$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa File: 5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa (raw, json) Hash identifier: 5Nc0qalhz6q08XVpd1eebw1ISQtUSXrLz8qQN2qJ+Ws= Subject key identifier: 07:B3:27:0E:82:B3:AB:ED:F9:99:B0:EF:EB:FE:23:41:0F:C0:6D:A4 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F432858495C2440889099572DF2FA4040 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 5650 IP address blocks: 172.84.188.0/24 maxlen: 24 172.84.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:40:88:90:99:57:2d:f2:fa:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=046edf88-7994-4aa7-bd6b-e9619e827b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:25:00:ce:60:60:8e:77:1a:00:7a:5b:8a: 79:0f:98:64:39:1e:8f:3b:5f:fa:35:7f:29:67:10: 5b:c4:81:28:aa:9e:a8:97:26:49:9a:bb:38:4e:75: 27:ba:fd:66:dd:03:fa:dd:ce:18:50:08:ee:e5:59: 41:61:55:a1:f5:12:5f:de:41:0b:fb:da:d8:e8:f7: 19:d6:e4:e8:47:39:c3:2c:e8:e7:64:50:7f:49:1d: f9:b7:3f:6d:68:ca:4b:8e:30:5a:d2:a8:58:66:4f: e2:9d:73:b1:d9:aa:83:6a:af:e1:36:f0:48:e8:23: 1e:d8:ba:41:b2:d5:91:bb:8d:99:95:f1:eb:c9:b6: df:e6:ef:9e:39:47:4a:f6:18:09:66:e4:11:82:86: 5e:a2:8a:ed:42:c8:46:de:d6:69:67:2c:56:de:a8: 40:fa:87:4a:2f:cb:e9:6c:25:1c:b6:6a:dc:0c:0a: fc:20:d6:5e:f7:7a:75:ec:22:69:25:67:9c:5e:ee: 3a:6a:57:2a:d7:17:e1:e0:9b:5a:fa:4d:b1:d4:71: 46:19:7b:c5:98:14:6e:ac:71:47:5b:06:33:fb:3c: 11:98:85:65:84:12:2a:07:9b:d0:94:94:ee:50:99: e1:28:ac:40:4e:4c:2d:b9:51:f0:88:5b:40:f1:d4: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:27:0E:82:B3:AB:ED:F9:99:B0:EF:EB:FE:23:41:0F:C0:6D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:70:57:f4:5f:cd:d3:55:73:c2:6a:a5:74:22:7a:6d:6e:6a: 75:87:6d:50:3d:b7:4c:62:98:6b:f9:28:45:3d:23:c6:30:c9: fb:3e:8f:1f:23:06:42:6a:d5:54:e0:86:77:8a:e0:bb:be:a2: e6:02:7a:d2:e3:87:83:26:da:3f:af:19:14:d7:5d:0b:60:b9: 24:93:14:73:77:3d:ab:b7:5d:8c:81:66:3a:16:85:28:39:90: 06:fc:89:56:8a:73:9e:4e:3c:8d:3f:be:5c:e3:29:4e:e2:b5: b2:57:93:e8:c2:45:c2:80:fc:b8:10:35:fa:fb:59:9a:72:62: 0f:26:39:b3:e6:6f:76:3e:91:f8:88:e9:cd:ba:cc:ec:33:ca: 39:69:1c:4f:30:bd:61:2d:09:cb:fa:1f:2d:a2:a5:9b:78:84: cf:8c:51:43:aa:e9:12:39:b3:dc:76:63:7a:b2:77:72:82:77: ba:09:93:a9:cd:9d:99:ce:78:5b:75:db:99:6d:4d:2d:5c:d0: ee:6f:94:b8:37:d9:7c:fd:34:f7:60:8c:d6:69:e9:9b:7c:0f: f1:53:9f:46:91:bb:7e:39:0c:c3:0c:7d:f7:a1:9f:3e:42:02: 14:95:47:c8:25:84:30:f8:7e:92:49:fe:5b:4a:fe:e2:3c:39: de:74:69:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJECIkJlXLfL6QEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MDQ2ZWRmODgtNzk5NC00YWE3LWJkNmItZTk2MTllODI3YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtIlAM5gYI53GgB6W4p5D5hkOR6PO1/6NX8p ZxBbxIEoqp6olyZJmrs4TnUnuv1m3QP63c4YUAju5VlBYVWh9RJf3kEL+9rY6PcZ 1uToRznDLOjnZFB/SR35tz9taMpLjjBa0qhYZk/inXOx2aqDaq/hNvBI6CMe2LpB stWRu42ZlfHrybbf5u+eOUdK9hgJZuQRgoZeoortQshG3tZpZyxW3qhA+odKL8vp bCUctmrcDAr8INZe93p17CJpJWecXu46alcq1xfh4Jta+k2x1HFGGXvFmBRurHFH WwYz+zwRmIVlhBIqB5vQlJTuUJnhKKxATkwtuVHwiFtA8dQroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAezJw6Cs6vt+Zmw7+v+I0EPwG2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvNWE3MTFkMzYtYWI0Mi0z ZjBlLWEwOWMtMTBjMDUwNWY5ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFS8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFwV/RfzdNVc8JqpXQiem1uanWHbVA9t0ximGv5KEU9I8Ywyfs+jx8j BkJq1VTghneK4Lu+ouYCetLjh4Mm2j+vGRTXXQtguSSTFHN3Pau3XYyBZjoWhSg5 kAb8iVaKc55OPI0/vlzjKU7itbJXk+jCRcKA/LgQNfr7WZpyYg8mObPmb3Y+kfiI 6c26zOwzyjlpHE8wvWEtCcv6Hy2ipZt4hM+MUUOq6RI5s9x2Y3qyd3KCd7oJk6nN nZnOeFt125ltTS1c0O5vlLg32Xz9NPdgjNZp6Zt8D/FTn0aRu345DMMMffehnz5C AhSVR8glhDD4fpJJ/ltK/uI8Od50aVY= -----END CERTIFICATE-----Generated at Sat Apr 5 13:05:56 2025 by rpki-client