$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa File: 042fdff5-d209-3f15-8e0f-8658e95971ec.roa (raw, json) Hash identifier: 3kPo4FuJvXZPns0dwKd30bkpk0DkJdLF7p9xJzyhAQ0= Subject key identifier: C2:88:2D:2D:04:CD:CD:3E:1D:A5:1D:B7:34:F1:AD:F5:10:A9:FE:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF2D9635BD9A7B0C68500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f2:d9:63:5b:d9:a7:b0:c6:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=c7bbc280-b3b8-401b-8d7e-bd0e59e670f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:15:e4:b7:35:fe:2b:5f:a5:d3:e1:37:b6: c7:c8:c1:1c:f1:c6:1d:96:d3:1b:78:9d:11:3b:b9: f6:93:9c:47:a4:a2:21:5b:dc:b5:40:53:b9:96:f8: 5f:04:34:af:45:aa:e1:80:17:e8:01:6b:5b:5c:79: 0a:4f:34:75:00:71:e6:c6:17:7b:f8:17:98:6f:b3: 8a:7b:7c:e5:6a:97:7c:9f:56:db:97:57:1b:a0:60: 54:77:7d:cf:78:ff:30:9b:71:78:25:e6:65:9c:07: 9b:52:03:c3:57:40:3f:bc:fb:e4:a6:da:94:a1:f5: 71:72:9b:4a:4f:ee:55:75:5a:dd:eb:63:45:04:67: 69:87:1c:6d:95:56:d8:f7:15:05:7e:b0:37:a9:ab: c4:4f:7a:6f:83:9f:cb:c3:1a:53:00:87:5e:15:22: bd:14:84:d1:7d:b6:dd:b7:42:83:15:eb:cc:64:b8: 34:0e:c7:a9:ae:b7:64:82:02:ce:43:8f:d4:b1:e7: a7:a5:2e:50:6d:79:30:ff:0f:0b:df:79:ce:2e:e7: 5b:48:4e:cd:f4:1f:2b:14:7a:75:63:09:ff:2b:0d: 7e:77:ba:9b:52:c9:61:4a:e8:55:a1:d7:1b:80:3d: 2d:ad:9f:3d:f0:b3:86:08:15:40:2f:11:05:4b:04: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:88:2D:2D:04:CD:CD:3E:1D:A5:1D:B7:34:F1:AD:F5:10:A9:FE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f0:5d:1c:45:1c:c3:ec:b6:ff:0d:a6:0c:36:1e:33:10:7a: 38:c9:72:a9:2a:f7:2b:f9:b0:bf:94:20:e1:ae:57:13:94:0e: a9:5c:bf:df:90:28:99:a6:fa:29:2e:5f:37:26:d3:74:1e:81: d8:df:3d:c3:4f:e6:c2:bc:f0:56:74:83:66:e7:26:76:80:ce: 4c:81:8c:15:90:46:c4:4f:48:57:36:7d:40:e8:63:30:c5:62: 35:0e:e4:75:a4:d4:1c:9f:14:2a:3d:ac:4c:78:bc:7c:fc:5b: 1f:a3:92:84:ac:26:a3:3b:5b:07:76:2e:40:48:c6:39:7c:51: 54:64:81:67:50:9b:e5:e2:81:cb:97:56:53:c9:01:f6:5c:c7: 5c:94:db:88:67:85:05:65:f1:79:1f:68:bd:a1:3a:ac:69:a1: 68:3d:38:52:c5:21:7b:0d:3c:56:3f:e1:30:3a:70:ba:42:a0: 50:85:19:f5:f1:de:56:d1:bc:50:72:a2:ad:1e:4e:19:1a:e7: ce:a5:ee:94:73:6b:16:e5:ac:bd:f1:6a:e5:08:db:d3:af:a7: 16:06:63:0c:e9:53:e7:31:85:4a:0c:33:3d:8d:2e:63:f9:96: 85:d8:b6:be:5a:b8:ab:94:02:96:be:95:ca:f7:5e:ce:5d:0e: aa:c4:2c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/LZY1vZp7DGhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YzdiYmMyODAtYjNiOC00MDFiLThkN2UtYmQwZTU5ZTY3MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl4V5Lc1/itfpdPhN7bHyMEc8cYdltMbeJ0R O7n2k5xHpKIhW9y1QFO5lvhfBDSvRarhgBfoAWtbXHkKTzR1AHHmxhd7+BeYb7OK e3zlapd8n1bbl1cboGBUd33PeP8wm3F4JeZlnAebUgPDV0A/vPvkptqUofVxcptK T+5VdVrd62NFBGdphxxtlVbY9xUFfrA3qavET3pvg5/LwxpTAIdeFSK9FITRfbbd t0KDFevMZLg0DseprrdkggLOQ4/UseenpS5QbXkw/w8L33nOLudbSE7N9B8rFHp1 Ywn/Kw1+d7qbUslhSuhVodcbgD0trZ898LOGCBVALxEFSwRZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKILS0Ezc0+HaUdtzTxrfUQqf4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQyZmRmZjUtZDIwOS0z ZjE1LThlMGYtODY1OGU5NTk3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjwXRxFHMPstv8Npgw2HjMQejjJcqkq9yv5sL+UIOGuVxOUDqlcv9+Q KJmm+ikuXzcm03QegdjfPcNP5sK88FZ0g2bnJnaAzkyBjBWQRsRPSFc2fUDoYzDF YjUO5HWk1ByfFCo9rEx4vHz8Wx+jkoSsJqM7Wwd2LkBIxjl8UVRkgWdQm+XigcuX VlPJAfZcx1yU24hnhQVl8XkfaL2hOqxpoWg9OFLFIXsNPFY/4TA6cLpCoFCFGfXx 3lbRvFByoq0eThka586l7pRzaxblrL3xauUI29OvpxYGYwzpU+cxhUoMMz2NLmP5 loXYtr5auKuUApa+lcr3Xs5dDqrELI0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:24 2025 by rpki-client