$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa File: ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa (raw, json) Hash identifier: xLi/KAnILrf+8p38w6Ex1lBZVs6zj4+WVLgWnf2rpfg= Subject key identifier: 2E:6A:36:E3:5E:09:D5:9B:2F:F8:D9:66:FA:6A:C4:E0:DE:36:BA:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964846E95CA9D092929BDBA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.53.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6e:95:ca:9d:09:29:29:bd:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=7f5ed3d9-8f16-446e-8b6d-b4bfb74d7545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:e5:81:f4:3c:b8:35:26:1c:c4:d0:2f:e2: af:25:b4:cb:7e:2b:aa:04:53:3f:8c:75:4b:a2:1e: 57:ae:b1:7c:1f:5c:2e:d6:d1:f6:67:34:12:02:2d: 36:08:d5:86:0d:9c:62:54:52:bc:3b:78:06:0b:39: d5:cc:36:fd:33:42:d6:eb:42:9e:b9:5e:d9:e6:22: 16:f8:ce:a4:22:47:54:8b:fd:90:a2:19:df:bb:b4: 66:c4:e7:bc:35:cc:21:98:5a:17:cb:60:2a:af:0e: 86:40:3b:25:fe:38:88:31:1f:29:7d:a6:ee:ad:ab: ad:6e:37:ac:cd:99:a5:06:37:c6:de:94:ed:5c:33: 4e:21:7e:a0:5f:79:ee:bd:1b:c2:a0:42:ad:d6:73: 33:dc:16:78:6b:63:00:e4:c0:e4:ca:72:a9:3d:59: 50:e8:78:d4:28:96:09:66:39:1f:63:a2:43:36:d0: b9:b8:07:6a:9b:a4:ba:a4:4d:59:31:45:42:d9:7f: e6:b1:c1:94:44:9c:5f:b2:8b:ea:15:f2:f8:9d:29: 28:9a:1b:a7:2e:18:d3:f5:94:f1:21:34:1c:a4:c5: 68:c3:d7:84:b5:55:a0:78:8a:73:6e:a4:a3:e0:5f: 11:8a:58:9c:cf:8e:d1:43:49:a0:25:b4:0b:c5:65: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:36:E3:5E:09:D5:9B:2F:F8:D9:66:FA:6A:C4:E0:DE:36:BA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:88:46:8b:43:06:6b:d5:ef:ed:3f:45:de:1d:3f:80:ab:9d: 0c:2b:29:ed:67:9a:02:b9:c1:5a:18:7b:22:72:a1:0f:99:cf: 22:02:ac:8c:c6:b7:6f:10:f6:4a:d3:d0:94:34:1c:90:75:c1: 86:d7:57:a3:10:95:4f:23:39:29:d1:53:5b:82:04:1c:07:97: 38:87:44:06:64:8e:4e:d5:09:70:08:5a:dc:2c:3b:cf:27:e1: ee:62:5a:56:01:46:05:de:e1:bc:bf:cb:c5:9f:18:e1:8b:78: ac:32:d4:7d:38:d0:9f:88:93:b4:56:31:e7:3c:b1:07:0d:77: e2:cc:0e:04:38:c9:76:16:56:8b:18:4a:4c:e9:60:6d:08:db: ae:5a:bc:47:33:fb:2d:af:37:b3:85:21:64:4b:35:c0:d2:89: 9d:86:10:ae:3b:f9:9e:ef:f8:96:82:1f:c7:5f:a1:f0:eb:5a: 73:00:24:29:e3:5c:9a:c2:29:5c:47:ca:45:f0:76:5b:bb:85: b6:46:d3:98:12:5c:a0:59:c1:76:0b:e8:07:d6:8a:d5:c9:ba: a7:7f:31:12:b7:4e:f5:ea:c9:9e:e2:86:8e:17:c6:62:90:ca: ac:1a:23:18:36:7f:e4:20:44:78:f9:9d:f2:46:83:f4:35:2d: 52:32:88:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhG6Vyp0JKSm9uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk N2Y1ZWQzZDktOGYxNi00NDZlLThiNmQtYjRiZmI3NGQ3NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4LlgfQ8uDUmHMTQL+KvJbTLfiuqBFM/jHVL oh5XrrF8H1wu1tH2ZzQSAi02CNWGDZxiVFK8O3gGCznVzDb9M0LW60KeuV7Z5iIW +M6kIkdUi/2Qohnfu7RmxOe8NcwhmFoXy2Aqrw6GQDsl/jiIMR8pfaburautbjes zZmlBjfG3pTtXDNOIX6gX3nuvRvCoEKt1nMz3BZ4a2MA5MDkynKpPVlQ6HjUKJYJ ZjkfY6JDNtC5uAdqm6S6pE1ZMUVC2X/mscGURJxfsovqFfL4nSkomhunLhjT9ZTx ITQcpMVow9eEtVWgeIpzbqSj4F8Rilicz47RQ0mgJbQLxWV66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5qNuNeCdWbL/jZZvpqxODeNrpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U1MjRlMzYtZmY3Ni0z NTkyLWI1YjMtYmRkYzdkNDcwOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSIRotDBmvV7+0/Rd4dP4CrnQwrKe1nmgK5wVoYeyJyoQ+ZzyICrIzG t28Q9krT0JQ0HJB1wYbXV6MQlU8jOSnRU1uCBBwHlziHRAZkjk7VCXAIWtwsO88n 4e5iWlYBRgXe4by/y8WfGOGLeKwy1H040J+Ik7RWMec8sQcNd+LMDgQ4yXYWVosY SkzpYG0I265avEcz+y2vN7OFIWRLNcDSiZ2GEK47+Z7v+JaCH8dfofDrWnMAJCnj XJrCKVxHykXwdlu7hbZG05gSXKBZwXYL6AfWitXJuqd/MRK3TvXqyZ7iho4XxmKQ yqwaIxg2f+QgRHj5nfJGg/Q1LVIyiOM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:17:05 2025 by rpki-client