$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffe38374-92ee-3934-90e7-db1e091e0160.roa File: ffe38374-92ee-3934-90e7-db1e091e0160.roa (raw, json) Hash identifier: H7XtXHkFUQWWwB21InrmxWuL818cUEMgf6oHFgAJW08= Subject key identifier: 65:EB:64:B5:FB:12:CE:6C:F4:42:E1:53:B6:2F:B9:7B:09:AB:47:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B57A22FA3290AA5B6D8A46A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffe38374-92ee-3934-90e7-db1e091e0160.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 20940 IP address blocks: 23.53.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:22:fa:32:90:aa:5b:6d:8a:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=b3d2d315-29f9-484e-bc4e-69a4514bdf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:81:57:a7:32:f2:49:d7:df:37:df:4f:02: 87:af:b1:f1:ba:75:ca:7d:78:91:07:d9:d1:79:b8: 48:d6:fe:52:ac:5a:01:75:28:e1:80:17:72:6f:2a: e5:b0:a3:40:c4:55:1e:68:cd:2f:da:f6:15:44:24: c2:63:4c:67:58:17:c6:45:15:37:0c:39:b5:98:ee: 56:41:1c:2e:c4:71:1c:e1:bb:99:95:b2:a7:44:f1: 1e:8b:55:65:24:2d:5f:18:be:46:9c:cf:a7:1e:15: 0d:8c:b9:7c:1a:8a:f4:21:15:ff:b3:fe:45:72:93: a6:34:cf:65:74:f5:3d:0d:4d:36:c7:10:cf:6c:f3: b7:37:c4:09:39:c3:4b:6c:06:18:7e:75:07:f3:af: 12:22:f5:a5:d2:fb:f8:d3:d1:20:a3:f1:32:cc:8b: 24:48:22:ba:a2:be:1f:53:e9:8f:34:17:fb:15:e1: 42:18:dc:41:6b:a2:5e:37:72:5c:8b:90:86:8e:c7: 1b:11:cc:f3:a4:8e:b8:f2:25:42:0a:37:4e:18:a1: 0d:14:d9:97:5c:08:ca:be:36:9d:b1:af:ba:05:e8: 26:7a:40:0d:4b:a5:6d:3c:a9:2c:13:c6:b9:b0:b7: 90:cd:ee:f5:fd:29:af:e2:7e:5d:f9:13:97:e2:fd: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EB:64:B5:FB:12:CE:6C:F4:42:E1:53:B6:2F:B9:7B:09:AB:47:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffe38374-92ee-3934-90e7-db1e091e0160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:72:41:ee:5f:81:6c:9e:86:61:0f:5c:22:94:b4:54:5b:14: 06:ae:19:1a:5c:e9:17:f2:17:e7:93:45:85:68:1b:19:ed:5e: c4:5d:53:bf:f3:de:4a:fa:92:0b:7f:7b:e4:28:a4:b1:f1:67: 5d:21:d1:74:9a:1a:55:66:f1:6b:40:b2:7c:40:3e:45:4d:c2: fc:20:d5:7a:d7:3f:3a:4f:1f:de:9f:7e:ce:ee:2f:b3:5f:d5: 75:8e:fd:7a:23:c9:bd:70:38:2d:ce:0d:b9:00:9b:8c:b3:ad: f5:e2:69:49:84:df:be:ef:77:2f:98:ec:43:03:b7:08:ea:5c: 51:ec:31:77:c1:58:fc:cf:cf:08:6b:39:b8:e4:4c:60:35:55: e2:3e:1b:a3:1f:fc:73:c3:cd:78:ee:f8:03:2d:d8:c5:e5:ac: ac:e0:f9:f3:b7:70:0b:12:23:fb:a6:06:ee:4e:a3:ac:14:dd: c0:84:6d:d9:ac:00:36:35:70:58:ae:d0:41:6e:dc:06:54:0e: b0:05:7c:31:ab:ea:cb:49:5c:6a:35:81:7c:12:60:b7:b6:c0: 93:39:b3:b7:7b:35:a5:dc:5e:bc:d5:be:06:c1:27:46:7d:1e: 9f:b6:e4:b2:14:ea:18:d4:d5:30:da:84:c1:3e:d4:b5:0e:5a: a2:c2:ff:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiL6MpCqW22KRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YjNkMmQzMTUtMjlmOS00ODRlLWJjNGUtNjlhNDUxNGJkZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTOBV6cy8knX3zffTwKHr7HxunXKfXiRB9nR ebhI1v5SrFoBdSjhgBdybyrlsKNAxFUeaM0v2vYVRCTCY0xnWBfGRRU3DDm1mO5W QRwuxHEc4buZlbKnRPEei1VlJC1fGL5GnM+nHhUNjLl8Gor0IRX/s/5FcpOmNM9l dPU9DU02xxDPbPO3N8QJOcNLbAYYfnUH868SIvWl0vv409Ego/EyzIskSCK6or4f U+mPNBf7FeFCGNxBa6JeN3Jci5CGjscbEczzpI648iVCCjdOGKENFNmXXAjKvjad sa+6BegmekANS6VtPKksE8a5sLeQze71/Smv4n5d+ROX4v2iRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXrZLX7Es5s9ELhU7YvuXsJq0etMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmZlMzgzNzQtOTJlZS0z OTM0LTkwZTctZGIxZTA5MWUwMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpyQe5fgWyehmEPXCKUtFRbFAauGRpc6RfyF+eTRYVoGxntXsRdU7/z 3kr6kgt/e+QopLHxZ10h0XSaGlVm8WtAsnxAPkVNwvwg1XrXPzpPH96ffs7uL7Nf 1XWO/Xojyb1wOC3ODbkAm4yzrfXiaUmE377vdy+Y7EMDtwjqXFHsMXfBWPzPzwhr ObjkTGA1VeI+G6Mf/HPDzXju+AMt2MXlrKzg+fO3cAsSI/umBu5Oo6wU3cCEbdms ADY1cFiu0EFu3AZUDrAFfDGr6stJXGo1gXwSYLe2wJM5s7d7NaXcXrzVvgbBJ0Z9 Hp+25LIU6hjU1TDahME+1LUOWqLC/2Y= -----END CERTIFICATE-----Generated at Mon May 5 20:28:58 2025 by rpki-client