$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f98869a-afa1-3dca-b605-feee01eea043.roa File: 2f98869a-afa1-3dca-b605-feee01eea043.roa (raw, json) Hash identifier: qvk7YFfTkmWAmtzMcFPcbJGFBV6qQekt+5VDRVbIT+E= Subject key identifier: 66:4D:A1:DE:DB:43:4F:48:A0:1D:67:99:F6:AF:C0:D8:AB:35:04:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964845106946BB8301FB5C4F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f98869a-afa1-3dca-b605-feee01eea043.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.52.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:51:06:94:6b:b8:30:1f:b5:c4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=80156c95-731f-4bdd-8da6-4ff0f214579f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:66:d9:ba:1a:20:a8:b6:5d:d8:b7:64:49: 33:db:73:de:df:59:04:cb:5d:6a:24:11:6b:8b:25: 2c:df:46:e0:cc:87:fd:b9:3f:89:84:b9:2d:9c:12: a3:6c:e0:c7:ca:b8:a4:e4:ce:ee:a6:10:2b:3d:04: d0:b8:04:fb:43:bc:66:f3:db:99:2a:c2:63:73:7f: 2d:84:00:b7:ff:27:c6:45:4c:aa:56:5e:7d:d7:42: 2d:a0:d1:08:73:2a:dc:5a:ed:3c:4f:28:cf:eb:b1: 87:89:9e:d4:cf:75:4e:41:1f:3f:20:95:fd:c0:ac: b0:72:80:ef:ad:48:32:03:7e:e5:98:e2:7b:62:e3: 29:7c:2b:5f:79:8f:58:18:ad:30:e4:4d:a3:1f:ec: 97:d5:1c:7d:6f:ea:50:28:d7:16:6c:93:83:fe:64: fd:ca:ab:1d:45:c0:a9:4c:07:8a:50:57:c3:77:ad: d0:80:26:d3:c9:df:1f:9b:56:c5:5f:c2:de:b6:1b: 02:cb:86:36:51:2c:fb:49:c0:a2:06:83:8a:ac:38: af:13:72:77:0f:2e:b9:f2:61:30:84:6b:36:f5:38: 5f:5a:76:f1:da:05:1f:fc:18:3d:a5:e8:60:4a:89: 5c:b1:78:24:bf:0a:8d:38:dc:91:b4:36:08:e0:62: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4D:A1:DE:DB:43:4F:48:A0:1D:67:99:F6:AF:C0:D8:AB:35:04:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f98869a-afa1-3dca-b605-feee01eea043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d3:4c:a7:e6:65:6b:20:a3:b2:d8:37:dd:1a:0d:26:f3:3c: b6:db:93:d5:c9:f0:6b:a9:41:65:32:56:17:9b:25:3e:bb:35: 1d:0a:9c:30:21:d8:12:71:ca:e8:6b:90:3e:c3:15:61:dc:dd: f3:85:af:1d:92:52:47:69:dd:05:c9:d9:af:10:1d:77:e9:bd: bf:d4:0f:60:ee:08:bd:07:ef:12:e7:49:80:8e:c0:57:ed:5e: 56:2d:d0:0e:a9:32:df:99:8b:7c:b2:12:f7:7b:0a:6a:42:f9: 08:a1:60:b9:62:80:92:9d:e0:ed:5c:c5:e8:19:68:cd:dd:56: 32:16:a8:f2:98:c6:32:b9:e9:57:45:12:ee:e0:ed:ff:f8:48: cf:1a:54:8a:cd:99:19:fc:03:ed:39:18:9c:d4:50:52:05:58: 0b:e7:69:ab:d8:02:1e:e5:7e:84:43:c6:5a:ab:d5:e0:dd:e5: 64:53:e3:2e:2e:b1:40:cb:59:fe:ba:59:ae:ff:49:cd:1c:c3: 3d:7c:03:ea:1f:6f:e0:5c:72:7c:f1:a6:8b:93:37:94:a5:e5: e4:f5:49:e6:ab:7c:3d:31:28:76:c1:90:09:e4:24:5d:a1:d6: c5:25:f1:cf:a0:7c:65:d9:e8:9e:ee:25:e4:37:01:3b:c2:ff: da:5d:7f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFEGlGu4MB+1xPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ODAxNTZjOTUtNzMxZi00YmRkLThkYTYtNGZmMGYyMTQ1NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSBm2boaIKi2Xdi3ZEkz23Pe31kEy11qJBFr iyUs30bgzIf9uT+JhLktnBKjbODHyrik5M7uphArPQTQuAT7Q7xm89uZKsJjc38t hAC3/yfGRUyqVl5910ItoNEIcyrcWu08TyjP67GHiZ7Uz3VOQR8/IJX9wKywcoDv rUgyA37lmOJ7YuMpfCtfeY9YGK0w5E2jH+yX1Rx9b+pQKNcWbJOD/mT9yqsdRcCp TAeKUFfDd63QgCbTyd8fm1bFX8LethsCy4Y2USz7ScCiBoOKrDivE3J3Dy658mEw hGs29ThfWnbx2gUf/Bg9pehgSolcsXgkvwqNONyRtDYI4GICWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZNod7bQ09IoB1nmfavwNirNQS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY5ODg2OWEtYWZhMS0z ZGNhLWI2MDUtZmVlZTAxZWVhMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrTTKfmZWsgo7LYN90aDSbzPLbbk9XJ8GupQWUyVhebJT67NR0KnDAh 2BJxyuhrkD7DFWHc3fOFrx2SUkdp3QXJ2a8QHXfpvb/UD2DuCL0H7xLnSYCOwFft XlYt0A6pMt+Zi3yyEvd7CmpC+QihYLligJKd4O1cxegZaM3dVjIWqPKYxjK56VdF Eu7g7f/4SM8aVIrNmRn8A+05GJzUUFIFWAvnaavYAh7lfoRDxlqr1eDd5WRT4y4u sUDLWf66Wa7/Sc0cwz18A+ofb+BccnzxpouTN5Sl5eT1SearfD0xKHbBkAnkJF2h 1sUl8c+gfGXZ6J7uJeQ3ATvC/9pdf3c= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:41 2025 by rpki-client