$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ce53693-345e-31e2-abbe-0c32957d6154.roa File: 7ce53693-345e-31e2-abbe-0c32957d6154.roa (raw, json) Hash identifier: jv263I2I7eYf+jjFLfeAGcykdADPXRfrDXQ+NdigOLQ= Subject key identifier: 65:E8:A8:1A:32:8F:1B:14:6C:B2:D3:CF:E5:75:EE:E6:70:3B:3F:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858494CC957AD8B66E5995690C168 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ce53693-345e-31e2-abbe-0c32957d6154.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16625 IP address blocks: 23.32.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:57:ad:8b:66:e5:99:56:90:c1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=004c77b3-eb9a-4410-ae1a-7879ccc90fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:c3:19:bc:f9:46:3b:ab:fc:ab:4e:29:3f: 18:12:07:50:ea:1d:6e:04:c3:a2:c3:e6:6e:28:62: 04:25:d4:7a:2e:ea:fb:1c:26:00:77:2f:e1:13:b2: 5e:f6:9d:41:03:81:00:5f:8d:66:26:07:01:cc:c0: a1:1e:5d:a0:c9:ce:90:0a:95:99:51:66:41:c4:7f: 29:98:57:44:88:55:95:e8:8b:44:a8:a7:3b:5b:a3: f5:0d:dc:40:a5:d5:12:68:fe:b5:c8:90:c3:d9:34: 2e:19:de:82:1a:0b:13:ee:7f:83:72:bc:ca:8f:3b: 14:b7:43:b2:68:70:6b:12:10:e8:fa:ef:98:83:66: df:35:cb:be:60:fc:55:63:fd:62:8f:30:ac:34:13: 46:73:74:8d:5c:fa:45:72:8c:09:e1:64:75:08:41: 20:7d:3b:05:6e:91:e1:eb:3f:ae:96:55:49:3a:74: 62:51:cc:bf:e7:5b:90:91:42:58:aa:1c:a1:b2:41: b3:3e:e8:de:2c:4f:fa:06:c0:ec:70:b5:28:1a:e3: f6:fb:ec:31:64:a8:9a:16:39:59:96:5b:62:85:6a: 9f:b6:4d:ac:58:22:40:14:bb:1c:49:0c:c5:d1:0c: c5:1c:fb:70:d7:22:6f:1b:19:3c:aa:23:89:2f:12: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E8:A8:1A:32:8F:1B:14:6C:B2:D3:CF:E5:75:EE:E6:70:3B:3F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ce53693-345e-31e2-abbe-0c32957d6154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:47:b4:77:97:80:1e:65:f6:21:c4:83:b5:68:d8:03:13:e9: 42:65:9b:8f:3c:04:a8:02:7d:89:40:cc:21:aa:a5:1c:80:2a: 2f:bf:b3:bd:94:31:bb:d3:a8:47:3f:fe:c7:8c:34:3c:67:ba: 5a:d0:e3:0a:51:4f:e5:42:cf:9f:f1:75:5b:5c:30:5c:96:23: 17:68:a5:d6:1d:34:97:b6:95:6b:50:08:1d:43:57:19:9f:0b: 58:65:f3:73:59:b0:4e:85:9c:33:f0:e0:a2:f6:0b:98:aa:4a: 18:fc:47:c8:60:83:32:a8:7c:8d:8b:e1:41:cd:7a:cc:2d:2d: 86:6d:f3:4b:61:97:25:47:16:df:c4:7c:d6:9f:e2:f3:6f:fc: bd:bd:87:c8:3e:b3:73:c2:15:0c:2c:02:2f:e6:df:c0:4d:82: 81:1d:4f:ba:1b:2b:ef:49:c8:07:ff:2c:f9:c7:25:5f:40:e0: 84:40:73:7e:eb:bd:ba:8e:44:e8:ac:66:ef:40:52:2b:38:23: 53:e8:48:65:f1:1c:e6:bd:a6:14:bc:c0:8d:2c:ca:92:3c:aa: 11:21:d4:f8:60:25:a8:e2:be:29:63:65:b7:a9:a5:f6:c3:74: 3a:11:af:36:d2:20:9e:a4:cb:9f:5d:5f:65:d3:84:6a:61:28: c8:13:e5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVeti2blmVaQwWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDA0Yzc3YjMtZWI5YS00NDEwLWFlMWEtNzg3OWNjYzkwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFjDGbz5Rjur/KtOKT8YEgdQ6h1uBMOiw+Zu KGIEJdR6Lur7HCYAdy/hE7Je9p1BA4EAX41mJgcBzMChHl2gyc6QCpWZUWZBxH8p mFdEiFWV6ItEqKc7W6P1DdxApdUSaP61yJDD2TQuGd6CGgsT7n+DcrzKjzsUt0Oy aHBrEhDo+u+Yg2bfNcu+YPxVY/1ijzCsNBNGc3SNXPpFcowJ4WR1CEEgfTsFbpHh 6z+ullVJOnRiUcy/51uQkUJYqhyhskGzPujeLE/6BsDscLUoGuP2++wxZKiaFjlZ lltihWqftk2sWCJAFLscSQzF0QzFHPtw1yJvGxk8qiOJLxItawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXoqBoyjxsUbLLTz+V17uZwOz8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2NlNTM2OTMtMzQ1ZS0z MWUyLWFiYmUtMGMzMjk1N2Q2MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINHtHeXgB5l9iHEg7Vo2AMT6UJlm488BKgCfYlAzCGqpRyAKi+/s72U MbvTqEc//seMNDxnulrQ4wpRT+VCz5/xdVtcMFyWIxdopdYdNJe2lWtQCB1DVxmf C1hl83NZsE6FnDPw4KL2C5iqShj8R8hggzKofI2L4UHNeswtLYZt80thlyVHFt/E fNaf4vNv/L29h8g+s3PCFQwsAi/m38BNgoEdT7obK+9JyAf/LPnHJV9A4IRAc37r vbqOROisZu9AUis4I1PoSGXxHOa9phS8wI0sypI8qhEh1PhgJajiviljZbeppfbD dDoRrzbSIJ6ky59dX2XThGphKMgT5ZU= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:50 2025 by rpki-client