$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa File: bebba86e-a1c2-3eb5-b277-eabe13095c64.roa (raw, json) Hash identifier: J50pIZUpl+N43E6clESKuQtos4ibfFoj18iapze6+mY= Subject key identifier: 68:4C:09:11:C3:78:66:2C:C4:80:C1:77:EA:42:16:58:25:E9:B7:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499DBF426FE82F39800B257780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 20940 IP address blocks: 23.217.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:42:6f:e8:2f:39:80:0b:25:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=27da2b52-3233-42ca-b505-5438f30322f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:29:cd:0f:f1:4d:33:2b:27:ff:51:50:a7: 9b:1b:c6:d8:18:0c:e0:c2:a3:fe:02:0b:7b:88:da: 78:32:b5:cf:e5:7e:ee:a7:51:52:bc:c3:14:67:1d: 93:da:99:03:96:a6:52:3c:58:75:0b:36:aa:9f:00: cd:48:c4:e3:44:10:38:f8:f0:2f:36:7a:7b:1d:43: 4f:81:13:1d:85:57:f3:bd:8f:1a:9a:82:79:fc:a7: 95:ab:50:5a:45:bf:4c:b4:05:74:4e:1d:e2:3b:01: c2:f3:cc:91:6b:43:af:f3:a5:91:fc:33:a8:c2:b5: 70:78:f9:dd:96:e6:cb:3f:6e:0e:ff:a3:2a:9a:fc: 12:61:25:27:bf:19:c2:33:07:40:3c:e0:e5:9b:b0: c4:1c:64:24:79:89:4a:dc:00:de:0e:c0:eb:9e:e3: 33:30:57:82:1d:bb:e9:47:88:81:d9:91:b6:eb:15: c5:c5:e8:f5:b3:57:4c:5f:a6:53:e9:b2:45:c3:60: dc:35:b4:b9:a2:f6:3c:a9:d1:ed:03:2d:23:f6:ea: f0:48:28:fe:d1:a8:55:43:c7:d5:1e:a9:0a:49:62: ba:a5:2a:cc:2c:f3:47:cf:c6:c4:c4:46:d0:06:f3: 85:3d:46:be:3c:e2:01:a8:6d:51:85:b7:d2:f3:96: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:09:11:C3:78:66:2C:C4:80:C1:77:EA:42:16:58:25:E9:B7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:27:fc:bf:a6:05:3d:f5:c4:eb:e2:69:cd:3b:d9:10:77:fe: 58:89:a7:09:de:af:93:21:4e:ca:1b:97:c0:3f:5a:63:db:ae: 8a:6a:24:3f:42:7d:c0:ba:56:83:fb:97:c8:1b:d1:d9:b9:cb: 42:28:e5:43:27:c2:2d:df:12:57:38:37:da:11:1b:aa:45:2e: fb:59:5b:74:6f:ff:cf:51:17:ef:42:69:49:de:91:6b:16:d9: b4:f9:29:ab:3d:5f:6b:91:80:d7:b4:21:a9:b8:9d:55:77:d4: a4:8c:44:a6:bb:78:9b:a7:7b:ac:82:f9:29:4e:c7:b9:4e:27: b7:39:ee:c0:eb:ff:f5:3e:0d:1b:fd:d4:92:c0:0b:cc:54:73: 9d:2b:09:50:9b:75:00:de:9f:c6:89:64:56:50:3e:d2:1e:7d: 63:9a:45:7d:80:5a:c3:4b:1c:7b:4f:16:99:be:44:4b:a1:d1: 36:90:f9:88:ff:3b:c8:b5:9d:3d:89:7b:40:c5:68:ba:c8:eb: e7:87:e1:18:04:41:df:67:e5:aa:51:6f:a4:76:68:11:cf:5c: 6d:ed:6e:99:4d:5e:6f:35:f5:03:37:20:c8:38:ec:b6:b5:45: a8:40:74:01:57:7c:72:c6:de:47:99:90:f2:bd:e5:7c:a4:fa: 15:38:9a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0Jv6C85gAsld4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MjdkYTJiNTItMzIzMy00MmNhLWI1MDUtNTQzOGYzMDMyMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswgpzQ/xTTMrJ/9RUKebG8bYGAzgwqP+Agt7 iNp4MrXP5X7up1FSvMMUZx2T2pkDlqZSPFh1CzaqnwDNSMTjRBA4+PAvNnp7HUNP gRMdhVfzvY8amoJ5/KeVq1BaRb9MtAV0Th3iOwHC88yRa0Ov86WR/DOowrVwePnd lubLP24O/6MqmvwSYSUnvxnCMwdAPODlm7DEHGQkeYlK3ADeDsDrnuMzMFeCHbvp R4iB2ZG26xXFxej1s1dMX6ZT6bJFw2DcNbS5ovY8qdHtAy0j9urwSCj+0ahVQ8fV HqkKSWK6pSrMLPNHz8bExEbQBvOFPUa+POIBqG1RhbfS85bJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhMCRHDeGYsxIDBd+pCFlgl6bepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmViYmE4NmUtYTFjMi0z ZWI1LWIyNzctZWFiZTEzMDk1YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9k1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQn/L+mBT31xOviac072RB3/liJpwner5MhTsobl8A/WmPbropqJD9C fcC6VoP7l8gb0dm5y0Io5UMnwi3fElc4N9oRG6pFLvtZW3Rv/89RF+9CaUnekWsW 2bT5Kas9X2uRgNe0Iam4nVV31KSMRKa7eJune6yC+SlOx7lOJ7c57sDr//U+DRv9 1JLAC8xUc50rCVCbdQDen8aJZFZQPtIefWOaRX2AWsNLHHtPFpm+REuh0TaQ+Yj/ O8i1nT2Je0DFaLrI6+eH4RgEQd9n5apRb6R2aBHPXG3tbplNXm819QM3IMg47La1 RahAdAFXfHLG3keZkPK95Xyk+hU4mn4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:25 2025 by rpki-client