$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa File: 2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa (raw, json) Hash identifier: dRWFfq2rKCXZ4SL0W5pmJ2gstoucg39QJhwL+qp89C4= Subject key identifier: 7F:AB:73:3C:B7:D2:6F:89:80:EE:FD:72:4D:74:9A:E1:65:AA:29:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849648450CC0BC8DCA3781D6D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.52.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:50:cc:0b:c8:dc:a3:78:1d:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=888aa811-072f-415f-b8f0-33d3b1215138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:19:c3:c7:20:53:69:e2:21:bd:e7:35:3d:51: 61:bc:f3:bf:dd:e4:1d:12:20:29:e7:84:14:d9:d9: c7:43:27:d5:ce:a8:ef:10:cb:59:08:dc:a0:55:f5: c3:e3:28:f1:d7:61:59:f8:a4:4f:b2:bc:83:f4:06: cf:ba:8d:dc:87:eb:78:db:d5:7b:b0:46:9f:41:91: cd:cf:d2:f6:9c:ec:1f:84:0a:b5:97:51:cb:8c:55: 47:ce:12:ee:6d:3f:36:70:86:6b:ef:1d:27:90:84: b0:40:2a:c9:ce:36:16:ef:f7:14:ea:9f:1a:91:42: 36:a1:9f:d6:48:1f:e6:80:2f:5e:0c:b2:ef:d3:36: dc:47:86:a2:91:20:98:fc:f8:8b:bb:04:f6:b0:f6: bf:d2:a5:f6:3f:31:4c:c5:8f:f3:ce:08:07:f4:b0: ab:b0:99:8a:d0:4c:9f:21:a3:00:c5:be:a9:79:57: 74:28:5f:83:f8:8b:cf:27:3f:57:5c:f4:07:d1:98: 2f:6f:c3:92:f5:65:35:9c:55:4a:50:f4:40:ac:e1: ca:99:0e:b6:f9:55:09:a2:35:e7:18:2b:7f:92:17: 53:cc:34:4d:58:45:ac:71:a8:a3:f1:1a:e3:da:d3: 0c:35:2a:7c:3c:b2:75:26:d9:d0:ec:a3:33:cf:d4: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AB:73:3C:B7:D2:6F:89:80:EE:FD:72:4D:74:9A:E1:65:AA:29:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f824d52-ba8e-3ce3-b55d-3d6264a4e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:17:1f:89:11:8d:24:fb:4c:f4:7f:16:94:e3:eb:49:e9:5a: 20:88:e1:a2:96:73:9c:74:0c:54:35:76:04:84:ef:a3:20:d2: 12:6a:3b:3f:0d:50:15:e4:38:53:b5:d2:f9:fb:0e:b9:51:c7: 24:c4:ce:57:f5:63:70:b0:0f:1e:55:ee:fd:11:4a:5f:bf:f6: f3:e6:98:c0:09:ed:d9:35:91:ba:22:f2:30:52:e6:7f:83:d8: 3d:43:15:a7:1a:4b:e0:85:68:17:e7:1e:b6:fb:96:49:ec:51: 78:59:0f:2f:76:82:9d:74:9c:44:52:98:09:b4:ed:96:44:ed: c6:25:b8:ad:e8:ca:af:7c:eb:8a:b8:e4:e0:cd:3f:08:9f:ce: 54:bf:1d:29:f1:b0:9d:d7:e2:d3:57:77:3f:78:d5:f6:f4:82: 0c:68:d9:42:cd:e8:15:46:cf:a1:3f:d3:e1:a7:e9:31:49:10: 7f:86:71:56:d4:29:76:41:c5:8f:43:f4:e3:fe:18:5d:24:c5: ac:e0:bd:ce:74:9f:f5:4b:b9:7a:bd:91:94:d1:be:9c:b2:41: 43:b2:b7:f0:c3:13:b0:75:23:6c:5a:8f:47:5a:12:b5:1c:40: f1:fb:51:55:b6:25:80:ab:24:10:59:2a:a1:da:2c:9f:6c:7b: d9:1c:ae:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFDMC8jco3gdbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ODg4YWE4MTEtMDcyZi00MTVmLWI4ZjAtMzNkM2IxMjE1MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRnDxyBTaeIhvec1PVFhvPO/3eQdEiAp54QU 2dnHQyfVzqjvEMtZCNygVfXD4yjx12FZ+KRPsryD9AbPuo3ch+t429V7sEafQZHN z9L2nOwfhAq1l1HLjFVHzhLubT82cIZr7x0nkISwQCrJzjYW7/cU6p8akUI2oZ/W SB/mgC9eDLLv0zbcR4aikSCY/PiLuwT2sPa/0qX2PzFMxY/zzggH9LCrsJmK0Eyf IaMAxb6peVd0KF+D+IvPJz9XXPQH0Zgvb8OS9WU1nFVKUPRArOHKmQ62+VUJojXn GCt/khdTzDRNWEWscaij8Rrj2tMMNSp8PLJ1JtnQ7KMzz9RpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+rczy30m+JgO79ck10muFlqilTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY4MjRkNTItYmE4ZS0z Y2UzLWI1NWQtM2Q2MjY0YTRlODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkXH4kRjST7TPR/FpTj60npWiCI4aKWc5x0DFQ1dgSE76Mg0hJqOz8N UBXkOFO10vn7DrlRxyTEzlf1Y3CwDx5V7v0RSl+/9vPmmMAJ7dk1kboi8jBS5n+D 2D1DFacaS+CFaBfnHrb7lknsUXhZDy92gp10nERSmAm07ZZE7cYluK3oyq9864q4 5ODNPwifzlS/HSnxsJ3X4tNXdz941fb0ggxo2ULN6BVGz6E/0+Gn6TFJEH+GcVbU KXZBxY9D9OP+GF0kxazgvc50n/VLuXq9kZTRvpyyQUOyt/DDE7B1I2xaj0daErUc QPH7UVW2JYCrJBBZKqHaLJ9se9kcrh4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:39 2025 by rpki-client