$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a440de6d-0111-3cf2-a355-154eeb2ea40a.roa File: a440de6d-0111-3cf2-a355-154eeb2ea40a.roa (raw, json) Hash identifier: yFEUCmNveg0aZAxP4x6LOJmth6mhVj+/KsvhIGiR7kk= Subject key identifier: 32:DD:95:E1:16:1B:3F:33:23:E5:C9:CD:79:C1:F1:6A:7C:46:A4:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964846D22FDD3749E784E8040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a440de6d-0111-3cf2-a355-154eeb2ea40a.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.53.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6d:22:fd:d3:74:9e:78:4e:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=ac335f08-817f-4b08-a806-ac1247e02bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:21:1e:80:e5:1b:7d:52:40:9c:19:aa:79: bb:e7:08:25:17:41:3a:6f:22:ca:03:f3:ba:f0:40: 30:c3:6e:ef:b6:2a:d1:88:4e:de:97:80:87:48:e4: 14:35:fd:45:7f:bb:f2:1a:48:ee:da:92:30:e3:97: 55:cf:cb:7e:86:e7:cb:fd:52:ba:67:4c:a6:76:d2: 7c:8a:01:61:1a:2b:a6:f0:27:95:f8:f6:57:ef:6d: 48:70:36:fe:f8:ab:1a:66:cf:14:b3:57:6b:35:7e: 0c:0e:f1:37:50:63:96:75:19:a2:71:55:c4:59:d2: de:7a:e4:83:18:2e:e7:a1:e4:c5:62:86:be:dc:d1: 13:ad:89:97:87:70:97:e1:f3:0b:24:86:45:27:a8: 91:22:2a:a2:5b:d6:83:9f:b5:90:03:95:fd:24:1e: 81:de:77:2a:8c:37:ee:ec:1c:2b:87:a3:94:6a:f8: 00:1f:71:15:60:9b:b1:c8:b7:0a:98:a3:7a:06:f5: 63:53:a7:29:19:de:37:38:10:82:7f:e9:bd:da:e8: dc:36:3e:93:6b:bb:a8:d7:3c:84:2f:69:70:af:3c: b7:f2:cb:69:e6:5e:e8:8a:64:29:94:38:d7:66:5d: d1:cf:48:c6:55:f0:f8:16:19:cc:65:9c:32:c1:5a: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DD:95:E1:16:1B:3F:33:23:E5:C9:CD:79:C1:F1:6A:7C:46:A4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a440de6d-0111-3cf2-a355-154eeb2ea40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1e:b2:78:c0:52:1c:56:70:cd:30:0b:05:a0:a0:d1:ea:2a: 2f:08:96:f3:58:75:21:0a:52:f4:37:e2:d5:7f:12:bf:99:ce: 2a:14:cc:c3:8b:16:f0:7c:5d:8b:0b:c2:1c:8a:52:87:4c:73: d5:fb:fc:5d:cd:6c:e4:11:dd:b8:87:dd:de:7b:ae:57:a2:87: c5:5b:4c:c0:67:0e:c5:e2:20:2a:74:2c:49:83:eb:65:e2:63: 82:d0:c2:d7:ad:d9:e9:8e:d6:c4:b2:9f:3d:85:6c:a2:e3:ea: 82:74:e6:02:0f:ae:b4:39:de:fc:19:ff:43:41:20:04:ff:41: 44:44:37:41:27:4e:06:03:82:54:21:0d:e8:0f:46:3e:24:de: 71:51:67:27:5c:46:5f:4a:d2:3e:4a:2a:e8:59:29:73:66:7f: b1:38:08:1e:7d:2d:af:6e:b6:86:75:3d:3d:a0:c1:42:7a:74: 2d:3d:96:88:79:14:f3:a5:a1:bb:10:06:64:4a:85:f7:88:1b: 08:66:73:dc:06:91:ad:9d:9f:a5:2f:e0:03:a5:5b:64:36:3a: 55:0a:4c:e5:98:13:41:ce:11:a4:a3:f3:7b:9f:cd:99:06:35: e5:2b:6b:90:08:7f:65:58:8f:7e:29:ac:f3:97:65:8d:68:fe: 24:89:23:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhG0i/dN0nnhOgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk YWMzMzVmMDgtODE3Zi00YjA4LWE4MDYtYWMxMjQ3ZTAyYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYshHoDlG31SQJwZqnm75wglF0E6byLKA/O6 8EAww27vtirRiE7el4CHSOQUNf1Ff7vyGkju2pIw45dVz8t+hufL/VK6Z0ymdtJ8 igFhGium8CeV+PZX721IcDb++KsaZs8Us1drNX4MDvE3UGOWdRmicVXEWdLeeuSD GC7noeTFYoa+3NETrYmXh3CX4fMLJIZFJ6iRIiqiW9aDn7WQA5X9JB6B3ncqjDfu 7Bwrh6OUavgAH3EVYJuxyLcKmKN6BvVjU6cpGd43OBCCf+m92ujcNj6Ta7uo1zyE L2lwrzy38stp5l7oimQplDjXZl3Rz0jGVfD4FhnMZZwywVqfEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLdleEWGz8zI+XJzXnB8Wp8RqRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTQ0MGRlNmQtMDExMS0z Y2YyLWEzNTUtMTU0ZWViMmVhNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0esnjAUhxWcM0wCwWgoNHqKi8IlvNYdSEKUvQ34tV/Er+ZzioUzMOL FvB8XYsLwhyKUodMc9X7/F3NbOQR3biH3d57rleih8VbTMBnDsXiICp0LEmD62Xi Y4LQwtet2emO1sSynz2FbKLj6oJ05gIPrrQ53vwZ/0NBIAT/QUREN0EnTgYDglQh DegPRj4k3nFRZydcRl9K0j5KKuhZKXNmf7E4CB59La9utoZ1PT2gwUJ6dC09loh5 FPOlobsQBmRKhfeIGwhmc9wGka2dn6Uv4AOlW2Q2OlUKTOWYE0HOEaSj83ufzZkG NeUra5AIf2VYj34prPOXZY1o/iSJI7o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:03 2025 by rpki-client