$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa File: da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa (raw, json) Hash identifier: vG7nqYHsTz7MGSh6F8gWof58ZMl+ZI6TRpjJCueb5ZA= Subject key identifier: 24:93:CA:C4:5D:A3:A6:B0:66:C2:6F:12:07:96:16:B1:4E:24:6D:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964845201939EF5BED758C540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.52.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:52:01:93:9e:f5:be:d7:58:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=0347539b-5519-4979-b0b5-330ec104301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:a8:32:ad:20:d3:81:fb:98:02:14:ec:79: a4:89:d1:32:91:12:31:22:62:08:35:f4:66:ff:12: 19:f0:ad:71:2e:51:17:6c:3c:8b:94:d2:be:f8:b7: b9:1b:ad:60:e8:49:71:d8:c8:e9:85:86:7f:cb:e4: 8b:8a:ba:8f:7e:42:c3:21:92:e2:fb:e6:c7:d0:3e: eb:66:a5:73:5c:2b:51:72:be:e7:eb:4f:71:96:09: 32:cf:4d:2d:c3:7e:be:18:9d:75:7d:4e:77:f4:d1: ac:8a:e5:77:f2:b7:ac:f7:79:46:9c:11:85:41:d8: 21:4a:cb:ae:2a:b2:40:fb:d2:dd:4d:91:c0:ec:b1: d8:e3:e8:7e:7e:4f:24:f4:b1:60:ef:40:76:02:b7: e2:c9:04:e6:0f:f0:90:b4:99:aa:b3:92:e7:0c:eb: 7f:12:8b:4b:3f:a6:98:0c:b7:ff:04:a0:02:38:dc: 51:ee:d7:30:88:11:91:ed:83:eb:6d:f2:d2:15:9f: 26:cc:d6:e6:e7:bc:52:46:8c:69:ff:7c:1a:25:d9: 82:8b:90:80:cf:48:0e:8e:f8:bb:42:21:59:4b:14: 83:8f:c5:00:08:09:d0:cb:df:4e:b2:97:f5:20:72: 6c:35:93:29:2f:00:65:38:c7:c6:ef:d8:84:59:bb: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:CA:C4:5D:A3:A6:B0:66:C2:6F:12:07:96:16:B1:4E:24:6D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:cf:f0:fb:a4:9f:d8:ac:9f:a5:d8:38:97:e4:f9:4c:a6:bb: 81:c7:d9:45:b8:15:de:c8:ec:13:e0:fd:a0:9d:3f:7e:a9:d2: 7f:f1:91:72:06:5b:a6:11:b9:18:2a:44:f4:6c:33:4e:c2:37: 36:23:27:35:79:3e:ba:8a:73:09:ad:2f:e3:a7:96:50:72:52: f7:a3:35:d7:ee:8a:66:76:60:ab:18:e7:45:71:d0:70:17:b4: f1:eb:00:57:07:14:2f:89:8f:c9:8a:e0:82:56:0d:15:7d:26: 7b:d0:9f:a3:fa:36:8a:44:30:96:60:22:8e:03:17:44:21:e7: 00:c9:f4:2d:7a:09:61:78:f0:33:8b:71:3b:70:ec:60:b8:ec: 47:22:b4:f8:f4:ff:36:ef:ff:9c:6b:56:ef:96:bd:d9:74:dc: c1:c1:d2:5c:72:c5:be:57:98:02:16:bc:97:ac:e8:bf:11:74: cd:c5:db:e4:70:b7:90:4e:07:e4:75:17:63:81:c6:d6:9c:ad: 6f:9e:09:02:cb:5d:a6:ea:8c:fb:04:44:fc:76:82:9c:bf:e1: 3a:44:5c:69:57:f8:4f:d5:86:09:98:3e:36:f8:37:2c:39:3b: 96:ad:94:cb:2a:4c:e8:e4:37:67:35:d8:10:ed:9f:2c:70:82: 6d:79:a5:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFIBk571vtdYxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MDM0NzUzOWItNTUxOS00OTc5LWIwYjUtMzMwZWMxMDQzMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7uoMq0g04H7mAIU7HmkidEykRIxImIINfRm /xIZ8K1xLlEXbDyLlNK++Le5G61g6Elx2MjphYZ/y+SLirqPfkLDIZLi++bH0D7r ZqVzXCtRcr7n609xlgkyz00tw36+GJ11fU539NGsiuV38res93lGnBGFQdghSsuu KrJA+9LdTZHA7LHY4+h+fk8k9LFg70B2ArfiyQTmD/CQtJmqs5LnDOt/EotLP6aY DLf/BKACONxR7tcwiBGR7YPrbfLSFZ8mzNbm57xSRoxp/3waJdmCi5CAz0gOjvi7 QiFZSxSDj8UACAnQy99Ospf1IHJsNZMpLwBlOMfG79iEWbsuXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSTysRdo6awZsJvEgeWFrFOJG2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4Y2QzNWUtNDE4NC0z ZGY0LWE3Y2MtMDI3ZmEzNDk3YjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLP8Pukn9isn6XYOJfk+Uymu4HH2UW4Fd7I7BPg/aCdP36p0n/xkXIG W6YRuRgqRPRsM07CNzYjJzV5PrqKcwmtL+OnllByUvejNdfuimZ2YKsY50Vx0HAX tPHrAFcHFC+Jj8mK4IJWDRV9JnvQn6P6NopEMJZgIo4DF0Qh5wDJ9C16CWF48DOL cTtw7GC47EcitPj0/zbv/5xrVu+Wvdl03MHB0lxyxb5XmAIWvJes6L8RdM3F2+Rw t5BOB+R1F2OBxtacrW+eCQLLXabqjPsERPx2gpy/4TpEXGlX+E/VhgmYPjb4Nyw5 O5atlMsqTOjkN2c12BDtnyxwgm15pXg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:26 2025 by rpki-client