$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53a32b07-dd1f-3922-b599-a66858e99ce1.roa File: 53a32b07-dd1f-3922-b599-a66858e99ce1.roa (raw, json) Hash identifier: bgmT2ZfeaGo87IlCdkFo181P7nI1Q+ffi/ZHC9kp7J8= Subject key identifier: 07:14:A4:36:94:F6:12:81:7F:CA:50:A7:9C:91:CF:3F:76:8A:F9:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B4C0D41EF88254BF77D34B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53a32b07-dd1f-3922-b599-a66858e99ce1.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 16625 IP address blocks: 23.32.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d4:1e:f8:82:54:bf:77:d3:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=b591854e-c205-49b2-8238-cfcbc9a069c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:76:16:d7:68:40:e2:7d:1d:f9:4e:f9:b0: 75:75:e8:aa:0a:d0:4e:1c:db:94:a1:32:92:11:e2: fe:ba:f4:37:35:f6:3d:65:47:68:d2:ef:0c:f2:08: db:ff:d2:28:f1:ca:0f:dd:a2:f3:8e:22:7b:d5:eb: 14:01:91:2e:a9:29:2d:52:73:db:83:01:d6:b7:72: fa:68:e4:df:80:57:96:ec:e7:ba:4e:ed:fe:bc:f5: f0:b7:9a:28:ea:38:27:f9:4e:c7:0c:91:e3:03:f8: e2:52:5e:2f:50:ce:38:b0:4e:24:61:65:62:70:04: 97:06:c7:b3:6f:71:cb:73:5c:c9:84:cc:48:30:47: dc:c1:8e:35:db:0a:e3:ef:2e:f8:20:99:92:8a:b4: 01:5f:e8:76:18:d5:f9:2d:3e:17:f9:3b:24:18:de: f8:59:45:53:74:c2:4a:37:d6:da:6d:7e:15:8b:36: f3:87:f8:ef:5a:41:a1:c2:ea:54:e8:6b:e3:00:93: 53:3e:5c:fe:75:43:d0:60:0a:22:f6:0a:5c:d8:08: 5f:8d:1c:0c:8b:7c:00:48:9d:9a:2a:6b:58:73:4a: b1:da:3e:10:b9:6c:23:0d:b9:15:00:8e:7d:03:b2: ff:18:37:71:c6:42:df:1c:1e:64:a8:26:a9:36:42: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:14:A4:36:94:F6:12:81:7F:CA:50:A7:9C:91:CF:3F:76:8A:F9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53a32b07-dd1f-3922-b599-a66858e99ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f1:08:89:4c:3d:1a:cc:ea:3a:3c:53:dd:23:27:4f:df:c5: ab:01:33:9a:85:8b:4b:fb:31:04:fa:27:a2:3a:73:8d:ca:cb: 08:58:d0:0a:0f:bf:e0:45:e3:3d:10:ad:73:c4:2c:34:d8:aa: 32:1a:ec:aa:c4:90:9c:8e:3b:48:54:fe:0f:85:02:43:3b:33: 2d:1c:b7:13:bc:20:99:50:bb:aa:53:9a:a8:3c:3e:f0:21:81: 88:4a:2f:36:46:c1:0f:06:ac:f8:79:35:3d:dd:4f:09:da:8b: 5f:6e:01:49:3a:d3:48:9a:a8:be:47:fb:0a:d2:af:49:eb:c8: 9e:fb:e6:b6:27:90:24:0d:34:2f:74:79:9f:d8:8c:51:19:0f: d7:79:d3:14:f9:0c:73:dd:a5:90:fa:3c:42:95:5d:91:87:d0: 96:a8:ac:49:34:a3:7a:8e:51:15:a1:13:a5:b4:5c:c1:3d:c9: 72:0d:3e:9b:ac:d4:bc:db:08:89:84:bd:26:f2:ee:a7:d3:16: 1c:2b:5b:75:03:37:61:35:6d:e7:3a:8f:20:7d:d7:a9:ca:e8: ba:4f:f1:9e:50:8e:a2:98:95:18:a7:c4:c3:03:da:54:bf:5d: 78:94:ab:72:73:7a:c1:8f:e7:56:a3:99:95:ef:58:19:85:b1: 77:c4:10:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNQe+IJUv3fTSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YjU5MTg1NGUtYzIwNS00OWIyLTgyMzgtY2ZjYmM5YTA2OWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ52FtdoQOJ9HflO+bB1deiqCtBOHNuUoTKS EeL+uvQ3NfY9ZUdo0u8M8gjb/9Io8coP3aLzjiJ71esUAZEuqSktUnPbgwHWt3L6 aOTfgFeW7Oe6Tu3+vPXwt5oo6jgn+U7HDJHjA/jiUl4vUM44sE4kYWVicASXBsez b3HLc1zJhMxIMEfcwY412wrj7y74IJmSirQBX+h2GNX5LT4X+TskGN74WUVTdMJK N9babX4Vizbzh/jvWkGhwupU6GvjAJNTPlz+dUPQYAoi9gpc2AhfjRwMi3wASJ2a KmtYc0qx2j4QuWwjDbkVAI59A7L/GDdxxkLfHB5kqCapNkI5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcUpDaU9hKBf8pQp5yRzz92ivnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNhMzJiMDctZGQxZi0z OTIyLWI1OTktYTY2ODU4ZTk5Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3xCIlMPRrM6jo8U90jJ0/fxasBM5qFi0v7MQT6J6I6c43KywhY0AoP v+BF4z0QrXPELDTYqjIa7KrEkJyOO0hU/g+FAkM7My0ctxO8IJlQu6pTmqg8PvAh gYhKLzZGwQ8GrPh5NT3dTwnai19uAUk600iaqL5H+wrSr0nryJ775rYnkCQNNC90 eZ/YjFEZD9d50xT5DHPdpZD6PEKVXZGH0JaorEk0o3qOURWhE6W0XME9yXINPpus 1LzbCImEvSby7qfTFhwrW3UDN2E1bec6jyB916nK6LpP8Z5QjqKYlRinxMMD2lS/ XXiUq3JzesGP51ajmZXvWBmFsXfEEKA= -----END CERTIFICATE-----Generated at Tue Apr 8 20:54:04 2025 by rpki-client