$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1744f73-5254-3586-a5cd-134b9dfe37f8.roa File: a1744f73-5254-3586-a5cd-134b9dfe37f8.roa (raw, json) Hash identifier: acRRk/9QmLU3AvShwhSisGU4KNWfQn+7K1j/IIqlthk= Subject key identifier: 59:20:5E:29:CC:15:FF:9C:B8:02:50:9A:8F:18:66:A5:B8:EF:C6:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A4E9D3A5E680EEAEDE680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1744f73-5254-3586-a5cd-134b9dfe37f8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.52.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4e:9d:3a:5e:68:0e:ea:ed:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=46bc0371-41d9-408b-9d36-3590edf71e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:5d:ce:f4:cd:f4:04:7d:15:31:7a:74:27: fe:af:f1:4a:0c:97:90:d1:39:13:d2:ca:a5:03:c0: 9b:2a:ed:e6:74:33:94:3b:20:5b:fe:0a:a7:d6:5d: b2:15:02:d5:15:28:a7:aa:15:17:c1:e6:06:9f:3f: d9:0f:44:0e:0c:f6:6a:5f:b4:e8:83:d0:40:3a:71: d0:9f:4d:67:ce:53:c0:6a:8a:b5:57:e0:d0:2f:ba: a6:3d:a2:2d:fa:99:a0:c5:a3:e1:ad:8a:c5:11:de: 5c:c2:d8:c5:56:f5:8f:cc:cc:50:fa:bd:3c:e5:fe: 63:cf:3e:6d:a3:24:ea:31:e7:6f:37:33:bb:97:4d: 55:a0:1e:70:bd:be:ca:61:4c:d9:90:d1:bf:1f:c8: c9:6d:f6:59:99:5d:58:25:1d:46:3c:20:ea:62:4d: 4a:24:8c:2e:0a:01:c1:07:41:f8:77:d0:05:de:6d: f6:f0:44:1f:4f:7b:9a:0d:62:90:50:0d:39:d6:38: 62:f5:c7:8d:37:b8:ed:8b:80:ba:10:76:0d:05:85: ed:a7:4f:18:54:5f:25:8c:55:6b:57:78:8d:2a:b1: a4:ab:47:40:07:59:dd:24:43:af:0e:2d:91:c2:c4: 78:94:f7:35:3c:99:02:b7:be:d4:ca:ba:21:10:c5: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:5E:29:CC:15:FF:9C:B8:02:50:9A:8F:18:66:A5:B8:EF:C6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1744f73-5254-3586-a5cd-134b9dfe37f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c9:b3:c8:3d:3d:e9:4d:05:c4:86:b9:bf:93:81:72:9a:95: 33:99:da:34:6f:24:14:71:b6:f2:d4:bb:2f:b3:11:0d:6a:ca: 33:b5:93:ae:b7:a9:f3:7b:98:25:d2:51:45:5d:40:79:e6:fb: f6:8b:24:2a:e3:82:bc:36:af:be:82:68:9b:4a:11:be:fb:fe: 9c:f8:47:00:bb:47:b9:f5:52:15:34:80:5c:1e:33:3f:eb:16: fc:f5:de:ba:92:a5:62:12:eb:08:40:b0:a0:7e:54:d8:b8:69: 9b:11:e0:e5:72:8c:7c:d7:90:37:4c:cd:88:c5:19:74:07:1e: 20:8a:b0:ad:74:fe:b1:3c:8c:be:0a:0c:c7:62:96:fa:04:79: 4c:50:ca:ff:1d:3b:52:76:44:e5:ea:fb:8a:1c:0d:e0:a7:d9: 2c:f1:6e:9e:c5:e3:93:71:f0:86:7f:3d:64:36:ad:fb:78:b0: 78:30:dc:6b:fa:b9:ce:0d:a8:0a:b6:e0:31:75:73:77:ed:4f: 23:21:85:5e:9a:f3:b3:cb:a2:a4:84:bf:7f:e5:e1:d1:85:e3: 5c:05:39:53:f2:bc:a3:bc:02:b1:db:82:b6:ca:4d:66:64:46: bf:5e:80:14:ca:e0:fe:1e:c2:b7:dd:6a:a9:4a:67:cd:1a:7b: 6c:47:16:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSk6dOl5oDurt5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDZiYzAzNzEtNDFkOS00MDhiLTlkMzYtMzU5MGVkZjcxZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99dzvTN9AR9FTF6dCf+r/FKDJeQ0TkT0sql A8CbKu3mdDOUOyBb/gqn1l2yFQLVFSinqhUXweYGnz/ZD0QODPZqX7Tog9BAOnHQ n01nzlPAaoq1V+DQL7qmPaIt+pmgxaPhrYrFEd5cwtjFVvWPzMxQ+r085f5jzz5t oyTqMedvNzO7l01VoB5wvb7KYUzZkNG/H8jJbfZZmV1YJR1GPCDqYk1KJIwuCgHB B0H4d9AF3m328EQfT3uaDWKQUA051jhi9ceNN7jti4C6EHYNBYXtp08YVF8ljFVr V3iNKrGkq0dAB1ndJEOvDi2RwsR4lPc1PJkCt77UyrohEMUrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkgXinMFf+cuAJQmo8YZqW478Y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE3NDRmNzMtNTI1NC0z NTg2LWE1Y2QtMTM0YjlkZmUzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzJs8g9PelNBcSGub+TgXKalTOZ2jRvJBRxtvLUuy+zEQ1qyjO1k663 qfN7mCXSUUVdQHnm+/aLJCrjgrw2r76CaJtKEb77/pz4RwC7R7n1UhU0gFweMz/r Fvz13rqSpWIS6whAsKB+VNi4aZsR4OVyjHzXkDdMzYjFGXQHHiCKsK10/rE8jL4K DMdilvoEeUxQyv8dO1J2ROXq+4ocDeCn2Szxbp7F45Nx8IZ/PWQ2rft4sHgw3Gv6 uc4NqAq24DF1c3ftTyMhhV6a87PLoqSEv3/l4dGF41wFOVPyvKO8ArHbgrbKTWZk Rr9egBTK4P4ewrfdaqlKZ80ae2xHFn8= -----END CERTIFICATE-----Generated at Mon May 5 07:30:18 2025 by rpki-client