$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdd61841-033b-38c4-aef8-c3f0d19b2020.roa File: bdd61841-033b-38c4-aef8-c3f0d19b2020.roa (raw, json) Hash identifier: 047QPVWUtm9+auDelw212xZpLQUfulRMt1WGGN3e0zY= Subject key identifier: 3E:3F:C6:B0:6A:27:C4:4E:59:FA:F5:41:F1:FD:02:9F:0D:08:AF:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF4941DDBDE9E0083F86620 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdd61841-033b-38c4-aef8-c3f0d19b2020.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.212.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:94:1d:db:de:9e:00:83:f8:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=66ee09ce-518a-4b90-8d08-18fcffad24a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:dd:ad:4a:40:e6:97:eb:ac:75:0f:24:9e: f3:7f:f4:5f:e7:66:c2:ab:a4:e2:28:4b:34:58:ea: ad:81:13:85:ce:3e:65:72:d9:17:45:fd:b8:db:d5: ff:9e:ab:8f:f1:18:9a:b1:20:29:52:c6:b1:68:f1: ed:23:04:b7:b6:00:bd:c2:54:82:46:ea:f4:1f:5c: ce:62:25:f8:f3:de:db:65:0e:ee:82:91:72:ee:66: 1b:92:ba:c8:7a:27:1d:d3:36:25:8f:47:3f:42:6a: a8:f7:7e:9f:31:b8:97:ec:f1:97:ce:3b:d5:3c:cc: 2a:22:6c:ec:ae:2f:8d:6d:c9:33:97:db:c2:4b:7d: ac:b3:88:9b:7f:18:84:d4:3b:24:94:38:3c:b7:b2: c2:1a:ac:44:ff:81:1f:e5:87:99:26:c4:49:34:7b: b7:22:97:1a:1d:49:45:d6:9f:23:33:d3:9d:22:66: 11:62:11:d9:55:29:b6:65:40:03:af:74:8b:df:15: 5a:21:b0:35:7b:6c:73:17:06:73:38:6c:84:49:92: cb:b3:71:b2:3e:3d:f9:b6:45:c8:44:39:54:24:8d: 64:fd:d7:42:ee:88:44:0d:3c:34:32:6d:ed:7d:d0: 79:a4:dd:65:94:36:a2:6c:11:98:3f:24:11:c9:eb: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:C6:B0:6A:27:C4:4E:59:FA:F5:41:F1:FD:02:9F:0D:08:AF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdd61841-033b-38c4-aef8-c3f0d19b2020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7e:c2:b6:4f:98:63:da:c7:7c:0f:c3:e7:70:b4:19:4e:c5: 53:50:0f:10:46:f1:3c:0d:36:ce:88:bf:06:7a:ef:8e:ae:42: e9:56:cb:80:3d:cd:b8:8b:11:d4:b0:87:5f:06:b6:ed:92:15: 36:22:9a:99:8a:e9:1c:a3:db:d9:54:14:94:77:35:a4:a9:bb: 3f:74:32:a7:92:38:ca:34:2a:38:31:3d:2b:ff:f7:61:e3:71: 0b:4b:e1:48:0e:8b:9d:47:30:00:63:8e:2f:b9:51:bb:a3:9e: df:fb:74:cc:30:de:f5:80:e4:f2:06:9f:94:12:99:91:00:2e: cf:e9:ff:93:96:7c:a0:2c:86:6a:0d:49:84:8b:62:af:ff:39: 99:c6:9b:b0:1a:2c:ab:00:82:f1:27:5d:ca:cc:48:66:5f:26: 61:e8:f6:6f:06:c8:c9:92:16:19:5d:ca:32:ff:4f:3d:70:db: 49:a1:49:02:f6:3d:f4:8c:1c:87:62:ec:aa:e3:c0:99:89:4f: 21:f0:5c:4f:ee:82:df:0c:e4:c4:06:11:a7:31:d3:f3:79:f4: cd:5a:30:03:2e:e0:40:da:5e:18:4b:7f:13:06:d2:93:84:93: 24:53:64:74:2d:1d:67:fb:8e:75:71:14:52:f6:47:22:87:7f: c0:51:e6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JQd296eAIP4ZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NjZlZTA5Y2UtNTE4YS00YjkwLThkMDgtMThmY2ZmYWQyNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxLdrUpA5pfrrHUPJJ7zf/Rf52bCq6TiKEs0 WOqtgROFzj5lctkXRf2429X/nquP8RiasSApUsaxaPHtIwS3tgC9wlSCRur0H1zO YiX4897bZQ7ugpFy7mYbkrrIeicd0zYlj0c/Qmqo936fMbiX7PGXzjvVPMwqImzs ri+Nbckzl9vCS32ss4ibfxiE1DsklDg8t7LCGqxE/4Ef5YeZJsRJNHu3IpcaHUlF 1p8jM9OdImYRYhHZVSm2ZUADr3SL3xVaIbA1e2xzFwZzOGyESZLLs3GyPj35tkXI RDlUJI1k/ddC7ohEDTw0Mm3tfdB5pN1llDaibBGYPyQRyesehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4/xrBqJ8ROWfr1QfH9Ap8NCK/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmRkNjE4NDEtMDMzYi0z OGM0LWFlZjgtYzNmMGQxOWIyMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9Q0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh+wrZPmGPax3wPw+dwtBlOxVNQDxBG8TwNNs6IvwZ6746uQulWy4A9 zbiLEdSwh18Gtu2SFTYimpmK6Ryj29lUFJR3NaSpuz90MqeSOMo0KjgxPSv/92Hj cQtL4UgOi51HMABjji+5Ubujnt/7dMww3vWA5PIGn5QSmZEALs/p/5OWfKAshmoN SYSLYq//OZnGm7AaLKsAgvEnXcrMSGZfJmHo9m8GyMmSFhldyjL/Tz1w20mhSQL2 PfSMHIdi7KrjwJmJTyHwXE/ugt8M5MQGEacx0/N59M1aMAMu4EDaXhhLfxMG0pOE kyRTZHQtHWf7jnVxFFL2RyKHf8BR5rs= -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:55 2025 by rpki-client