$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa File: 23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa (raw, json) Hash identifier: 0Wjuw+nbnv5Qt5cBxipu2R1hNRO4tnl3m7qsioKMpUY= Subject key identifier: 53:EA:DE:2E:17:82:C5:04:AE:2E:4E:E3:24:B2:C2:A5:1F:66:A0:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499829DB132F3B1F4FE99C8BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.205.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:db:13:2f:3b:1f:4f:e9:9c:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=c1581b66-722c-4374-9fa2-f457091931af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:a5:04:79:53:78:d7:93:fd:77:62:0e:72: 8a:7f:d3:27:cb:d8:bd:eb:b1:e5:68:65:8d:5b:3e: a1:45:c7:20:dd:89:95:a5:ae:66:a3:74:9e:c1:52: 28:95:d5:e4:9a:ba:00:20:7e:bc:d7:9a:58:78:41: ea:02:2e:ef:c9:9e:56:ca:8e:1c:04:6b:26:3f:8a: c6:2b:50:96:52:65:40:80:1a:a2:90:4b:76:70:1c: 18:5b:5c:a7:95:8e:c0:17:c3:22:b0:fe:6b:2d:43: 89:61:5c:34:85:cd:04:f3:d6:0a:6f:61:60:7a:ec: 47:90:78:d3:18:50:3e:f5:73:62:34:0f:82:cf:6c: ad:0f:b2:b9:2e:7a:64:9a:2c:8d:e6:d7:12:d5:c6: 83:71:22:73:57:89:8b:29:53:34:6a:cc:da:91:d5: 6c:c0:c6:55:b7:05:a4:de:43:91:22:2c:fd:dd:6c: 46:1a:56:ce:af:61:20:e5:d4:0a:5a:f5:6e:a3:c8: bd:91:0b:41:45:d2:ee:00:08:79:d3:e6:3e:c3:24: 38:9e:d2:1c:9e:aa:78:56:e6:fd:51:c2:73:f1:a6: dc:5f:72:77:4b:b6:5f:66:8b:95:48:fe:7b:c9:53: 3b:63:b2:e5:65:3f:66:7d:d2:8c:5a:9a:df:03:0d: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:DE:2E:17:82:C5:04:AE:2E:4E:E3:24:B2:C2:A5:1F:66:A0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23eae7dc-7725-30e3-a331-bfdd67b0d2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:32:be:65:62:71:4f:28:34:a8:9b:c3:9d:7f:f2:da:ba:dc: 4d:80:b7:c6:2a:ee:be:27:4b:b5:ce:c6:0d:f3:a5:56:c2:e0: b1:20:2d:b5:22:f7:99:4b:a3:64:5d:cd:9a:e9:af:72:12:17: f4:4d:ca:9c:0a:71:6c:9c:fa:c4:a5:01:67:9a:a9:9f:a5:be: bc:2d:86:e6:be:69:f4:e7:27:a6:9c:93:ee:01:eb:47:c4:97: ff:1a:0c:39:42:38:b7:d3:a6:73:bc:42:18:6d:5f:e5:72:ae: 09:aa:db:8a:6d:b3:c0:e8:d8:32:9d:70:58:52:37:49:2f:6d: eb:d8:b3:9b:62:a6:27:a2:08:ea:2e:64:cd:b6:ce:e1:4c:c4: 18:f9:25:64:a2:8f:06:6d:c2:04:1e:be:6e:12:37:af:f3:9a: 62:4d:b5:8f:ff:27:d5:7c:1f:ad:2b:a0:ab:d0:3e:95:16:4c: ef:8c:b4:ba:9b:2f:02:41:3e:f4:92:87:49:24:53:ea:c6:75: 8e:6f:c9:a4:2c:10:08:f0:ef:e4:e0:25:a3:b0:62:32:8b:b8: 47:34:e6:bb:2d:2c:e0:0f:94:88:dd:f4:07:fb:10:ba:fe:ea: 0a:e1:44:5e:0c:11:f0:df:81:d6:2b:d9:b3:67:7a:a5:f9:2c: a3:d8:f2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdsTLzsfT+mci8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YzE1ODFiNjYtNzIyYy00Mzc0LTlmYTItZjQ1NzA5MTkzMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5+lBHlTeNeT/XdiDnKKf9Mny9i967HlaGWN Wz6hRccg3YmVpa5mo3SewVIoldXkmroAIH6815pYeEHqAi7vyZ5Wyo4cBGsmP4rG K1CWUmVAgBqikEt2cBwYW1ynlY7AF8MisP5rLUOJYVw0hc0E89YKb2FgeuxHkHjT GFA+9XNiNA+Cz2ytD7K5LnpkmiyN5tcS1caDcSJzV4mLKVM0aszakdVswMZVtwWk 3kORIiz93WxGGlbOr2Eg5dQKWvVuo8i9kQtBRdLuAAh50+Y+wyQ4ntIcnqp4Vub9 UcJz8abcX3J3S7ZfZouVSP57yVM7Y7LlZT9mfdKMWprfAw1/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPq3i4XgsUEri5O4ySywqUfZqAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlYWU3ZGMtNzcyNS0z MGUzLWEzMzEtYmZkZDY3YjBkMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF838MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0yvmVicU8oNKibw51/8tq63E2At8Yq7r4nS7XOxg3zpVbC4LEgLbUi 95lLo2RdzZrpr3ISF/RNypwKcWyc+sSlAWeaqZ+lvrwthua+afTnJ6ack+4B60fE l/8aDDlCOLfTpnO8QhhtX+Vyrgmq24pts8Do2DKdcFhSN0kvbevYs5tipieiCOou ZM22zuFMxBj5JWSijwZtwgQevm4SN6/zmmJNtY//J9V8H60roKvQPpUWTO+MtLqb LwJBPvSSh0kkU+rGdY5vyaQsEAjw7+TgJaOwYjKLuEc05rstLOAPlIjd9Af7ELr+ 6grhRF4MEfDfgdYr2bNneqX5LKPY8s4= -----END CERTIFICATE-----Generated at Mon May 5 06:34:08 2025 by rpki-client