$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3604c7a4-0186-3386-bb22-0f23dc58f476.roa File: 3604c7a4-0186-3386-bb22-0f23dc58f476.roa (raw, json) Hash identifier: y2xMVV8ySGg+KIamkAj5uKHKpRwqkbM65d9QrbyU04s= Subject key identifier: 48:06:25:85:76:63:9D:10:36:06:7F:1B:88:3A:0D:97:AA:46:45:D8 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F695AAEC687F8043A6200 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3604c7a4-0186-3386-bb22-0f23dc58f476.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 19157 IP address blocks: 23.86.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:69:5a:ae:c6:87:f8:04:3a:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=5707d334-8fc9-4cbb-9412-bceffc90b739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:77:dc:0f:4e:d7:1c:14:49:f3:0b:da:51: 5d:95:46:c3:37:fb:eb:c0:ca:ba:a0:25:ad:df:d6: df:de:a4:78:d5:d2:b3:b5:ca:07:fb:d9:c8:35:51: 56:da:d2:51:6b:ec:8e:2d:64:f2:df:d8:b0:09:b7: 33:65:f1:44:d8:2a:dd:85:1f:0f:98:18:e8:56:d4: 1e:8b:28:db:e6:82:1b:ac:a5:52:70:02:45:d3:87: 07:db:3f:7a:4b:db:78:8b:65:76:7b:a5:fd:e1:3c: a3:ba:d2:04:72:95:95:5f:82:2f:e0:e1:d1:7c:3e: 5e:3b:9d:ce:f6:2e:ed:50:48:94:fe:22:51:61:37: 48:fa:10:10:d6:c3:3b:32:4b:5e:72:7b:da:e4:43: 83:d9:05:35:01:e9:e4:da:87:cf:81:21:0c:90:52: 7d:7b:ca:ec:d8:ce:10:c2:ac:ba:3f:59:5c:ca:38: e5:fe:1f:90:df:b8:45:aa:91:47:3a:0a:9f:1a:f0: 1d:13:ad:07:0f:05:bd:57:32:65:b4:89:5f:d4:c1: cc:95:a6:51:7e:89:c6:3f:be:fb:e1:68:c0:64:4f: 61:53:84:94:f8:14:eb:2b:d8:c2:ec:78:68:37:0d: 5f:c5:d2:35:dd:22:fc:c7:ab:cb:13:d8:72:06:ca: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:06:25:85:76:63:9D:10:36:06:7F:1B:88:3A:0D:97:AA:46:45:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3604c7a4-0186-3386-bb22-0f23dc58f476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 23.86.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:5f:90:b2:97:6c:01:2c:d6:62:a2:a7:44:8d:b0:a3:ad:5b: a6:62:61:7d:a2:ea:e5:ba:60:4d:a2:9c:dd:23:80:2f:43:bc: b9:55:73:4c:67:8a:60:a4:f6:0f:77:81:05:9f:dd:65:c8:5c: ce:94:40:ed:3e:0d:3f:4d:2a:e9:9f:bd:72:80:59:7c:89:22: a7:67:cc:10:6f:3f:70:02:68:32:3b:04:1d:53:1f:a3:ea:3c: 48:c5:91:a2:e3:ae:bf:9c:80:82:64:45:53:f2:0a:f9:ac:a6: 4a:98:0a:0d:38:d9:17:42:ac:32:a4:dc:4d:03:91:32:8c:96: 44:c9:02:9f:09:d9:7d:2c:1d:26:58:99:bb:a2:a1:db:f4:cb: fe:eb:75:62:1b:ac:a0:6c:5f:16:cf:d9:ba:ed:29:12:5b:3e: 53:c0:78:6a:81:7e:36:a5:bd:0b:21:0f:f8:4d:aa:91:e6:4a: f4:b4:22:18:08:6c:7f:19:84:1c:88:bb:6c:53:91:41:88:45: 8a:3e:4c:38:c1:a0:e4:30:c4:e0:61:a9:23:8f:bb:9f:2e:ac: e6:30:66:58:0d:da:4d:f0:04:78:a9:1a:1f:f2:73:c1:1d:14: 42:d2:7f:a3:5a:ab:d4:51:e5:a2:b7:b4:32:be:9a:b9:93:bf: 81:10:d5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2larsaH+AQ6YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NTcwN2QzMzQtOGZjOS00Y2JiLTk0MTItYmNlZmZjOTBiNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlt33A9O1xwUSfML2lFdlUbDN/vrwMq6oCWt 39bf3qR41dKztcoH+9nINVFW2tJRa+yOLWTy39iwCbczZfFE2CrdhR8PmBjoVtQe iyjb5oIbrKVScAJF04cH2z96S9t4i2V2e6X94TyjutIEcpWVX4Iv4OHRfD5eO53O 9i7tUEiU/iJRYTdI+hAQ1sM7Mktecnva5EOD2QU1Aenk2ofPgSEMkFJ9e8rs2M4Q wqy6P1lcyjjl/h+Q37hFqpFHOgqfGvAdE60HDwW9VzJltIlf1MHMlaZRfonGP777 4WjAZE9hU4SU+BTrK9jC7HhoNw1fxdI13SL8x6vLE9hyBsqktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgGJYV2Y50QNgZ/G4g6DZeqRkXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzYwNGM3YTQtMDE4Ni0z Mzg2LWJiMjItMGYyM2RjNThmNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF1Y6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9fkLKXbAEs1mKip0SNsKOtW6ZiYX2i6uW6YE2inN0jgC9DvLlVc0xn imCk9g93gQWf3WXIXM6UQO0+DT9NKumfvXKAWXyJIqdnzBBvP3ACaDI7BB1TH6Pq PEjFkaLjrr+cgIJkRVPyCvmspkqYCg042RdCrDKk3E0DkTKMlkTJAp8J2X0sHSZY mbuiodv0y/7rdWIbrKBsXxbP2brtKRJbPlPAeGqBfjalvQshD/hNqpHmSvS0IhgI bH8ZhByIu2xTkUGIRYo+TDjBoOQwxOBhqSOPu58urOYwZlgN2k3wBHipGh/yc8Ed FELSf6Naq9RR5aK3tDK+mrmTv4EQ1Qg= -----END CERTIFICATE-----Generated at Thu May 8 10:05:28 2025 by rpki-client