$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e65c6993-2f77-38b8-809e-b6549413a212.roa File: e65c6993-2f77-38b8-809e-b6549413a212.roa (raw, json) Hash identifier: R42JIzGWjcccpIH0U0iUeHSdve2S82ITm+7VTrVfDsY= Subject key identifier: 5A:45:33:7B:A6:80:43:43:97:AD:02:51:AA:DB:E4:1C:DC:0D:E1:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584964846E5AB9A624A24A6DC480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e65c6993-2f77-38b8-809e-b6549413a212.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.53.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:6e:5a:b9:a6:24:a2:4a:6d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=d2b5371c-978a-4de2-a77f-5fe1054bf7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:0c:7d:36:ac:09:d0:81:2f:45:7a:11:60: cc:8d:c9:24:94:09:e0:b1:67:3b:1a:c7:c0:c6:0e: 58:c9:3f:48:cc:20:8c:54:4c:d0:6a:48:4d:3a:b5: 99:33:c0:13:85:74:95:40:9d:6c:e4:fb:25:c5:ca: 98:7e:f4:eb:8f:ff:86:6e:ef:df:6d:72:ab:c6:a6: 7b:aa:51:ba:56:e5:a1:07:8a:77:60:94:95:9c:93: 67:cc:32:3d:32:cd:b0:6b:20:2d:61:f5:a2:9a:8d: 17:a4:94:82:65:c3:ff:3d:e8:9e:c3:a7:07:62:b4: b6:56:0b:33:a1:5a:76:d1:c8:eb:49:75:92:06:11: 65:47:f8:96:2e:d2:e0:70:ab:03:f4:12:e0:d9:76: bd:0f:5e:37:c5:bb:c0:18:b7:e7:76:a0:ec:48:f2: 1f:fe:7b:8d:aa:a2:8a:60:b6:63:d1:28:82:6c:3b: 58:14:52:17:3e:ce:3c:37:b0:44:64:3a:ea:c4:b6: 04:6d:d9:6f:f2:97:18:0b:23:0c:56:2f:4a:6a:25: 37:96:54:bd:7d:f1:a3:25:10:91:f9:70:ca:17:84: 44:80:16:4b:c7:84:45:a2:4c:db:f8:76:6a:df:1a: e3:e7:5e:7a:13:06:1e:fe:7e:92:5f:e7:12:73:48: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:45:33:7B:A6:80:43:43:97:AD:02:51:AA:DB:E4:1C:DC:0D:E1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e65c6993-2f77-38b8-809e-b6549413a212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:4e:a0:8f:25:27:c6:91:99:0e:e6:d2:70:48:40:55:4a:4c: b4:5f:d9:89:5b:dc:3e:f2:83:9b:a9:e5:c3:f8:3b:1b:b8:ef: f9:22:b8:65:52:b4:b2:5c:e9:98:cc:e4:e2:9e:6f:3d:b0:5b: b5:1f:02:19:4f:d8:64:28:80:33:c3:8d:03:df:50:4a:44:59: 5a:da:93:da:b9:df:e5:47:a2:f5:e5:21:12:35:33:e9:97:f9: 1e:a0:71:6e:b0:a1:4c:33:e9:26:4e:e9:63:ae:b0:fa:1b:68: f0:43:cc:d7:81:93:c2:48:84:6f:d0:e0:4d:92:0d:37:79:8a: d4:dc:45:2c:77:ea:59:eb:34:96:55:fa:93:87:bf:33:13:da: 6e:49:e7:44:50:06:bf:cb:f2:a4:45:15:01:42:e2:7a:ec:6b: 64:88:0d:2e:e3:60:8d:56:3a:62:63:d1:2f:b7:a5:16:78:a7: 3a:0c:56:5b:ca:e3:cb:1f:26:0e:0d:dd:12:91:bc:9b:1e:5b: f1:55:83:e6:95:3b:0d:50:e1:9a:52:5b:96:21:cd:47:04:59: e3:c4:5f:1d:8b:f5:db:c6:13:d1:cf:b1:32:9e:18:20:91:63: ce:6c:f2:b2:71:43:84:4c:af:c7:7c:de:c9:71:2d:c1:39:9e: 21:b6:35:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhG5auaYkokptxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDJiNTM3MWMtOTc4YS00ZGUyLWE3N2YtNWZlMTA1NGJmN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8kMfTasCdCBL0V6EWDMjckklAngsWc7GsfA xg5YyT9IzCCMVEzQakhNOrWZM8AThXSVQJ1s5PslxcqYfvTrj/+Gbu/fbXKrxqZ7 qlG6VuWhB4p3YJSVnJNnzDI9Ms2wayAtYfWimo0XpJSCZcP/Peiew6cHYrS2Vgsz oVp20cjrSXWSBhFlR/iWLtLgcKsD9BLg2Xa9D143xbvAGLfndqDsSPIf/nuNqqKK YLZj0SiCbDtYFFIXPs48N7BEZDrqxLYEbdlv8pcYCyMMVi9KaiU3llS9ffGjJRCR +XDKF4REgBZLx4RFokzb+HZq3xrj5156EwYe/n6SX+cSc0hcPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpFM3umgENDl60CUarb5BzcDeGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTY1YzY5OTMtMmY3Ny0z OGI4LTgwOWUtYjY1NDk0MTNhMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVOoI8lJ8aRmQ7m0nBIQFVKTLRf2Ylb3D7yg5up5cP4Oxu47/kiuGVS tLJc6ZjM5OKebz2wW7UfAhlP2GQogDPDjQPfUEpEWVrak9q53+VHovXlIRI1M+mX +R6gcW6woUwz6SZO6WOusPobaPBDzNeBk8JIhG/Q4E2SDTd5itTcRSx36lnrNJZV +pOHvzMT2m5J50RQBr/L8qRFFQFC4nrsa2SIDS7jYI1WOmJj0S+3pRZ4pzoMVlvK 48sfJg4N3RKRvJseW/FVg+aVOw1Q4ZpSW5YhzUcEWePEXx2L9dvGE9HPsTKeGCCR Y85s8rJxQ4RMr8d83slxLcE5niG2NXs= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:40 2025 by rpki-client