$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa File: dff5b360-ef8a-3c09-86a2-776b00a5da37.roa (raw, json) Hash identifier: YSxfwZynt6KB02Huz7N9YByGW9BtuTHYRIXZoPA6m0A= Subject key identifier: 82:9B:94:B1:F9:4B:63:B4:28:96:4F:05:7A:B7:4F:A0:E5:B9:C1:BB Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849B6DF4F9D4E2B308648269580 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 31898 IP address blocks: 23.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4f:9d:4e:2b:30:86:48:26:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=0e11cda5-b2e6-48b5-8cd1-38d93f384754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f9:02:2c:74:40:6c:ba:e0:8e:41:a7:15:c6: b2:fb:43:b2:c9:ee:9a:f5:29:7b:89:bb:bd:76:c7: e3:b7:ef:f0:e8:53:37:09:7b:90:50:c0:f7:67:f2: 15:bf:4c:a1:e5:1d:50:0e:ff:e3:69:4b:d1:22:82: e1:ea:60:c7:f2:80:ac:de:9c:6b:74:2b:be:99:00: 6a:a2:53:06:04:f7:d0:c7:cd:e2:d5:7c:b9:fd:37: d5:30:b1:f3:74:51:6e:55:b3:47:21:22:f4:e2:fe: d4:55:0a:9c:b8:d3:33:80:fd:00:0e:6c:33:72:ad: 6f:e2:48:14:c6:91:ca:7b:b1:02:d8:70:ca:54:57: 6d:ed:29:b1:59:5a:0a:ee:89:f7:87:7a:9d:e9:c6: 8a:70:e9:74:3b:a9:f4:d5:fe:ba:f7:cb:e2:e1:33: 52:5a:a3:d4:81:dc:2d:ee:43:be:73:9b:e3:bd:01: f3:b6:89:73:61:fc:18:d9:a7:d3:82:e0:9a:3d:c1: e8:f2:11:c8:54:97:35:26:89:9c:97:ba:35:0b:4a: 15:09:aa:3a:6b:e3:6f:e8:41:8f:ce:fa:40:df:4c: e2:07:4f:91:6d:a1:28:7a:72:a2:34:8e:9d:d6:ad: d0:02:7e:04:28:7e:e7:f7:8d:34:a7:87:94:56:b6: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:94:B1:F9:4B:63:B4:28:96:4F:05:7A:B7:4F:A0:E5:B9:C1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:65:a9:bf:40:b7:d2:24:35:3e:4e:e1:b3:61:f6:a2:73:cb: 43:07:75:fb:50:04:b8:b7:5c:32:b9:63:20:c4:17:79:e8:16: df:65:53:6a:7e:d4:bb:81:3f:36:ef:72:eb:d4:54:e2:2d:53: 26:d3:64:bc:9f:08:5f:23:9a:28:32:b8:7a:1a:ed:ad:a2:b5: bf:8b:96:f8:af:be:fc:b4:4d:7b:db:73:bd:d3:dc:6c:a0:83: 16:ab:fc:49:ff:43:69:2a:25:6d:47:77:98:1f:4d:9f:5a:7c: 84:a6:2d:58:c0:11:3e:98:59:11:e7:cc:24:f9:c5:7e:18:ea: f1:89:f7:37:ae:84:55:53:2c:fe:9c:e5:23:bc:c5:6e:b7:bc: f2:7d:cb:cf:28:75:b5:9c:c1:c8:7d:d9:aa:db:e5:6e:6f:59: b6:3e:f8:c2:27:f5:27:cc:5f:b1:09:31:11:7e:83:cf:92:70: 30:ac:da:b9:40:3b:f3:53:df:8b:ce:a4:7a:b7:76:47:00:64: 9f:1c:92:2c:3b:5c:46:15:a3:98:23:bf:04:a3:9d:fd:74:c2: bd:a1:b3:46:49:b4:91:e0:b0:21:c3:2e:06:d6:1a:2e:0a:16: 2a:61:ac:ed:2c:e7:d9:69:d8:62:31:d2:4b:1f:14:32:64:f0: ba:f0:95:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230+dTiswhkgmlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk MGUxMWNkYTUtYjJlNi00OGI1LThjZDEtMzhkOTNmMzg0NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PkCLHRAbLrgjkGnFcay+0Oyye6a9Sl7ibu9 dsfjt+/w6FM3CXuQUMD3Z/IVv0yh5R1QDv/jaUvRIoLh6mDH8oCs3pxrdCu+mQBq olMGBPfQx83i1Xy5/TfVMLHzdFFuVbNHISL04v7UVQqcuNMzgP0ADmwzcq1v4kgU xpHKe7EC2HDKVFdt7SmxWVoK7on3h3qd6caKcOl0O6n01f6698vi4TNSWqPUgdwt 7kO+c5vjvQHztolzYfwY2afTguCaPcHo8hHIVJc1Jomcl7o1C0oVCao6a+Nv6EGP zvpA30ziB0+RbaEoenKiNI6d1q3QAn4EKH7n9400p4eUVrb/wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKblLH5S2O0KJZPBXq3T6DlucG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGZmNWIzNjAtZWY4YS0z YzA5LTg2YTItNzc2YjAwYTVkYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJlqb9At9IkNT5O4bNh9qJzy0MHdftQBLi3XDK5YyDEF3noFt9lU2p+ 1LuBPzbvcuvUVOItUybTZLyfCF8jmigyuHoa7a2itb+Llvivvvy0TXvbc73T3Gyg gxar/En/Q2kqJW1Hd5gfTZ9afISmLVjAET6YWRHnzCT5xX4Y6vGJ9zeuhFVTLP6c 5SO8xW63vPJ9y88odbWcwch92arb5W5vWbY++MIn9SfMX7EJMRF+g8+ScDCs2rlA O/NT34vOpHq3dkcAZJ8ckiw7XEYVo5gjvwSjnf10wr2hs0ZJtJHgsCHDLgbWGi4K FiphrO0s59lp2GIx0ksfFDJk8LrwlVE= -----END CERTIFICATE-----Generated at Mon May 12 01:33:16 2025 by rpki-client