$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa File: ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa (raw, json) Hash identifier: fg8IAorhiiELtZBPBtzs3wyAYQ3h6bh4HqrPhs1rqPk= Subject key identifier: 37:1B:46:17:5A:80:FD:46:94:73:70:23:F8:3C:3D:EA:EE:5F:A5:06 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E0068923BBAE2AD88387FF00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 172.222.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:89:23:bb:ae:2a:d8:83:87:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=c8c424e3-237e-400a-9d15-ead82a2f5935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:8d:83:10:b9:6f:57:29:05:73:30:40:9f: 9d:9a:a1:70:65:bd:16:46:34:17:36:9f:da:1b:d2: 63:f8:59:80:26:b5:fa:77:f4:50:47:8f:83:0e:71: 4c:8d:b2:07:46:a3:d6:9c:99:22:13:8d:b1:d9:12: 86:ce:88:6e:15:33:9a:99:8f:7d:3b:41:89:37:dd: e9:38:54:88:74:54:39:07:df:1e:37:f3:de:25:6e: ba:9d:f4:d6:9e:15:13:a3:0e:1d:ed:5d:65:3f:6f: 1c:94:58:3c:44:3c:76:e1:29:cd:48:5e:86:cb:cb: 04:49:18:cd:af:84:e7:c6:95:b7:0a:da:b3:c2:79: d6:7f:a4:7d:63:20:8e:32:03:60:98:43:4d:e4:bc: 20:e4:23:88:0b:f0:3e:e5:93:82:4d:ad:f6:96:cb: e7:c9:93:0a:e9:36:cd:72:dc:84:a2:8a:da:d9:17: 80:7a:bf:f3:c5:07:14:24:d3:67:6c:e6:cf:c9:8d: 4c:7e:c1:35:c9:d9:aa:96:6d:6a:c8:c4:30:1e:54: a1:ff:bc:a0:ef:df:c2:c4:5e:1f:4a:7c:62:61:bf: 99:53:16:18:dc:aa:b2:ff:b8:e2:63:06:b2:77:bf: 19:55:45:a2:fc:ac:e0:10:08:e3:10:ae:aa:fe:a0: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:46:17:5A:80:FD:46:94:73:70:23:F8:3C:3D:EA:EE:5F:A5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.222.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:cf:c8:6b:2e:e2:25:d7:5d:b7:3b:31:d3:92:a6:fa:11:9a: d1:13:d1:9a:61:a8:28:f1:ec:10:17:1a:05:05:5f:a7:06:ec: c8:56:7f:02:3d:2c:16:37:e7:8d:4e:a8:30:1e:9d:4f:3d:07: 10:4b:a2:da:cb:0b:e5:7b:10:2f:00:65:86:be:3b:ce:7e:6d: e0:af:0e:01:24:05:18:4f:78:d2:7c:99:55:e9:4c:5a:f2:25: 8f:9f:ab:05:9c:44:65:2b:c3:99:2d:60:3f:60:b3:1e:e1:92: e4:7f:5d:78:f7:3a:62:d7:bf:ed:e7:93:1e:d8:70:bf:34:d9: 1d:31:05:46:af:2e:d0:68:99:2f:59:d1:b4:eb:d5:bb:3a:8e: 04:a2:12:38:1a:8e:7d:8a:91:0d:e7:81:5e:19:1f:7e:d4:ae: dc:e5:29:e6:24:61:4e:fe:d1:b3:d9:fa:68:dc:fd:d6:11:ba: f1:3f:5a:d0:69:d9:ab:3c:a4:c5:7f:36:a7:f6:cc:69:23:44: e2:f0:f9:20:c9:3a:42:ad:06:1e:31:bf:0a:d2:61:0b:15:cf: 45:cc:94:09:30:a5:fd:fa:e6:53:08:47:01:9a:31:04:dd:08: b7:b3:b7:40:61:dc:c8:4b:22:58:23:67:e7:c6:64:ff:98:ff: 6d:80:b4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBokju64q2IOH/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YzhjNDI0ZTMtMjM3ZS00MDBhLTlkMTUtZWFkODJhMmY1OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GiNgxC5b1cpBXMwQJ+dmqFwZb0WRjQXNp/a G9Jj+FmAJrX6d/RQR4+DDnFMjbIHRqPWnJkiE42x2RKGzohuFTOamY99O0GJN93p OFSIdFQ5B98eN/PeJW66nfTWnhUTow4d7V1lP28clFg8RDx24SnNSF6Gy8sESRjN r4TnxpW3CtqzwnnWf6R9YyCOMgNgmENN5Lwg5COIC/A+5ZOCTa32lsvnyZMK6TbN ctyEoora2ReAer/zxQcUJNNnbObPyY1MfsE1ydmqlm1qyMQwHlSh/7yg79/CxF4f SnxiYb+ZUxYY3Kqy/7jiYwayd78ZVUWi/KzgEAjjEK6q/qD+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcbRhdagP1GlHNwI/g8PeruX6UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGRmNmYzZTMtNjJiNS0z NzQ4LTg0ZWYtNTc0MmQ2MmY3ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbPyGsu4iXXXbc7MdOSpvoRmtET0ZphqCjx7BAXGgUFX6cG7MhWfwI9 LBY3541OqDAenU89BxBLotrLC+V7EC8AZYa+O85+beCvDgEkBRhPeNJ8mVXpTFry JY+fqwWcRGUrw5ktYD9gsx7hkuR/XXj3OmLXv+3nkx7YcL802R0xBUavLtBomS9Z 0bTr1bs6jgSiEjgajn2KkQ3ngV4ZH37UrtzlKeYkYU7+0bPZ+mjc/dYRuvE/WtBp 2as8pMV/Nqf2zGkjROLw+SDJOkKtBh4xvwrSYQsVz0XMlAkwpf365lMIRwGaMQTd CLezt0Bh3MhLIlgjZ+fGZP+Y/22AtIs= -----END CERTIFICATE-----Generated at Sat Apr 5 03:45:21 2025 by rpki-client