$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa File: 4e395ad4-2d90-3ea0-8528-5883f02119d1.roa (raw, json) Hash identifier: KdY2N0SDReLNHSop9qHs81ZbHtV04SMhR2v0y+bWUFU= Subject key identifier: F7:54:59:BD:9B:1C:2E:5A:C4:86:1D:F2:E9:F8:63:3E:3B:89:07:71 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584953C449B18AFCF1E993F2FF40 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 950 IP address blocks: 23.140.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:49:b1:8a:fc:f1:e9:93:f2:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=bc2a74f4-ac4b-405a-ba82-e64229f9e79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:b5:81:7f:b3:91:38:d1:1e:57:fe:97:31: ba:46:f2:c1:0b:23:59:4c:68:4c:b3:45:eb:ae:24: 19:b6:7c:9e:10:b1:c1:3e:b3:1f:1b:a8:db:fd:6e: 78:1d:05:ca:89:61:06:75:07:2a:a7:ed:8e:28:ff: af:4a:d3:57:7f:1d:37:1c:41:ab:5b:1c:bf:ea:66: 49:c9:55:ff:da:e1:73:16:76:20:04:e1:2a:7b:0b: 86:02:5a:64:01:01:36:6d:e8:ef:7e:44:84:52:d6: 5f:a0:a4:19:ce:9b:bf:aa:d9:05:67:39:41:8e:82: 6a:ad:eb:93:46:0d:91:6a:88:7a:4f:9f:00:f5:2e: 7c:88:bd:13:fa:92:bf:3b:c4:d0:bb:ab:22:ec:73: 4e:a7:ed:42:45:f6:87:7a:5a:7e:65:5e:c9:8a:85: 02:d0:d4:8b:bc:06:1e:38:7c:4d:9f:d3:de:eb:72: 2b:4a:c6:d6:13:0c:7a:cb:6b:22:a9:cf:93:f8:9f: 83:9c:01:53:67:14:53:72:69:15:6d:7f:09:b1:0f: 0f:8e:9f:d1:dd:64:28:f2:4b:7f:cd:9c:f0:fa:8b: 51:f9:ff:02:de:1d:20:35:eb:cc:0f:32:01:d5:6b: f5:98:75:aa:7a:2c:a9:be:e9:b3:4f:a7:81:4e:92: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:54:59:BD:9B:1C:2E:5A:C4:86:1D:F2:E9:F8:63:3E:3B:89:07:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.140.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:73:f7:1f:35:c6:2c:62:7b:aa:f2:63:37:43:47:30:00:65: c2:a3:33:32:af:a5:99:98:99:2d:af:05:73:f1:e8:e2:16:40: b2:a1:3a:f6:33:27:04:b6:9d:84:ef:73:34:c6:26:d4:a9:14: 3a:d2:c6:e3:db:61:d5:0c:c1:c2:bf:9f:ef:69:b0:c2:c3:18: e7:01:15:7b:3b:a5:69:45:c0:b5:20:25:b7:73:3d:cc:ec:a6: 0b:fb:bc:9e:a8:77:3d:b0:8e:f3:1c:e2:d8:0f:ea:b8:5a:9a: 0d:33:c3:98:51:68:5c:55:be:d5:e9:53:f1:1d:04:c8:a5:c2: d6:a6:54:f2:ac:d8:ff:d2:93:d1:71:91:f8:ae:a4:c5:e9:82: e8:c0:cf:c8:15:32:2f:a5:17:0d:b2:b9:36:1a:92:63:6e:0b: 51:20:64:05:60:87:54:50:19:bd:bf:6f:86:c0:5c:b8:0c:04: 45:07:9f:fa:ec:46:80:4a:83:3b:e1:f2:23:2d:c9:30:93:dc: 0f:ba:bf:b2:c6:da:02:01:39:61:c6:05:5f:d2:5e:3d:b5:9b: 27:98:65:dc:a0:d0:9f:ed:af:fa:2b:24:05:f1:77:a5:0f:21: 05:61:8a:5f:8e:e1:fd:9c:89:52:da:22:d5:66:94:32:c0:b5: 2a:69:b7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEmxivzx6ZPy/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YmMyYTc0ZjQtYWM0Yi00MDVhLWJhODItZTY0MjI5ZjllNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5+1gX+zkTjRHlf+lzG6RvLBCyNZTGhMs0Xr riQZtnyeELHBPrMfG6jb/W54HQXKiWEGdQcqp+2OKP+vStNXfx03HEGrWxy/6mZJ yVX/2uFzFnYgBOEqewuGAlpkAQE2bejvfkSEUtZfoKQZzpu/qtkFZzlBjoJqreuT Rg2Raoh6T58A9S58iL0T+pK/O8TQu6si7HNOp+1CRfaHelp+ZV7JioUC0NSLvAYe OHxNn9Pe63IrSsbWEwx6y2siqc+T+J+DnAFTZxRTcmkVbX8JsQ8Pjp/R3WQo8kt/ zZzw+otR+f8C3h0gNevMDzIB1Wv1mHWqeiypvumzT6eBTpIHbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdUWb2bHC5axIYd8un4Yz47iQdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvNGUzOTVhZDQtMmQ5MC0z ZWEwLTg1MjgtNTg4M2YwMjExOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJz9x81xixie6ryYzdDRzAAZcKjMzKvpZmYmS2vBXPx6OIWQLKhOvYz JwS2nYTvczTGJtSpFDrSxuPbYdUMwcK/n+9psMLDGOcBFXs7pWlFwLUgJbdzPczs pgv7vJ6odz2wjvMc4tgP6rhamg0zw5hRaFxVvtXpU/EdBMilwtamVPKs2P/Sk9Fx kfiupMXpgujAz8gVMi+lFw2yuTYakmNuC1EgZAVgh1RQGb2/b4bAXLgMBEUHn/rs RoBKgzvh8iMtyTCT3A+6v7LG2gIBOWHGBV/SXj21myeYZdyg0J/tr/orJAXxd6UP IQVhil+O4f2ciVLaItVmlDLAtSppt0I= -----END CERTIFICATE-----Generated at Fri Apr 18 02:08:31 2025 by rpki-client