$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa File: 53e5c72a-194b-3ae3-b890-b640b286e4d9.roa (raw, json) Hash identifier: 7nY+dsIPL/kYp88St7lPBs5Hy2zzVYC832Ft1t2YH7s= Subject key identifier: 86:1D:57:9A:8C:39:28:2B:6D:CF:74:94:19:F2:BB:58:70:6D:F7:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849DF5A6A384DB5FA1A2075A710 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 35994 IP address blocks: 23.32.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6a:38:4d:b5:fa:1a:20:75:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=c2739259-12f4-46fb-ad55-1eb5d49c9cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:17:09:53:45:02:a6:5c:93:d3:5b:5b:b8: 6c:05:e4:26:88:1f:83:70:3f:5e:40:66:52:6a:6d: 0f:70:df:9a:76:90:25:1d:3d:9b:50:7b:12:df:98: 9d:5e:8a:96:f9:41:b9:d6:20:c5:9f:32:2f:4b:e0: 9b:30:05:b3:1e:30:b5:ff:66:70:fc:5d:30:26:4f: 5d:61:88:3c:f6:5f:2b:7b:cd:74:50:21:b9:db:3d: 8b:e1:18:b6:61:31:5e:60:ae:dd:01:d0:99:dc:66: 7c:58:5f:86:8e:ce:65:76:e2:bd:a8:e3:6a:db:d8: a1:49:f0:25:b5:73:8f:d9:c0:89:c1:4e:71:d4:81: 6e:a6:2d:2e:41:9f:81:5f:34:3b:74:6a:9e:4b:f6: 30:09:af:05:80:0c:4e:7a:d4:b1:39:fb:07:ea:7f: 2f:b0:c9:8e:e5:ae:1d:95:5e:49:97:40:d0:32:e0: 9a:25:10:7e:b5:6d:8c:a1:2c:e6:ff:a9:41:33:e3: 94:62:8e:f1:91:f4:6b:eb:6b:8e:ba:c8:c1:33:8b: d8:8c:41:9b:66:21:8d:6a:56:17:07:2b:ad:2a:f9: 7e:21:83:04:b3:dc:4c:30:ad:29:9a:51:e6:4d:54: b7:ec:7e:36:e9:93:62:23:b5:32:e9:45:d6:bd:f0: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:57:9A:8C:39:28:2B:6D:CF:74:94:19:F2:BB:58:70:6D:F7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9e:a1:33:f9:35:19:0a:80:66:fd:a9:7e:98:e1:fd:65:86: 84:b4:bc:44:54:8f:aa:71:22:1b:1c:14:c6:e8:23:92:cf:5b: f9:90:f5:a3:06:bd:4a:ef:59:25:7d:04:e5:71:c2:ba:3a:03: 05:39:de:57:04:f2:89:58:1e:73:ca:32:e2:b1:68:e7:44:83: d3:02:fe:27:55:99:dc:ad:cb:cd:81:4b:8c:7a:7c:a5:29:73: 7b:8a:03:b8:2e:3d:93:b4:66:2d:37:24:48:c6:8f:27:a5:9f: 88:09:8a:9b:d0:84:bf:15:b9:17:5b:e1:4d:a4:e7:42:55:d9: d4:1b:c6:01:23:71:45:65:95:dc:33:f8:e4:16:15:6b:cf:8f: 9a:a0:42:cb:ce:99:bb:af:47:cf:25:33:cd:cb:f4:b6:51:e8: 6f:99:5d:a0:54:ce:33:05:59:db:f8:a6:00:17:e7:37:87:57: d5:87:8b:1b:cd:41:68:aa:86:df:12:85:79:51:b4:fc:8b:4a: a8:b4:15:38:69:b8:f5:da:f2:1f:55:59:e5:45:bc:82:5a:d9: 54:17:a1:d5:1b:9c:74:2b:4e:68:cd:38:69:65:b5:64:39:e0: 99:96:1e:c9:b8:5e:59:04:d0:a5:60:2b:6c:7d:a2:0d:65:34: 08:eb:ac:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmo4TbX6GiB1pxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YzI3MzkyNTktMTJmNC00NmZiLWFkNTUtMWViNWQ0OWM5Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXYXCVNFAqZck9NbW7hsBeQmiB+DcD9eQGZS am0PcN+adpAlHT2bUHsS35idXoqW+UG51iDFnzIvS+CbMAWzHjC1/2Zw/F0wJk9d YYg89l8re810UCG52z2L4Ri2YTFeYK7dAdCZ3GZ8WF+Gjs5lduK9qONq29ihSfAl tXOP2cCJwU5x1IFupi0uQZ+BXzQ7dGqeS/YwCa8FgAxOetSxOfsH6n8vsMmO5a4d lV5Jl0DQMuCaJRB+tW2MoSzm/6lBM+OUYo7xkfRr62uOusjBM4vYjEGbZiGNalYX ByutKvl+IYMEs9xMMK0pmlHmTVS37H426ZNiI7Uy6UXWvfCyRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYdV5qMOSgrbc90lBnyu1hwbffmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNlNWM3MmEtMTk0Yi0z YWUzLWI4OTAtYjY0MGIyODZlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSeoTP5NRkKgGb9qX6Y4f1lhoS0vERUj6pxIhscFMboI5LPW/mQ9aMG vUrvWSV9BOVxwro6AwU53lcE8olYHnPKMuKxaOdEg9MC/idVmdyty82BS4x6fKUp c3uKA7guPZO0Zi03JEjGjyeln4gJipvQhL8VuRdb4U2k50JV2dQbxgEjcUVlldwz +OQWFWvPj5qgQsvOmbuvR88lM83L9LZR6G+ZXaBUzjMFWdv4pgAX5zeHV9WHixvN QWiqht8ShXlRtPyLSqi0FThpuPXa8h9VWeVFvIJa2VQXodUbnHQrTmjNOGlltWQ5 4JmWHsm4XlkE0KVgK2x9og1lNAjrrLw= -----END CERTIFICATE-----Generated at Mon Jun 16 12:30:11 2025 by rpki-client