$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8f86bba-e6b0-3579-a3b4-da154be4c263.roa File: b8f86bba-e6b0-3579-a3b4-da154be4c263.roa (raw, json) Hash identifier: 7/elxV4GJdgnFjDqt7wEaLlOyTmW5PqxDIJL+7V6ElU= Subject key identifier: C2:8B:A2:E2:86:57:ED:01:2F:6C:06:E4:F9:2C:79:88:A0:60:45:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858491ED6EE9492F965201DBE8A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8f86bba-e6b0-3579-a3b4-da154be4c263.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 23.72.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ee:94:92:f9:65:20:1d:be:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=9a1e7d50-1293-4d93-99a5-59d1c781748a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:05:09:ac:6b:06:90:52:6f:27:67:e6:c9: bc:b6:01:bc:6a:cf:4a:12:11:d4:7b:d9:70:50:52: 4c:8c:3c:67:6d:87:e1:63:98:63:43:3b:a8:a5:ac: 94:23:fa:28:48:33:e4:cd:e1:8e:27:58:51:de:59: fb:25:fd:76:89:42:8d:8a:3f:dd:32:7d:1f:16:f8: 37:05:00:7e:bc:bb:d7:df:5e:c3:c0:4a:ba:bd:a8: 4b:c0:0b:e4:c9:9b:52:8c:e1:bd:c4:28:a9:d3:e8: fc:6f:b8:8e:4a:29:e8:fd:99:70:77:19:2f:fa:2e: 3d:46:81:c8:e2:2d:d9:f9:17:a1:d6:19:ea:a2:f5: 54:18:ef:ff:25:c7:11:49:f7:42:c0:93:05:e0:af: 59:43:cb:17:61:1d:05:d6:e5:f1:11:0d:e6:54:68: 80:c0:35:f2:ea:3b:a6:73:d7:0a:c1:1a:58:1d:ba: fc:4c:2b:aa:d1:4e:d1:72:7d:33:70:b5:72:8e:1e: 8a:0d:94:15:20:43:c4:33:aa:8b:41:9b:48:ba:c4: 4d:bf:75:d5:46:d1:2b:f9:74:9d:e4:c5:dd:46:95: c6:0b:10:9b:4d:ec:60:dc:7b:ad:94:d2:11:24:8a: 76:a7:d3:c6:ff:8f:d6:80:17:92:84:b6:fa:a4:92: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8B:A2:E2:86:57:ED:01:2F:6C:06:E4:F9:2C:79:88:A0:60:45:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8f86bba-e6b0-3579-a3b4-da154be4c263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d5:50:36:a1:d6:c9:ee:5c:7f:9f:cd:19:a7:9f:50:35:74: e5:23:f1:e5:9f:c6:d8:35:d4:4d:73:57:fb:be:7d:a3:96:71: f0:39:81:08:ff:61:4d:6c:1e:62:66:a0:b6:3c:c7:76:a6:63: aa:e7:43:60:92:11:18:2b:4e:1f:71:85:3f:fc:16:2c:8c:f5: 81:99:a6:11:1c:36:0a:43:ba:40:63:ba:98:d8:6a:de:c1:9f: 6d:e6:fa:d3:d1:17:c7:b0:f3:88:19:70:d1:7d:1a:bc:56:e7: de:18:97:95:60:3b:0d:20:c5:c6:d3:ac:5f:a1:99:6f:ba:08: f5:98:c4:95:18:23:46:c2:de:ca:cb:22:24:61:9a:dc:be:1b: 6a:56:6e:d2:ed:49:ed:5d:20:cc:3d:9f:02:9b:8a:ad:90:28: 72:2b:18:0e:18:67:37:d8:04:a8:23:cf:c0:23:96:6d:49:50: d3:e6:8d:04:3a:22:44:62:a9:e2:71:85:b9:da:ed:1f:28:ed: 02:0d:f4:09:01:71:9b:1d:1f:14:9a:c5:7e:d0:c3:b6:04:d6: ff:53:fb:ec:e8:d0:d2:9f:a0:77:1d:7f:a9:14:ef:a4:48:ac: f9:b9:11:e4:a7:29:89:d1:91:21:7b:58:3a:88:d9:d9:89:44: cd:87:94:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1u6UkvllIB2+ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk OWExZTdkNTAtMTI5My00ZDkzLTk5YTUtNTlkMWM3ODE3NDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnecFCaxrBpBSbydn5sm8tgG8as9KEhHUe9lw UFJMjDxnbYfhY5hjQzuopayUI/ooSDPkzeGOJ1hR3ln7Jf12iUKNij/dMn0fFvg3 BQB+vLvX317DwEq6vahLwAvkyZtSjOG9xCip0+j8b7iOSino/Zlwdxkv+i49RoHI 4i3Z+Reh1hnqovVUGO//JccRSfdCwJMF4K9ZQ8sXYR0F1uXxEQ3mVGiAwDXy6jum c9cKwRpYHbr8TCuq0U7Rcn0zcLVyjh6KDZQVIEPEM6qLQZtIusRNv3XVRtEr+XSd 5MXdRpXGCxCbTexg3HutlNIRJIp2p9PG/4/WgBeShLb6pJIGFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKLouKGV+0BL2wG5PkseYigYEUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjhmODZiYmEtZTZiMC0z NTc5LWEzYjQtZGExNTRiZTRjMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0j/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDVUDah1snuXH+fzRmnn1A1dOUj8eWfxtg11E1zV/u+faOWcfA5gQj/ YU1sHmJmoLY8x3amY6rnQ2CSERgrTh9xhT/8FiyM9YGZphEcNgpDukBjupjYat7B n23m+tPRF8ew84gZcNF9GrxW594Yl5VgOw0gxcbTrF+hmW+6CPWYxJUYI0bC3srL IiRhmty+G2pWbtLtSe1dIMw9nwKbiq2QKHIrGA4YZzfYBKgjz8Ajlm1JUNPmjQQ6 IkRiqeJxhbna7R8o7QIN9AkBcZsdHxSaxX7Qw7YE1v9T++zo0NKfoHcdf6kU76RI rPm5EeSnKYnRkSF7WDqI2dmJRM2HlL4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:57:10 2025 by rpki-client