$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa File: 70e37e41-10ad-3645-89a6-8e56f0894b2d.roa (raw, json) Hash identifier: YEXlf4ygNT4AsKB6UJOFHEYCDIW0nbFuu3KajNOKe8M= Subject key identifier: 5C:B0:0D:17:03:7E:12:EF:1D:A8:19:C3:FD:40:59:9F:DB:87:75:DC Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849A4BA4C69339A98F946B2AA80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 31898 IP address blocks: 23.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4c:69:33:9a:98:f9:46:b2:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=402257e3-861c-4b91-a8fc-db78bed91b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:cd:0b:42:af:26:c7:18:fa:98:81:9d:11: 2e:8e:10:34:ae:17:e0:cf:f4:fd:ad:2d:d3:e6:f2: 5c:11:7c:bc:02:fa:26:3e:c5:22:4b:1f:92:78:00: 35:68:12:c0:ab:e5:a0:5d:4e:e3:70:df:e1:bb:d0: 1b:45:d6:91:6f:ae:c7:51:98:4d:8b:22:a9:ff:6b: 04:fd:d0:81:78:06:ce:90:18:db:5b:35:ac:af:ea: 41:97:81:4c:32:70:e1:a8:36:98:16:98:97:fd:7c: c5:8a:dc:68:35:7e:ce:4c:c1:45:4b:1d:1e:3f:41: ff:e9:18:3b:c7:b5:c2:55:c5:3c:2a:07:6f:f9:0c: d2:55:2d:b1:58:51:dd:68:09:31:20:34:61:97:c1: 6e:c2:4e:5c:fd:b3:ea:bc:94:d3:33:60:8c:f9:ff: b1:86:64:4b:91:6f:7e:ee:72:ee:d4:19:5c:f6:5f: af:51:92:16:d2:29:01:a9:60:cf:af:4d:da:df:07: 65:fa:f7:a3:8c:53:66:3d:a9:dd:59:f5:21:be:d8: 57:2a:5d:53:55:41:0b:55:03:38:4d:2b:ee:52:0e: 91:63:78:55:70:95:97:39:f8:dd:d6:96:86:9e:99: 6f:97:82:b4:4e:7f:3b:ec:43:e0:07:d3:65:64:13: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:0D:17:03:7E:12:EF:1D:A8:19:C3:FD:40:59:9F:DB:87:75:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e2:f4:f9:d2:e7:da:c7:50:09:53:44:98:2a:07:87:e1:26: ff:3f:7c:3c:c6:bf:a2:0c:43:16:a4:c8:5b:a4:cd:0a:20:71: 5c:ce:e7:31:55:f5:a9:c3:aa:49:df:8d:48:86:9a:02:76:66: f6:5b:23:78:39:fc:5b:d6:25:3e:5b:4c:8d:4f:64:33:e0:07: 7b:1c:d7:25:4e:a1:9a:3f:df:b0:a5:b0:05:55:f8:0e:43:e6: d1:fe:67:e5:3c:ce:e1:29:9e:1f:35:1c:75:05:bb:a4:25:a5: 60:bc:d4:b3:58:13:b8:52:0a:17:a4:8a:a4:69:5c:9f:0f:3d: a0:4e:22:5c:52:b3:9c:6f:e1:5b:f4:9e:15:b1:28:5b:ec:64: 58:ff:6e:69:fc:e5:d9:8a:9c:e1:cc:31:27:c3:2c:9e:09:18: 47:af:e6:06:a7:ed:07:d5:9d:ae:f5:34:04:06:b0:6d:63:00: 41:a5:a3:3b:b0:e5:7b:19:e0:1e:de:fd:6c:bb:33:9a:ae:b9: 15:3f:6d:2e:f5:a1:fb:b4:01:bc:61:fb:42:d9:20:62:58:70: 55:63:63:1e:2d:9a:b2:ea:db:2f:67:b2:86:2d:24:d0:81:42: a0:ba:84:19:b7:65:4b:e9:9a:44:7b:43:85:84:ae:2d:18:d1: b5:72:73:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukxpM5qY+UayqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDAyMjU3ZTMtODYxYy00YjkxLWE4ZmMtZGI3OGJlZDkxYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9fNC0KvJscY+piBnREujhA0rhfgz/T9rS3T 5vJcEXy8AvomPsUiSx+SeAA1aBLAq+WgXU7jcN/hu9AbRdaRb67HUZhNiyKp/2sE /dCBeAbOkBjbWzWsr+pBl4FMMnDhqDaYFpiX/XzFitxoNX7OTMFFSx0eP0H/6Rg7 x7XCVcU8Kgdv+QzSVS2xWFHdaAkxIDRhl8Fuwk5c/bPqvJTTM2CM+f+xhmRLkW9+ 7nLu1Blc9l+vUZIW0ikBqWDPr03a3wdl+vejjFNmPandWfUhvthXKl1TVUELVQM4 TSvuUg6RY3hVcJWXOfjd1paGnplvl4K0Tn877EPgB9NlZBNu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFywDRcDfhLvHagZw/1AWZ/bh3XcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzBlMzdlNDEtMTBhZC0z NjQ1LTg5YTYtOGU1NmYwODk0YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfi9PnS59rHUAlTRJgqB4fhJv8/fDzGv6IMQxakyFukzQogcVzO5zFV 9anDqknfjUiGmgJ2ZvZbI3g5/FvWJT5bTI1PZDPgB3sc1yVOoZo/37ClsAVV+A5D 5tH+Z+U8zuEpnh81HHUFu6QlpWC81LNYE7hSChekiqRpXJ8PPaBOIlxSs5xv4Vv0 nhWxKFvsZFj/bmn85dmKnOHMMSfDLJ4JGEev5gan7QfVna71NAQGsG1jAEGlozuw 5XsZ4B7e/Wy7M5quuRU/bS71ofu0Abxh+0LZIGJYcFVjYx4tmrLq2y9nsoYtJNCB QqC6hBm3ZUvpmkR7Q4WEri0Y0bVyc+A= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:16 2025 by rpki-client