$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f112af34-92a3-3e2f-b854-f2c244a03707.roa File: f112af34-92a3-3e2f-b854-f2c244a03707.roa (raw, json) Hash identifier: iajefxuRXLUGDJ7BxU+mBDIaqlXYUivppEdkzC6b5Yw= Subject key identifier: BE:79:B7:30:CD:C0:76:7C:32:99:95:FF:2D:F8:C9:DE:76:F7:5C:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964845296A9EB734C3FA24180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f112af34-92a3-3e2f-b854-f2c244a03707.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.52.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:52:96:a9:eb:73:4c:3f:a2:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=5b1ff9c0-04e5-4e57-9fdd-a319e6c3d5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:14:62:d4:df:ca:2d:f6:d2:bc:45:8a:70:fe: 1a:fb:38:22:1f:7a:a7:c1:99:66:1d:28:27:4a:c8: ea:73:61:07:82:52:35:bc:35:06:9e:df:57:a2:64: 6c:47:31:a7:72:c6:99:01:21:9f:45:06:ef:83:15: a0:8e:4b:bd:08:09:86:4b:f3:32:35:03:54:88:3a: 9d:97:03:7c:a3:a0:1f:d1:1e:94:18:05:6e:1b:25: 7e:80:1e:e8:fd:67:c8:1e:55:33:cc:ee:65:29:1f: 56:fe:8a:03:ea:68:90:34:84:72:29:2b:14:97:8e: a3:da:1b:62:78:c3:15:23:d2:fa:d9:bf:b4:2b:8e: 9d:51:bf:cb:56:8c:f6:f5:2e:05:fc:f3:86:10:09: 01:a4:5e:d0:e7:cf:88:d7:fb:81:06:53:fa:48:7a: 75:30:67:ad:66:70:fa:3b:1d:ee:91:20:40:7a:66: 5f:69:d8:42:63:b6:bd:30:7f:1f:46:8b:ee:29:6d: 47:bd:f4:d3:71:6f:f7:81:c6:70:fb:8d:9c:84:65: 43:72:e3:92:12:e7:f8:0f:b7:43:b2:44:79:1f:47: 02:d8:69:83:1a:ad:72:1e:76:45:ca:0c:82:49:f8: 9f:d6:a4:42:b9:77:fa:62:a9:3d:20:ef:12:79:62: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:79:B7:30:CD:C0:76:7C:32:99:95:FF:2D:F8:C9:DE:76:F7:5C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f112af34-92a3-3e2f-b854-f2c244a03707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:2a:17:0f:28:cc:3d:2a:0e:12:d1:43:9c:35:ab:1f:aa: f5:26:79:5a:a7:e4:c3:2a:af:3a:19:25:8b:1e:5d:11:a3:d5: 09:b4:34:7c:99:51:67:3e:60:9e:9f:03:86:65:c4:d1:bb:fa: 55:20:c3:31:2f:64:19:dc:1a:98:f0:08:ef:f7:20:cd:5a:c5: 84:19:c8:03:58:ea:16:12:62:89:e1:3d:fb:22:e1:67:8f:cf: d5:62:01:8f:7f:a0:88:20:5a:6d:79:19:b6:2b:0b:fc:5d:f5: fb:f0:55:bc:5c:9c:e5:87:d2:2b:06:4a:80:8d:a0:27:01:80: 13:67:ed:8f:7e:27:13:7e:c0:d6:1a:a1:e5:1d:63:9f:02:74: 8f:db:8a:6f:2c:82:b1:45:7d:cc:ad:21:7b:d2:5e:91:08:92: 79:ec:47:7a:84:7c:42:de:dd:02:06:e5:04:ca:8f:60:f3:1a: 23:ce:ed:43:6b:b3:96:87:8b:33:fa:77:4a:07:7e:25:34:d8: 41:7b:c2:38:44:34:9d:ef:e9:0e:02:7a:e3:bb:08:60:0a:a6: ec:e0:71:0f:e2:16:13:46:e0:25:aa:36:d2:e6:41:ed:34:33: f4:09:9a:8f:a0:09:47:db:87:0a:6e:f3:76:bf:ef:bc:93:75: 3a:a4:fe:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFKWqetzTD+iQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NWIxZmY5YzAtMDRlNS00ZTU3LTlmZGQtYTMxOWU2YzNkNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhRi1N/KLfbSvEWKcP4a+zgiH3qnwZlmHSgn Ssjqc2EHglI1vDUGnt9XomRsRzGncsaZASGfRQbvgxWgjku9CAmGS/MyNQNUiDqd lwN8o6Af0R6UGAVuGyV+gB7o/WfIHlUzzO5lKR9W/ooD6miQNIRyKSsUl46j2hti eMMVI9L62b+0K46dUb/LVoz29S4F/POGEAkBpF7Q58+I1/uBBlP6SHp1MGetZnD6 Ox3ukSBAemZfadhCY7a9MH8fRovuKW1HvfTTcW/3gcZw+42chGVDcuOSEuf4D7dD skR5H0cC2GmDGq1yHnZFygyCSfif1qRCuXf6Yqk9IO8SeWJkcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL55tzDNwHZ8MpmV/y34yd5291wtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjExMmFmMzQtOTJhMy0z ZTJmLWI4NTQtZjJjMjQ0YTAzNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmKKhcPKMw9Kg4S0UOcNasfqvUmeVqn5MMqrzoZJYseXRGj1Qm0NHyZ UWc+YJ6fA4ZlxNG7+lUgwzEvZBncGpjwCO/3IM1axYQZyANY6hYSYonhPfsi4WeP z9ViAY9/oIggWm15GbYrC/xd9fvwVbxcnOWH0isGSoCNoCcBgBNn7Y9+JxN+wNYa oeUdY58CdI/bim8sgrFFfcytIXvSXpEIknnsR3qEfELe3QIG5QTKj2DzGiPO7UNr s5aHizP6d0oHfiU02EF7wjhENJ3v6Q4CeuO7CGAKpuzgcQ/iFhNG4CWqNtLmQe00 M/QJmo+gCUfbhwpu83a/77yTdTqk/vc= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:00 2025 by rpki-client