UcDdKQ2sYvYQy3lHmZUwy3XGTV6M5KhtACLNxrS3wD1kZqgf+MFU028f1lNFnsmZ cX52N1ALiOotictNsDk5wHeo69zmpLqqa6vRY2Xrmk/J/UZ5mn4UaBfb7Xalm66Q g0nGBXLspMIxIsYLvLTZfDpprrE/02twQuaquNmfAWQcrNkuuwRz/EAHeUT4i7jn +bUM3uNk5GJY8toIFxAnMbX0FLdDtRg= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:36 2025 by rpki-client