$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07648e7f-f18e-3369-8226-70ca75b15b7e.roa File: 07648e7f-f18e-3369-8226-70ca75b15b7e.roa (raw, json) Hash identifier: gTwk8X10iTsUQiV+/H6LgFNfVWbk30PUn66bNbkgHvw= Subject key identifier: E9:FD:B1:ED:31:D0:CF:E6:30:A7:7F:65:EF:75:77:3A:3A:35:B1:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF6175F58DBE72B22B60E280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07648e7f-f18e-3369-8226-70ca75b15b7e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:75:f5:8d:be:72:b2:2b:60:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=096da006-69e2-464d-95d8-f4d70adcced9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:42:d8:87:a5:fe:4b:d3:51:71:38:9e:41: d3:b8:38:8d:71:7c:9d:7e:cb:97:b7:f3:7a:83:dc: e2:8e:66:a9:4d:24:ed:87:6e:0c:67:6f:3d:86:32: 1c:47:59:b3:59:95:be:fc:bb:6a:bc:57:38:b3:f8: bd:81:b7:5b:99:0a:b2:62:bb:ce:60:fb:66:b5:fa: fa:96:46:04:f0:14:ae:eb:83:dd:67:99:1b:e5:3f: 00:ee:d6:53:c3:28:27:66:87:7a:fc:01:82:73:92: f3:27:dc:c5:12:61:2e:35:a8:10:6f:b5:55:16:81: 2a:76:f4:fa:43:74:08:bf:41:b9:17:3a:0c:9e:07: 67:93:14:c2:e0:29:21:cd:40:bb:71:ee:e0:88:01: e9:0e:80:cc:de:c6:87:03:e8:1a:5f:de:a0:f1:54: 61:e3:34:bd:8c:ba:3f:7c:58:8f:db:b1:8c:43:e5: dd:41:c8:4e:a4:f1:57:a9:bf:08:f8:f5:e9:65:5d: 3d:84:70:4d:2b:8d:12:b6:e7:b4:57:01:05:92:0a: ec:70:a0:0a:d3:8c:42:be:3d:1e:1e:cf:f0:f4:c5: 54:c7:6d:ed:98:d2:04:2d:20:02:fb:39:54:a8:02: 64:1f:23:b1:ff:d7:b2:9e:94:df:32:41:0e:4d:74: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FD:B1:ED:31:D0:CF:E6:30:A7:7F:65:EF:75:77:3A:3A:35:B1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07648e7f-f18e-3369-8226-70ca75b15b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2b:42:a3:ca:e9:bb:3a:1d:a2:14:86:6b:59:67:82:12:4e: d3:1f:2a:a6:e3:28:4c:79:f8:56:94:3b:ed:66:47:0f:e1:c2: 47:53:9a:2f:bb:57:55:c1:f4:b8:2f:6c:ea:58:4a:c2:f7:00: 16:2b:8b:c8:64:b4:fc:25:97:c8:e5:48:ff:88:25:cf:6b:a1: 44:f0:98:1c:58:79:b2:16:33:1b:c6:e4:e2:c6:cd:73:ee:47: 1d:b0:00:84:e8:e1:d6:f1:b4:75:93:d8:ce:9c:f6:17:0d:9e: 44:0c:6b:21:ef:45:07:26:d6:6a:d3:c4:5c:23:c2:96:5a:c0: 5a:1d:c4:e4:44:7a:fa:39:3f:13:9b:c4:5c:0a:e7:f7:16:22: bd:fd:93:80:04:62:5b:34:47:5f:08:b8:47:4f:8e:da:49:ad: bc:fa:21:a1:0f:52:cb:d6:b8:ff:09:23:a9:92:18:5e:7e:0d: 16:93:ea:0d:f0:b9:64:27:4c:91:f4:b4:b6:a7:7d:7a:de:8b: bf:2f:b2:63:34:57:d8:e9:aa:bc:78:2c:95:74:43:67:8b:28: ec:2e:80:6e:fd:56:f1:d2:37:f6:ef:7d:6c:55:f6:cd:4b:84: 9e:37:ac:fd:19:4b:2c:e7:88:69:47:15:7f:17:cc:72:bf:42: 4d:53:1e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXX1jb5ysitg4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MDk2ZGEwMDYtNjllMi00NjRkLTk1ZDgtZjRkNzBhZGNjZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2lC2Iel/kvTUXE4nkHTuDiNcXydfsuXt/N6 g9zijmapTSTth24MZ289hjIcR1mzWZW+/LtqvFc4s/i9gbdbmQqyYrvOYPtmtfr6 lkYE8BSu64PdZ5kb5T8A7tZTwygnZod6/AGCc5LzJ9zFEmEuNagQb7VVFoEqdvT6 Q3QIv0G5FzoMngdnkxTC4CkhzUC7ce7giAHpDoDM3saHA+gaX96g8VRh4zS9jLo/ fFiP27GMQ+XdQchOpPFXqb8I+PXpZV09hHBNK40Stue0VwEFkgrscKAK04xCvj0e Hs/w9MVUx23tmNIELSAC+zlUqAJkHyOx/9eynpTfMkEOTXS7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn9se0x0M/mMKd/Ze91dzo6NbE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDc2NDhlN2YtZjE4ZS0z MzY5LTgyMjYtNzBjYTc1YjE1YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMrQqPK6bs6HaIUhmtZZ4ISTtMfKqbjKEx5+FaUO+1mRw/hwkdTmi+7 V1XB9LgvbOpYSsL3ABYri8hktPwll8jlSP+IJc9roUTwmBxYebIWMxvG5OLGzXPu Rx2wAITo4dbxtHWT2M6c9hcNnkQMayHvRQcm1mrTxFwjwpZawFodxOREevo5PxOb xFwK5/cWIr39k4AEYls0R18IuEdPjtpJrbz6IaEPUsvWuP8JI6mSGF5+DRaT6g3w uWQnTJH0tLanfXrei78vsmM0V9jpqrx4LJV0Q2eLKOwugG79VvHSN/bvfWxV9s1L hJ43rP0ZSyzniGlHFX8XzHK/Qk1THt0= -----END CERTIFICATE-----Generated at Tue Apr 8 23:46:28 2025 by rpki-client