$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52c52d61-e04b-37b0-8b68-338e5a74d299.roa File: 52c52d61-e04b-37b0-8b68-338e5a74d299.roa (raw, json) Hash identifier: vj8k/5TR3F8zJXSiiJ2O1EH8qdNoWEWhZpBeFxyN5Vg= Subject key identifier: F7:C8:E4:DA:59:5E:4F:30:A4:65:CB:52:2F:C1:F5:C5:06:13:6F:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848BA5644F47C4C3F75544F9A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52c52d61-e04b-37b0-8b68-338e5a74d299.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.208.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:44:f4:7c:4c:3f:75:54:4f:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=1202df9c-ceaa-4805-bef9-260bcbd28457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:7c:08:cb:06:ee:13:6d:82:8a:d7:41:fe: 44:40:5b:94:2b:87:78:71:95:fd:25:06:3c:04:53: 2a:62:59:73:75:d4:c8:8b:e8:a6:b8:13:33:4c:71: 90:24:02:d7:a8:3f:1f:73:1e:da:db:19:76:e5:10: ad:92:20:86:8f:f5:04:c8:8d:39:14:cc:b7:eb:e9: 2e:3c:57:97:86:89:a8:7a:b4:07:8c:20:36:c6:08: 3e:9f:93:c7:0a:24:e2:7f:91:40:0b:d8:a6:e9:26: cf:48:e6:18:29:cf:bb:62:4d:00:91:99:4d:91:22: 75:f9:da:87:27:a2:b3:4f:14:d8:e9:c6:e7:26:33: 9c:2f:d8:69:e6:e8:a1:7c:cf:9b:53:ac:f7:a8:81: 67:a8:d6:8d:b8:a6:6d:af:53:31:e0:0a:b6:12:95: b3:63:55:1d:be:c2:a4:39:d1:4b:a2:1b:d8:5d:ff: 4f:6d:15:62:52:f3:06:51:f1:ff:36:f3:bc:57:8b: f7:d6:c4:f2:a3:92:21:cd:02:7a:43:9c:ee:ea:58: c3:c9:b0:ce:c7:7f:ca:df:1a:6c:fa:00:cf:4e:11: 9e:d7:3a:6b:d6:c1:02:8f:82:94:a5:2b:b2:81:fc: 8b:16:f7:b2:ec:d1:de:ba:22:9d:12:03:88:4c:98: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C8:E4:DA:59:5E:4F:30:A4:65:CB:52:2F:C1:F5:C5:06:13:6F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52c52d61-e04b-37b0-8b68-338e5a74d299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8a:78:cf:53:11:80:33:0c:45:42:9e:52:07:5e:f8:ee:17: 97:df:72:79:44:54:44:1c:46:cc:f4:b6:46:69:4a:4b:32:47: 35:c0:df:d7:65:6b:9b:5b:5e:57:e8:f6:6f:c4:23:3e:37:05: 07:5e:5f:c7:a5:f2:91:78:95:51:fb:c8:b9:bc:8a:45:b2:f1: a7:93:c1:74:de:88:53:ba:29:09:e6:42:91:8f:7f:47:22:55: fb:7a:cd:11:24:31:56:16:f3:46:b6:4b:79:b6:c8:b7:68:91: 5e:53:6b:1b:09:d1:9f:ec:fe:85:fd:cf:93:fb:88:04:60:3a: bb:a5:94:f2:54:9f:a8:d8:5e:1a:b1:af:a9:4d:68:33:a7:c4: 90:a4:34:11:c7:47:28:68:28:29:46:81:f9:4d:e8:ee:2a:18: 6a:f1:64:84:90:3b:ae:fd:0b:02:22:55:a9:ee:c5:b2:fb:ca: ca:09:42:4d:ef:83:a6:35:b0:11:43:e5:05:81:b6:a0:56:1a: 96:60:a5:f4:1c:9e:7b:d9:9d:e3:b0:ed:05:57:81:30:73:ab: f0:d8:68:f2:b5:0d:4b:63:6f:71:cb:16:1e:90:8c:e2:a0:a8: 49:09:a0:ea:44:89:cb:d0:c6:d7:24:d3:42:25:a0:7e:b1:d7: a1:42:ba:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkT0fEw/dVRPmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk MTIwMmRmOWMtY2VhYS00ODA1LWJlZjktMjYwYmNiZDI4NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRt8CMsG7hNtgorXQf5EQFuUK4d4cZX9JQY8 BFMqYllzddTIi+imuBMzTHGQJALXqD8fcx7a2xl25RCtkiCGj/UEyI05FMy36+ku PFeXhomoerQHjCA2xgg+n5PHCiTif5FAC9im6SbPSOYYKc+7Yk0AkZlNkSJ1+dqH J6KzTxTY6cbnJjOcL9hp5uihfM+bU6z3qIFnqNaNuKZtr1Mx4Aq2EpWzY1UdvsKk OdFLohvYXf9PbRViUvMGUfH/NvO8V4v31sTyo5IhzQJ6Q5zu6ljDybDOx3/K3xps +gDPThGe1zpr1sECj4KUpSuygfyLFvey7NHeuiKdEgOITJj9awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfI5NpZXk8wpGXLUi/B9cUGE2+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTJjNTJkNjEtZTA0Yi0z N2IwLThiNjgtMzM4ZTVhNzRkMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9BiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCKeM9TEYAzDEVCnlIHXvjuF5ffcnlEVEQcRsz0tkZpSksyRzXA39dl a5tbXlfo9m/EIz43BQdeX8el8pF4lVH7yLm8ikWy8aeTwXTeiFO6KQnmQpGPf0ci Vft6zREkMVYW80a2S3m2yLdokV5TaxsJ0Z/s/oX9z5P7iARgOrullPJUn6jYXhqx r6lNaDOnxJCkNBHHRyhoKClGgflN6O4qGGrxZISQO679CwIiVanuxbL7ysoJQk3v g6Y1sBFD5QWBtqBWGpZgpfQcnnvZneOw7QVXgTBzq/DYaPK1DUtjb3HLFh6QjOKg qEkJoOpEicvQxtck00IloH6x16FCusU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:09 2025 by rpki-client