$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa File: b343567e-a49e-3300-8a5b-72a22b6d70aa.roa (raw, json) Hash identifier: NnERI0teEtEh/KiZsotFRADTuhutJM+EC6tlbNOqXgM= Subject key identifier: C1:37:5F:2D:60:5B:D1:9D:A8:28:B7:F4:81:E0:A9:F2:E0:62:66:8D Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F43285848A99623A6038A943D464D7780 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 1239 IP address blocks: 172.84.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:23:a6:03:8a:94:3d:46:4d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=2c967be3-3b3d-4c85-8c63-d1c68c20ca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:63:21:8b:d5:37:26:90:81:f4:a2:4c:99:1f: 6e:56:40:39:c9:1f:76:32:b5:92:bb:aa:7a:28:45: 79:77:ee:7c:d5:ad:0c:e1:30:b5:b2:eb:76:98:ef: 5b:84:52:59:68:4d:f0:b8:6c:d1:02:14:12:d3:a5: 8f:e6:48:a2:64:d5:e3:5c:fd:45:26:b7:6c:a8:a1: 34:a9:b5:75:6a:da:13:e7:3d:32:08:f5:a5:56:6c: 44:2f:57:8f:87:07:b3:5d:eb:64:3c:b8:f0:df:f4: dd:30:41:d4:7a:16:ff:61:17:49:0c:2e:84:4c:be: 7b:ae:47:54:60:f0:10:38:bd:b2:e4:77:9b:49:64: 96:a5:6a:23:03:a8:09:3f:21:90:1b:82:03:f7:2f: 70:38:d8:5e:a0:ca:e7:b9:5e:da:10:9a:3f:eb:51: 5e:ef:b3:9a:3d:f9:4b:09:f0:6c:3a:c1:e5:2d:c6: dd:d2:94:b2:a0:85:3b:c9:d8:fc:12:a0:2c:0b:83: a8:46:f2:83:99:e2:d5:7d:aa:4e:d3:e6:05:77:7a: 71:fe:f5:5c:10:fa:76:ab:77:18:5d:21:32:c7:ab: c8:c5:33:4d:95:a5:70:86:52:60:c0:dc:39:5a:b1: d8:dd:c6:7f:17:71:b8:82:48:80:89:1b:9d:ff:84: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:37:5F:2D:60:5B:D1:9D:A8:28:B7:F4:81:E0:A9:F2:E0:62:66:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:21:59:ec:fd:6e:91:8e:33:69:93:ec:f4:c6:d9:df:b6:b3: 5f:88:a2:be:9d:38:33:67:0b:38:82:c5:7d:3c:c0:6a:9f:ba: 7d:a4:9d:b9:13:b6:28:95:dd:d8:80:2f:d5:49:d9:f2:0b:4d: c0:9e:85:2b:5b:50:c2:7a:34:0d:41:85:27:de:e8:2e:b5:8b: 15:4f:ca:4f:f3:0f:d4:72:e5:9a:95:02:54:17:12:ac:02:44: b2:4a:7f:c6:0a:cf:08:0d:e0:ad:99:99:ce:b2:39:30:70:5a: 04:61:53:8f:ce:f0:7c:2d:0d:75:37:a0:92:a4:1c:a5:91:57: ab:92:56:a8:a5:b5:f1:67:32:71:68:3d:c7:8f:31:1a:97:cb: 98:61:e0:04:24:2b:7a:23:5b:e3:ac:be:22:2c:35:88:38:f5: 11:ab:7e:0d:f6:98:1c:b2:55:3f:49:68:78:46:2f:73:a0:37: 84:ab:5d:45:0b:6d:d1:e0:5e:60:a6:8c:92:05:b7:07:ae:e5: f5:6d:5f:01:23:93:da:b9:a1:c5:d4:a1:f9:cc:bb:de:35:f5: 3b:ae:c6:db:70:32:a8:51:ba:0e:da:33:59:41:e5:48:fc:dd: 57:22:54:97:87:1a:06:a4:f5:b4:8f:13:12:48:60:5c:60:5e: ee:80:20:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliOmA4qUPUZNd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmM5NjdiZTMtM2IzZC00Yzg1LThjNjMtZDFjNjhjMjBjYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Mhi9U3JpCB9KJMmR9uVkA5yR92MrWSu6p6 KEV5d+581a0M4TC1sut2mO9bhFJZaE3wuGzRAhQS06WP5kiiZNXjXP1FJrdsqKE0 qbV1atoT5z0yCPWlVmxEL1ePhwezXetkPLjw3/TdMEHUehb/YRdJDC6ETL57rkdU YPAQOL2y5HebSWSWpWojA6gJPyGQG4ID9y9wONheoMrnuV7aEJo/61Fe77OaPflL CfBsOsHlLcbd0pSyoIU7ydj8EqAsC4OoRvKDmeLVfapO0+YFd3px/vVcEPp2q3cY XSEyx6vIxTNNlaVwhlJgwNw5WrHY3cZ/F3G4gkiAiRud/4TgcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME3Xy1gW9GdqCi39IHgqfLgYmaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYjM0MzU2N2UtYTQ5ZS0z MzAwLThhNWItNzJhMjJiNmQ3MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFS9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAhWez9bpGOM2mT7PTG2d+2s1+Ior6dODNnCziCxX08wGqfun2knbkT tiiV3diAL9VJ2fILTcCehStbUMJ6NA1BhSfe6C61ixVPyk/zD9Ry5ZqVAlQXEqwC RLJKf8YKzwgN4K2Zmc6yOTBwWgRhU4/O8HwtDXU3oJKkHKWRV6uSVqiltfFnMnFo PcePMRqXy5hh4AQkK3ojW+OsviIsNYg49RGrfg32mByyVT9JaHhGL3OgN4SrXUUL bdHgXmCmjJIFtweu5fVtXwEjk9q5ocXUofnMu9419TuuxttwMqhRug7aM1lB5Uj8 3VciVJeHGgak9bSPExJIYFxgXu6AIHA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:20:34 2025 by rpki-client