$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa File: c53cb806-27f4-343a-9db8-41d80aa3f46b.roa (raw, json) Hash identifier: sTRSKiC8GiKFbc4zNXQ0D+Gz+v0X6r+syceBRL7xRgc= Subject key identifier: 0D:54:47:F2:2C:75:35:20:4C:7D:B4:8C:F9:54:3A:24:F1:0B:57:30 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F43285849E2253E587F1B018C39DE2D80 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 399989 IP address blocks: 23.143.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:3e:58:7f:1b:01:8c:39:de:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=7e24a65d-c232-4894-ac03-0099c0141754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:86:5c:94:12:fa:e9:a2:88:ba:66:5a:1e: ce:e4:c0:e4:fd:81:27:a8:f0:72:0e:d9:7a:b3:c3: 37:89:6a:40:88:17:99:06:21:0a:3d:55:90:81:d1: aa:76:a5:47:cf:30:8b:b1:0c:cb:9b:48:9c:04:50: d9:f3:f2:a5:0c:fb:58:a8:ce:91:d8:b8:b9:82:53: b9:eb:ad:d8:c8:e1:1c:6e:96:b3:72:f9:9c:6e:a3: d6:7d:fb:ce:60:68:4e:c3:ae:8b:f2:77:55:7c:d9: 36:85:09:3e:bd:d7:18:9a:68:b4:3b:1e:ea:51:c5: fa:39:66:77:c9:7b:70:6d:3c:f4:4b:2d:5c:62:a5: ed:59:e5:53:a2:4e:a9:ec:b2:92:05:43:ea:fe:01: da:e5:07:1c:12:8e:64:c5:79:34:1a:77:36:79:b8: 05:84:7e:f5:7c:e5:ae:89:e7:68:11:7e:17:33:db: d9:0c:51:8e:29:5e:78:76:75:ed:80:9a:7f:fb:62: 88:46:c2:f8:f2:8f:16:c0:59:af:63:ed:3d:56:4b: 52:63:73:25:6c:70:fe:c6:d8:6a:2e:f6:d8:45:09: b9:58:6d:cd:42:d4:9a:2d:61:24:e8:8d:fc:cc:40: 11:24:0c:83:93:6d:a6:0c:c7:88:bf:e2:e2:66:09: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:54:47:F2:2C:75:35:20:4C:7D:B4:8C:F9:54:3A:24:F1:0B:57:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b7:4e:e9:31:e2:a9:70:cc:05:cb:4e:64:21:94:69:0c:50: e8:f5:31:85:6f:24:6f:e0:85:fe:b9:e7:c8:b6:ab:46:ee:e7: 5d:b1:1b:d3:a2:85:cd:ae:39:6f:ca:5b:32:d3:57:ef:ed:b7: 8e:d9:a3:5f:28:d8:8a:3b:87:2a:5f:27:ea:97:15:c2:2b:ea: b9:c1:5f:bc:6a:4d:ed:d1:1a:cc:8f:2a:33:06:c3:2c:d5:fe: 8e:4e:08:ab:98:7b:20:e5:66:27:7b:6a:a1:5d:16:15:2c:b4: b6:6c:1b:d3:d9:a2:77:ff:0c:44:f7:ec:45:61:71:ee:c8:39: 83:88:2a:5f:6f:bb:1a:6b:bc:d2:ce:49:45:17:09:9a:91:3f: 7d:18:7a:10:4c:03:78:0e:cb:b8:8b:b6:88:a1:98:95:d3:9b: 84:94:8f:c1:d1:6b:df:b3:43:4a:03:95:1f:48:7a:30:8b:99: a8:d6:cd:e1:1b:e3:4f:08:97:b0:93:8f:e4:a5:8a:45:1b:61: f6:aa:84:b3:f6:82:f0:02:df:dc:d0:5f:40:63:b2:6d:bf:3e: 5c:60:0a:dc:12:24:40:e7:cb:ea:40:21:68:36:4d:9a:a9:c9: ff:f9:c8:d6:bd:dc:a3:e8:13:a7:95:4c:c4:91:34:5a:e9:01: 67:aa:d8:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJT5YfxsBjDneLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk N2UyNGE2NWQtYzIzMi00ODk0LWFjMDMtMDA5OWMwMTQxNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy2GXJQS+umiiLpmWh7O5MDk/YEnqPByDtl6 s8M3iWpAiBeZBiEKPVWQgdGqdqVHzzCLsQzLm0icBFDZ8/KlDPtYqM6R2Li5glO5 663YyOEcbpazcvmcbqPWffvOYGhOw66L8ndVfNk2hQk+vdcYmmi0Ox7qUcX6OWZ3 yXtwbTz0Sy1cYqXtWeVTok6p7LKSBUPq/gHa5QccEo5kxXk0Gnc2ebgFhH71fOWu iedoEX4XM9vZDFGOKV54dnXtgJp/+2KIRsL48o8WwFmvY+09VktSY3MlbHD+xthq LvbYRQm5WG3NQtSaLWEk6I38zEARJAyDk22mDMeIv+LiZgkI/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1UR/IsdTUgTH20jPlUOiTxC1cwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYzUzY2I4MDYtMjdmNC0z NDNhLTlkYjgtNDFkODBhYTNmNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF49oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy3Tukx4qlwzAXLTmQhlGkMUOj1MYVvJG/ghf6558i2q0bu512xG9Oi hc2uOW/KWzLTV+/tt47Zo18o2Io7hypfJ+qXFcIr6rnBX7xqTe3RGsyPKjMGwyzV /o5OCKuYeyDlZid7aqFdFhUstLZsG9PZonf/DET37EVhce7IOYOIKl9vuxprvNLO SUUXCZqRP30YehBMA3gOy7iLtoihmJXTm4SUj8HRa9+zQ0oDlR9IejCLmajWzeEb 408Il7CTj+SlikUbYfaqhLP2gvAC39zQX0Bjsm2/PlxgCtwSJEDny+pAIWg2TZqp yf/5yNa93KPoE6eVTMSRNFrpAWeq2Pg= -----END CERTIFICATE-----Generated at Fri Jun 6 13:11:20 2025 by rpki-client