$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b5c7ed0-f378-330d-831a-5912baf060c7.roa File: 7b5c7ed0-f378-330d-831a-5912baf060c7.roa (raw, json) Hash identifier: x3SVZRMsarH500Cybbtjy5IdGbgOG1+sPncO/TEDyOU= Subject key identifier: BA:C2:EB:82:FA:88:F5:75:E6:A2:29:59:46:A2:AC:4C:DC:5D:5F:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849403980692DAF557A9EC0D4E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b5c7ed0-f378-330d-831a-5912baf060c7.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 20940 IP address blocks: 23.55.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:80:69:2d:af:55:7a:9e:c0:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=5e4ed69a-6bb0-46d8-b494-adac43a09334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:42:0a:84:10:0e:62:e5:15:95:66:04:1a: 44:10:6f:2f:b7:32:10:fa:e4:d4:70:50:56:9c:59: 58:1b:c9:3d:db:72:a6:b9:3c:1f:8c:26:71:88:db: e6:76:5a:79:e0:04:7e:da:19:9e:a0:a6:fb:f2:e6: 1b:d3:f1:53:53:1d:c9:02:9b:af:6f:1c:ed:73:ec: 39:54:0f:b0:2b:82:57:d3:4d:25:ee:03:fd:2d:9b: 5a:85:1d:6e:f1:0e:2f:98:9b:62:c3:65:03:a7:f3: aa:a9:b7:14:4b:1f:d0:f5:f7:1f:24:54:1d:20:89: 43:d6:62:b6:75:d1:7c:c9:95:c9:d3:d3:a0:bf:1d: d3:33:74:0b:3e:3d:38:2f:62:e3:54:8f:24:29:d6: c3:39:fe:18:78:f3:da:6a:dc:cc:b4:c9:64:01:f4: ed:b9:59:44:5a:e3:3f:af:e4:24:13:13:d9:27:ef: ab:af:c4:cf:cb:39:2b:63:9d:3b:d2:46:ad:6d:21: 84:75:3a:da:51:e1:a1:1c:c2:66:47:9c:5b:a2:71: 0b:a0:d1:5f:2d:41:0d:59:32:02:4c:fa:72:95:cb: 3d:d5:ae:4b:7c:a0:2f:aa:75:b3:9a:ab:ac:de:c7: 1a:16:4a:b7:25:be:0c:80:11:cb:68:3a:46:91:fd: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C2:EB:82:FA:88:F5:75:E6:A2:29:59:46:A2:AC:4C:DC:5D:5F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b5c7ed0-f378-330d-831a-5912baf060c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:95:42:a7:00:41:6a:15:d1:d4:c3:86:a2:f0:d5:0e:af:51: 67:8d:c9:8d:4b:6c:a3:dd:b8:93:bd:0f:f4:b6:12:34:4c:07: b2:ea:b4:77:37:06:32:58:0f:da:f8:a9:9d:0e:a4:2c:61:68: c3:db:4e:cf:6c:76:c2:7d:3b:aa:5b:b3:2c:ef:7b:1c:f2:67: 78:76:10:76:37:8a:a4:a3:50:a4:5a:4f:d6:8d:a1:2a:1e:49: 24:7f:52:5c:d2:23:98:d5:ff:0d:18:35:aa:d0:97:7b:0d:93: 61:33:ef:0e:ca:fd:5a:b4:d1:19:e4:07:e0:63:02:81:da:8d: 31:2c:13:1b:96:6a:5e:93:ce:84:1f:64:b1:a8:0d:a5:c1:af: 75:41:e1:02:22:1f:73:c8:86:bf:af:2e:4c:12:ae:a9:ee:32: 3a:6a:f8:72:73:1c:0e:a4:99:0a:81:21:84:cb:63:b1:62:82: c7:bf:e9:17:9a:ff:a1:ac:8a:e8:86:fb:84:f7:d8:1c:b7:e2: bf:db:55:e6:f9:3e:ac:d9:52:77:7a:fe:da:3e:0e:b3:90:09: 5a:30:20:5f:16:1a:56:12:89:5f:7e:60:8f:a6:50:aa:2f:16: 0e:b0:31:11:8a:db:2e:90:f6:a9:83:b0:b2:64:24:b2:88:14: ef:c7:fa:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOYBpLa9Vep7A1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NWU0ZWQ2OWEtNmJiMC00NmQ4LWI0OTQtYWRhYzQzYTA5MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwttCCoQQDmLlFZVmBBpEEG8vtzIQ+uTUcFBW nFlYG8k923KmuTwfjCZxiNvmdlp54AR+2hmeoKb78uYb0/FTUx3JApuvbxztc+w5 VA+wK4JX000l7gP9LZtahR1u8Q4vmJtiw2UDp/OqqbcUSx/Q9fcfJFQdIIlD1mK2 ddF8yZXJ09Ogvx3TM3QLPj04L2LjVI8kKdbDOf4YePPaatzMtMlkAfTtuVlEWuM/ r+QkExPZJ++rr8TPyzkrY5070katbSGEdTraUeGhHMJmR5xbonELoNFfLUENWTIC TPpylcs91a5LfKAvqnWzmqus3scaFkq3Jb4MgBHLaDpGkf0I7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrC64L6iPV15qIpWUairEzcXV8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2I1YzdlZDAtZjM3OC0z MzBkLTgzMWEtNTkxMmJhZjA2MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGVQqcAQWoV0dTDhqLw1Q6vUWeNyY1LbKPduJO9D/S2EjRMB7LqtHc3 BjJYD9r4qZ0OpCxhaMPbTs9sdsJ9O6pbsyzvexzyZ3h2EHY3iqSjUKRaT9aNoSoe SSR/UlzSI5jV/w0YNarQl3sNk2Ez7w7K/Vq00RnkB+BjAoHajTEsExuWal6TzoQf ZLGoDaXBr3VB4QIiH3PIhr+vLkwSrqnuMjpq+HJzHA6kmQqBIYTLY7Figse/6Rea /6GsiuiG+4T32By34r/bVeb5PqzZUnd6/to+DrOQCVowIF8WGlYSiV9+YI+mUKov Fg6wMRGK2y6Q9qmDsLJkJLKIFO/H+hs= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:19 2025 by rpki-client