$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa File: 5c15b499-1a9a-301b-a8aa-5594396371a4.roa (raw, json) Hash identifier: Ef59KfOUIYFNWHvduQ8Z0CmpT2NmApyalRkqzlHmflQ= Subject key identifier: 29:F7:4C:E6:6E:15:50:9B:CD:8A:C1:B4:9F:24:CA:7A:74:C9:A3:04 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F432858491ED6E439B56AC27176D57A80 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 395633 IP address blocks: 173.229.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e4:39:b5:6a:c2:71:76:d5:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=00cd4c1e-a5a7-419f-b28b-1bbd0441962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:8e:17:13:88:64:09:b6:8e:bd:b4:a8:ea: 86:42:ee:e7:33:43:0e:49:92:b7:c4:81:59:31:99: 96:f4:ff:46:31:e7:9e:61:94:98:50:00:2e:68:5b: c9:6e:e8:39:f1:5a:1e:e3:cf:55:a3:93:74:e7:dc: 21:c2:5f:9d:30:1b:78:5c:18:32:4c:6e:dc:16:b4: 2d:98:4d:71:24:32:f4:e1:92:88:7c:c3:c3:d3:fb: e8:31:b6:97:a3:3f:62:a8:69:15:96:e5:bd:18:c5: c9:d4:e1:e1:18:cf:9b:60:b5:5f:f2:07:b1:da:29: 2f:1d:a5:2e:cf:36:5a:62:bc:90:4c:21:83:8f:ec: 0e:2e:bf:8a:8a:5e:4a:71:cb:a7:2b:49:77:a5:eb: 0c:eb:d5:d6:87:34:88:b3:fb:62:31:85:62:43:06: 82:e1:70:e5:a2:28:77:40:fd:51:22:f3:d0:89:ec: 59:2a:ac:b7:45:4e:b4:4a:20:0e:9a:40:3c:05:85: 5a:e6:5d:1d:f7:5f:73:e1:3f:00:ee:41:41:06:98: 83:fa:13:d6:99:bc:01:bb:27:12:99:f9:0b:8c:21: a2:77:9f:65:12:32:f5:55:5e:dd:c4:af:c0:5c:c3: 35:22:0a:6e:be:03:ce:12:37:9e:c1:cc:5c:1f:6d: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F7:4C:E6:6E:15:50:9B:CD:8A:C1:B4:9F:24:CA:7A:74:C9:A3:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5c15b499-1a9a-301b-a8aa-5594396371a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 173.229.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2a:08:dd:41:0d:9e:a1:a5:98:27:f2:dc:b6:7d:76:2c:f8: 49:55:23:31:a1:56:7f:37:1a:ea:d4:7c:db:15:08:a5:53:a3: e9:c2:a2:cb:75:97:4d:68:eb:74:dd:f8:54:ff:67:a4:36:c7: fa:cf:7a:09:b4:a2:b2:bf:99:99:fd:4f:8c:50:11:65:3d:83: 5f:7c:c4:8b:d2:20:02:ef:29:48:79:81:92:fb:5e:12:09:96: e9:ba:f6:38:c5:5b:08:d7:06:29:d1:b8:f1:52:1a:0e:a9:fc: 1c:7e:75:07:6f:fb:6a:66:9a:3d:cb:1f:ad:6c:80:9d:a4:ea: d5:42:ee:55:ac:71:b1:85:53:15:2c:21:6b:21:e8:1b:16:e8: c8:e3:fb:4a:75:be:88:bf:26:19:bd:73:34:5c:d8:75:b1:24: 69:e5:fe:02:88:60:1c:37:38:91:61:83:69:09:c3:75:42:0d: f6:cd:2c:a5:0f:55:2d:ef:3c:90:65:df:2b:91:03:a2:3e:54: 60:9d:4f:1e:6c:19:f9:06:78:ed:62:6c:49:20:0b:3d:55:59: fb:f8:01:1a:c8:14:bf:3a:59:4c:a5:59:81:2d:99:0f:e6:3b: 5d:9f:05:d4:c1:1e:8f:f7:1b:12:1a:4b:65:19:ff:e3:84:4c: ce:4f:51:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uQ5tWrCcXbVeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MDBjZDRjMWUtYTVhNy00MTlmLWIyOGItMWJiZDA0NDE5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUeOFxOIZAm2jr20qOqGQu7nM0MOSZK3xIFZ MZmW9P9GMeeeYZSYUAAuaFvJbug58Voe489Vo5N059whwl+dMBt4XBgyTG7cFrQt mE1xJDL04ZKIfMPD0/voMbaXoz9iqGkVluW9GMXJ1OHhGM+bYLVf8gex2ikvHaUu zzZaYryQTCGDj+wOLr+Kil5KccunK0l3pesM69XWhzSIs/tiMYViQwaC4XDloih3 QP1RIvPQiexZKqy3RU60SiAOmkA8BYVa5l0d919z4T8A7kFBBpiD+hPWmbwBuycS mfkLjCGid59lEjL1VV7dxK/AXMM1IgpuvgPOEjeewcxcH23lIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn3TOZuFVCbzYrBtJ8kynp0yaMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNWMxNWI0OTktMWE5YS0z MDFiLWE4YWEtNTU5NDM5NjM3MWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMqCN1BDZ6hpZgn8ty2fXYs+ElVIzGhVn83GurUfNsVCKVTo+nCost1 l01o63Td+FT/Z6Q2x/rPegm0orK/mZn9T4xQEWU9g198xIvSIALvKUh5gZL7XhIJ lum69jjFWwjXBinRuPFSGg6p/Bx+dQdv+2pmmj3LH61sgJ2k6tVC7lWscbGFUxUs IWsh6BsW6Mjj+0p1voi/Jhm9czRc2HWxJGnl/gKIYBw3OJFhg2kJw3VCDfbNLKUP VS3vPJBl3yuRA6I+VGCdTx5sGfkGeO1ibEkgCz1VWfv4ARrIFL86WUylWYEtmQ/m O12fBdTBHo/3GxIaS2UZ/+OETM5PUS0= -----END CERTIFICATE-----Generated at Sat Apr 12 00:42:07 2025 by rpki-client