$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1f92ad0-4921-3413-ac75-89036ab2304c.roa File: b1f92ad0-4921-3413-ac75-89036ab2304c.roa (raw, json) Hash identifier: sTzzxfjf4YrObaSOy7T1QUGyuZWq5Xo34Q9zXoR2p7s= Subject key identifier: 29:E3:F8:31:F5:5A:8A:66:04:7F:40:62:CF:4A:BE:3E:CF:2C:DD:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46F225645E45346EE7D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1f92ad0-4921-3413-ac75-89036ab2304c.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.54.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6f:22:56:45:e4:53:46:ee:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=35fa2f42-c451-4436-a2a3-5d6c691c1188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:52:17:09:9b:01:89:91:62:0e:e8:1f:7a: 4b:79:a4:29:eb:fd:09:7d:80:b0:92:fe:37:9e:08: f7:24:f4:18:43:b9:74:ff:15:f2:4b:26:14:95:be: 7f:7a:46:e8:0a:34:0b:75:cc:36:d4:e9:f1:f7:00: 23:8c:bc:5e:39:32:2b:66:26:d6:83:c2:a6:2d:64: 62:20:10:e8:4c:2d:4f:80:61:51:0e:2b:da:f8:79: 08:f7:b9:bb:38:b7:d3:0a:93:05:44:6d:bf:3c:9b: 27:0c:85:84:02:76:55:f5:9b:c9:c2:e5:bc:a1:f9: ec:4f:be:83:93:f6:fe:b3:0e:4b:86:24:aa:62:91: 17:c7:85:82:35:8f:51:96:c5:86:68:75:40:15:21: dc:21:66:c3:4a:6a:51:2a:64:43:9b:69:2c:54:f1: 7e:eb:10:10:ae:07:9d:62:98:aa:51:5b:bc:fe:05: 28:95:04:97:a2:b6:a0:f0:95:f7:b6:49:52:6d:11: 9e:cc:df:fd:ad:5f:87:b7:71:53:09:28:cc:fa:17: a4:e2:01:b3:e6:5f:b1:f1:b9:be:9c:c2:40:ae:a3: 25:06:2a:1c:71:c4:8d:41:2d:3e:34:f5:4c:23:5b: 14:5f:6d:cb:7c:97:c3:d7:f5:2f:fa:3d:7c:e4:f2: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E3:F8:31:F5:5A:8A:66:04:7F:40:62:CF:4A:BE:3E:CF:2C:DD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1f92ad0-4921-3413-ac75-89036ab2304c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:41:44:56:85:ef:85:93:9b:a4:11:64:ca:07:9b:1a:e7:c9: 5f:c8:9e:7c:ae:55:5e:61:07:96:fd:e1:d9:99:c2:49:70:36: 23:0e:9e:c0:d5:5a:dc:46:7d:fb:24:c2:16:1e:90:1d:a6:58: 7e:ec:fb:c3:0e:d0:84:33:09:51:82:e1:c4:a4:80:92:4c:0a: 21:90:fa:c2:78:0a:70:41:7c:35:fc:ed:ea:22:1e:8a:cd:eb: b8:7a:10:2b:7b:22:20:0b:d2:7b:8c:bf:05:44:b3:a4:e0:1b: 1d:0f:42:20:43:23:ec:d7:8d:2d:90:f4:ef:53:da:51:91:d6: 46:3d:f2:b0:e0:53:6b:60:06:91:a0:44:e3:93:c8:40:4c:1d: 76:f0:6e:aa:67:f3:2a:21:2a:93:fb:b1:cc:f5:8e:92:21:49: 04:e7:c0:60:9a:63:1e:cd:87:d9:2b:88:1a:d6:30:ef:ab:db: 5f:7d:71:db:53:f0:ea:1e:61:81:25:79:2b:92:3f:ac:28:76: 50:23:86:0f:e9:05:16:57:ba:58:e4:36:74:77:81:be:7a:09: 49:dc:4e:6c:4f:08:da:50:29:f0:9f:5f:b9:2d:eb:ea:18:87: a2:df:63:c6:34:5a:d5:4e:cc:72:fa:f4:da:50:64:23:e2:d4: 44:a5:ea:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5G8iVkXkU0bufUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MzVmYTJmNDItYzQ1MS00NDM2LWEyYTMtNWQ2YzY5MWMxMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaZSFwmbAYmRYg7oH3pLeaQp6/0JfYCwkv43 ngj3JPQYQ7l0/xXySyYUlb5/ekboCjQLdcw21Onx9wAjjLxeOTIrZibWg8KmLWRi IBDoTC1PgGFRDiva+HkI97m7OLfTCpMFRG2/PJsnDIWEAnZV9ZvJwuW8ofnsT76D k/b+sw5LhiSqYpEXx4WCNY9RlsWGaHVAFSHcIWbDSmpRKmRDm2ksVPF+6xAQrged YpiqUVu8/gUolQSXorag8JX3tklSbRGezN/9rV+Ht3FTCSjM+hek4gGz5l+x8bm+ nMJArqMlBiocccSNQS0+NPVMI1sUX23LfJfD1/Uv+j185PJFnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnj+DH1WopmBH9AYs9Kvj7PLN3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFmOTJhZDAtNDkyMS0z NDEzLWFjNzUtODkwMzZhYjIzMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFBRFaF74WTm6QRZMoHmxrnyV/InnyuVV5hB5b94dmZwklwNiMOnsDV WtxGffskwhYekB2mWH7s+8MO0IQzCVGC4cSkgJJMCiGQ+sJ4CnBBfDX87eoiHorN 67h6ECt7IiAL0nuMvwVEs6TgGx0PQiBDI+zXjS2Q9O9T2lGR1kY98rDgU2tgBpGg ROOTyEBMHXbwbqpn8yohKpP7scz1jpIhSQTnwGCaYx7Nh9kriBrWMO+r2199cdtT 8OoeYYEleSuSP6wodlAjhg/pBRZXuljkNnR3gb56CUncTmxPCNpQKfCfX7kt6+oY h6LfY8Y0WtVOzHL69NpQZCPi1ESl6so= -----END CERTIFICATE-----Generated at Sun Apr 27 17:59:29 2025 by rpki-client