$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c80a8282-c702-3040-af77-c80ce0ba0179.roa File: c80a8282-c702-3040-af77-c80ce0ba0179.roa (raw, json) Hash identifier: 4XmgZ9s4/bT8wYeNwNprRIVgrDZeFVMsYbzkCzkSifc= Subject key identifier: D7:B3:5D:B6:32:D8:1A:2A:DA:45:25:FE:D9:D7:01:EA:F6:05:C1:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964845361666EC485B9A60C20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c80a8282-c702-3040-af77-c80ce0ba0179.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.52.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:53:61:66:6e:c4:85:b9:a6:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=130ae15e-4882-4b75-985c-25e630bcf1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:f7:61:59:1c:13:e0:af:d8:73:b0:d6:02: 8d:29:79:30:0c:e5:8d:7a:2c:db:04:ee:00:05:9e: 2e:12:9c:b3:9f:c8:dc:1f:cb:21:08:3e:24:88:45: a9:bd:ec:57:2d:56:03:94:a5:3f:a6:f5:d2:fe:cc: 26:31:5f:3a:b2:ea:04:9a:a6:14:22:63:7a:88:ff: 35:87:18:67:d0:1d:c3:70:a0:a4:44:0f:79:ff:ee: 2b:0a:b6:95:3e:2b:bb:92:8c:f5:ff:0b:66:c4:96: 3d:f8:7e:06:ee:10:20:6b:a2:7c:f9:42:2e:58:e6: 94:49:f9:37:b7:40:86:fa:bd:49:bf:af:10:aa:79: 40:b1:1a:ed:34:25:66:1b:36:72:a2:08:5b:6f:87: e8:29:72:79:3c:4e:a4:ec:9e:bb:3d:d3:76:22:0d: 4d:a1:48:84:ea:df:91:3c:11:c9:65:0b:a9:9b:03: 7a:99:45:a6:1f:d5:f9:f7:ef:a1:d1:da:dc:f4:81: 0a:39:72:cb:3c:fb:51:2f:23:eb:b5:7f:7c:b6:ac: fe:31:5b:4d:2c:f5:31:69:e8:58:de:c9:67:8a:c6: 9b:b5:c8:9f:b5:48:76:0c:8a:12:81:99:c7:bd:6d: d0:e2:49:08:8f:41:1c:f4:e9:49:1d:b0:f1:61:5c: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B3:5D:B6:32:D8:1A:2A:DA:45:25:FE:D9:D7:01:EA:F6:05:C1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c80a8282-c702-3040-af77-c80ce0ba0179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:42:86:84:a8:43:ca:95:52:f1:c3:60:4b:0e:6b:a9:a5:b5: 42:08:9a:53:ed:ab:16:45:63:b9:11:f4:3d:d0:ee:ac:b6:db: a3:e1:4e:d0:d3:c0:59:ef:85:52:9e:6f:0a:42:3f:5d:1d:85: d4:7e:11:7a:ad:ab:b4:89:27:cf:1d:01:86:5b:69:1c:1c:0a: 95:5e:11:c2:57:b2:10:23:38:3c:c4:fa:28:97:9b:6d:7b:e9: f4:d9:67:81:20:ae:f1:71:61:6e:99:70:57:ea:f7:09:e5:12: 53:38:eb:d6:b9:e9:5a:49:78:92:14:54:81:01:5a:c9:ba:02: 29:e7:eb:7e:dc:54:93:ee:e2:ec:94:95:ec:08:cb:47:37:05: 3c:a3:9f:d3:3b:d2:d8:6e:b4:bf:6b:71:27:f9:87:d3:03:f2: a9:c5:09:8e:57:44:1d:31:93:33:e6:84:4f:41:e8:0e:cd:4d: fc:de:45:80:3c:ce:a6:9d:c3:9c:67:78:34:f1:27:b9:f3:ba: 78:73:29:3b:72:60:d1:38:25:53:09:64:62:74:f8:29:12:76: 1f:ad:02:29:a7:14:86:c4:85:54:ff:82:b4:2e:bf:c1:98:fb: a0:b6:01:ec:db:5e:a0:c8:3e:08:dd:6f:8f:34:86:26:ca:09: 8c:df:0f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFNhZm7EhbmmDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MTMwYWUxNWUtNDg4Mi00Yjc1LTk4NWMtMjVlNjMwYmNmMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgT3YVkcE+Cv2HOw1gKNKXkwDOWNeizbBO4A BZ4uEpyzn8jcH8shCD4kiEWpvexXLVYDlKU/pvXS/swmMV86suoEmqYUImN6iP81 hxhn0B3DcKCkRA95/+4rCraVPiu7koz1/wtmxJY9+H4G7hAga6J8+UIuWOaUSfk3 t0CG+r1Jv68QqnlAsRrtNCVmGzZyoghbb4foKXJ5PE6k7J67PdN2Ig1NoUiE6t+R PBHJZQupmwN6mUWmH9X59++h0drc9IEKOXLLPPtRLyPrtX98tqz+MVtNLPUxaehY 3slnisabtciftUh2DIoSgZnHvW3Q4kkIj0Ec9OlJHbDxYVw0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNezXbYy2Boq2kUl/tnXAer2BcHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgwYTgyODItYzcwMi0z MDQwLWFmNzctYzgwY2UwYmEwMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBChoSoQ8qVUvHDYEsOa6mltUIImlPtqxZFY7kR9D3Q7qy226PhTtDT wFnvhVKebwpCP10dhdR+EXqtq7SJJ88dAYZbaRwcCpVeEcJXshAjODzE+iiXm217 6fTZZ4EgrvFxYW6ZcFfq9wnlElM469a56VpJeJIUVIEBWsm6Ainn637cVJPu4uyU lewIy0c3BTyjn9M70thutL9rcSf5h9MD8qnFCY5XRB0xkzPmhE9B6A7NTfzeRYA8 zqadw5xneDTxJ7nzunhzKTtyYNE4JVMJZGJ0+CkSdh+tAimnFIbEhVT/grQuv8GY +6C2AezbXqDIPgjdb480hibKCYzfD9c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:06 2025 by rpki-client