$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa File: 5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa (raw, json) Hash identifier: pCMmCI3cFtajwhTjZ8IP+M12M+DwEFQRFbNdUXhnc2k= Subject key identifier: 31:38:35:9F:D5:50:51:92:41:36:14:30:C0:95:3A:39:24:03:C9:77 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E00661B1FE57C23D8F2B1E20 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.223.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:61:b1:fe:57:c2:3d:8f:2b:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=8e8580fd-6534-4abc-b272-6355a10c45e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:b7:e6:0a:60:41:62:a9:5c:a3:b8:71:0d: 69:7f:35:1d:7c:dc:35:e0:9f:05:99:29:3b:bb:ba: 16:a6:a0:61:2a:b6:c9:29:23:89:06:12:26:ed:df: c1:ca:90:d8:15:13:3f:8c:18:4b:51:67:1b:41:03: d8:20:94:fc:e4:11:56:68:ad:72:99:fb:e2:5c:8e: b1:1a:3f:60:b2:a7:d4:ee:e8:08:6f:ab:67:a0:c6: 8c:35:7f:95:99:63:c6:83:1e:48:c0:58:90:a9:73: aa:f2:78:98:c1:de:42:d0:81:78:ef:b8:42:36:9e: 0e:a4:e5:3f:aa:c8:11:ea:bb:82:9e:57:0e:49:6b: 0d:d3:20:05:bf:a9:8c:ae:db:1e:3d:0a:f2:8d:21: 90:5d:4b:0e:16:30:60:ed:88:fa:42:81:dc:db:bf: eb:4b:a2:4b:44:58:ac:ea:61:7e:d6:cc:84:74:fe: c5:8b:4d:3f:bf:fa:a5:5f:4b:47:4c:28:e5:c2:d0: 8b:d8:08:ad:d7:1d:e9:cb:30:e1:6e:fb:36:d2:c1: 7a:e0:19:92:74:68:e3:1d:2f:66:56:88:76:6b:1b: 6d:de:7b:78:76:04:d1:68:bf:e8:b4:1b:bf:25:5b: 82:99:e3:1a:e1:ac:79:cb:28:8d:ce:6f:e8:f8:d9: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:38:35:9F:D5:50:51:92:41:36:14:30:C0:95:3A:39:24:03:C9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:dc:56:f7:6b:b9:b4:71:70:d6:5f:eb:2e:ed:34:03:43:f2: dd:27:cc:ee:68:87:6a:28:e4:49:3d:66:16:d1:24:fb:af:fd: a3:a2:b5:7e:e7:b8:ff:c4:8c:69:12:7f:5f:37:3e:dc:70:2a: 25:85:f8:06:11:c3:71:1f:da:f7:fe:e8:72:0b:78:ce:c6:75: 23:a3:3b:62:ee:4f:37:33:c7:f1:17:07:94:d5:b5:f1:2e:9a: 2d:9d:f2:d2:11:86:6c:42:42:4b:6d:f2:07:50:96:41:07:f9: 64:3d:34:6d:df:7f:14:06:cc:89:86:ec:e1:37:8f:45:ea:55: a5:a8:dc:80:9b:19:c2:e1:c4:c1:cc:3c:ec:03:ad:3e:2e:e4: d7:71:2b:e1:42:f6:bf:bf:22:bf:7a:53:b1:bd:6b:45:ae:2d: 54:a9:54:53:49:4f:da:58:c7:54:97:ec:b8:3a:d8:2e:96:32: 07:3f:42:16:b0:1d:f3:f5:6b:85:fd:41:b6:8e:dc:70:20:b8: 9e:02:13:9a:4c:0d:96:fb:b9:1d:c4:fa:e8:69:15:10:50:3b: 37:99:9a:70:98:9b:b1:f5:98:1f:43:99:9f:5f:90:dd:62:82: 83:1f:c7:24:ff:f0:62:62:27:af:30:ab:92:6f:54:8f:ba:27: 02:b0:ed:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmGx/lfCPY8rHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk OGU4NTgwZmQtNjUzNC00YWJjLWIyNzItNjM1NWExMGM0NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCC35gpgQWKpXKO4cQ1pfzUdfNw14J8FmSk7 u7oWpqBhKrbJKSOJBhIm7d/BypDYFRM/jBhLUWcbQQPYIJT85BFWaK1ymfviXI6x Gj9gsqfU7ugIb6tnoMaMNX+VmWPGgx5IwFiQqXOq8niYwd5C0IF477hCNp4OpOU/ qsgR6ruCnlcOSWsN0yAFv6mMrtsePQryjSGQXUsOFjBg7Yj6QoHc27/rS6JLRFis 6mF+1syEdP7Fi00/v/qlX0tHTCjlwtCL2Ait1x3pyzDhbvs20sF64BmSdGjjHS9m Voh2axtt3nt4dgTRaL/otBu/JVuCmeMa4ax5yyiNzm/o+Nn9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE4NZ/VUFGSQTYUMMCVOjkkA8l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWFjNGJkMTItNzFhZS0z NTY5LThlOGMtOGY4NDRkNjViMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvcVvdrubRxcNZf6y7tNAND8t0nzO5oh2oo5Ek9ZhbRJPuv/aOitX7n uP/EjGkSf183PtxwKiWF+AYRw3Ef2vf+6HILeM7GdSOjO2LuTzczx/EXB5TVtfEu mi2d8tIRhmxCQktt8gdQlkEH+WQ9NG3ffxQGzImG7OE3j0XqVaWo3ICbGcLhxMHM POwDrT4u5NdxK+FC9r+/Ir96U7G9a0WuLVSpVFNJT9pYx1SX7Lg62C6WMgc/Qhaw HfP1a4X9QbaO3HAguJ4CE5pMDZb7uR3E+uhpFRBQOzeZmnCYm7H1mB9DmZ9fkN1i goMfxyT/8GJiJ68wq5JvVI+6JwKw7fU= -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:22 2025 by rpki-client