$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa File: 903197c9-cdb7-354b-88c0-233ae6bec329.roa (raw, json) Hash identifier: 2Jaa8ooTlFt267BHy+C8xmBhMy37ZxGaaq3AlIR3vrY= Subject key identifier: 4C:86:E0:79:6A:4F:E0:2B:B7:EE:08:08:41:C9:BC:94:97:2F:4D:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964846C60EEA3AFC27F069980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.52.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6c:60:ee:a3:af:c2:7f:06:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=b0139922-35fd-4dcc-a5bf-d2b2cc3a828b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:c5:25:bf:b5:70:27:c4:a7:8e:c7:e0:46: 8a:6b:d2:de:69:85:fb:38:90:22:17:9b:21:0a:28: ec:c2:12:18:77:3a:52:49:ab:66:85:cd:00:87:ac: 96:09:c2:72:82:ca:ba:99:c3:90:62:d7:af:50:34: 7e:b6:6c:e8:de:9b:0d:21:97:56:e1:d8:3a:00:d9: a0:e0:1a:42:63:31:b9:f8:25:5c:07:b3:d3:2a:4c: 2d:f8:15:55:d7:a1:0a:08:3a:1f:dd:aa:56:84:a4: 38:6e:b9:25:ec:13:49:19:01:9a:73:98:b1:1b:3e: d9:16:31:3d:42:28:2f:c7:16:f3:ab:e4:f2:d6:50: f9:43:0f:62:4e:e3:6b:5c:02:56:bd:3e:b9:9f:27: ef:a4:37:1a:42:67:db:35:de:ea:62:0f:c9:8b:89: 76:dd:de:db:7b:28:7d:e1:60:64:ec:35:ce:04:14: 31:33:7a:8e:59:76:84:21:17:8d:57:bd:62:24:45: 42:be:2e:90:97:a5:94:d6:a9:58:f1:7e:3c:00:e9: 1d:ef:9f:cb:a2:fc:45:4b:6e:a2:6a:27:d7:21:85: af:6d:14:30:0b:86:d3:b0:0b:56:43:ff:7d:67:20: 5a:99:de:ee:a9:f7:e7:b0:ac:67:18:f3:23:bf:76: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:E0:79:6A:4F:E0:2B:B7:EE:08:08:41:C9:BC:94:97:2F:4D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f1:7a:fd:25:14:9b:11:57:72:5e:40:5a:6b:80:1a:f0:54: 3b:5a:54:5c:7f:90:b9:8c:35:0d:82:58:cb:ac:7b:37:2f:9c: 2e:da:81:0f:ec:51:23:aa:41:11:42:bb:0b:bf:01:5b:2d:c8: 58:d8:0a:24:77:23:8f:5b:63:68:79:08:91:f9:e1:37:4b:69: 51:80:bb:03:7b:46:db:7d:88:cf:4c:23:27:aa:bc:29:67:7b: fb:b7:9f:e9:f3:4d:01:b4:02:9a:8a:67:2f:c4:38:04:49:1e: ba:26:82:89:35:dc:26:bc:c3:f0:00:42:d3:a3:47:ba:8b:73: 5d:a5:d8:98:e7:4e:aa:58:17:79:08:b6:f2:7e:7c:06:8c:71: de:d7:bc:7e:32:6a:01:0d:3a:e2:7d:25:5d:c1:31:23:2e:6a: da:be:dd:48:3f:67:72:d2:45:23:7e:e6:29:84:ca:31:fd:31: 0f:fc:45:d7:70:c4:46:25:1b:3a:94:f2:ee:ba:be:7a:c1:68: 3d:e8:54:ce:d3:ca:a5:73:04:e4:45:22:ec:f5:52:d9:86:ed: a2:93:39:c8:5e:c4:27:1a:d8:89:9a:96:20:42:b9:29:e7:7e: 9b:6b:27:9a:2d:73:42:83:2f:2a:a4:0c:50:ca:a5:79:3d:ec: 9d:c6:6d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhGxg7qOvwn8GmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk YjAxMzk5MjItMzVmZC00ZGNjLWE1YmYtZDJiMmNjM2E4MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthvFJb+1cCfEp47H4EaKa9LeaYX7OJAiF5sh CijswhIYdzpSSatmhc0Ah6yWCcJygsq6mcOQYtevUDR+tmzo3psNIZdW4dg6ANmg 4BpCYzG5+CVcB7PTKkwt+BVV16EKCDof3apWhKQ4brkl7BNJGQGac5ixGz7ZFjE9 Qigvxxbzq+Ty1lD5Qw9iTuNrXAJWvT65nyfvpDcaQmfbNd7qYg/Ji4l23d7beyh9 4WBk7DXOBBQxM3qOWXaEIReNV71iJEVCvi6Ql6WU1qlY8X48AOkd75/LovxFS26i aifXIYWvbRQwC4bTsAtWQ/99ZyBamd7uqffnsKxnGPMjv3Z4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyG4HlqT+Art+4ICEHJvJSXL00oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzMTk3YzktY2RiNy0z NTRiLTg4YzAtMjMzYWU2YmVjMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbxev0lFJsRV3JeQFprgBrwVDtaVFx/kLmMNQ2CWMusezcvnC7agQ/s USOqQRFCuwu/AVstyFjYCiR3I49bY2h5CJH54TdLaVGAuwN7Rtt9iM9MIyeqvCln e/u3n+nzTQG0ApqKZy/EOARJHromgok13Ca8w/AAQtOjR7qLc12l2JjnTqpYF3kI tvJ+fAaMcd7XvH4yagENOuJ9JV3BMSMuatq+3Ug/Z3LSRSN+5imEyjH9MQ/8Rddw xEYlGzqU8u66vnrBaD3oVM7TyqVzBORFIuz1UtmG7aKTOchexCca2ImaliBCuSnn fptrJ5otc0KDLyqkDFDKpXk97J3Gbds= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:46 2025 by rpki-client