$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08f99504-f5b5-3c89-aeba-b1efe9ec6ce1.roa File: 08f99504-f5b5-3c89-aeba-b1efe9ec6ce1.roa (raw, json) Hash identifier: pG1Yf5EbfjZykBNbm1W11LDCGSTj8Ui7TU6x1Si7VJo= Subject key identifier: 78:EB:18:C6:CF:BD:50:DA:67:85:40:55:7F:F9:5C:8A:86:FE:04:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614BF6993FA2D66E75C880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08f99504-f5b5-3c89-aeba-b1efe9ec6ce1.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4b:f6:99:3f:a2:d6:6e:75:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=275107e6-1590-4ffe-a5f3-28ad7dae0f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:19:ee:77:e6:33:4d:54:99:b8:e3:e6:d9: 21:b5:25:93:0a:83:e7:e1:61:84:18:22:49:8d:a9: 9b:90:3c:d4:98:d1:e8:8b:4e:94:bc:c6:04:e6:1d: 9c:ba:3e:a7:89:1c:7d:64:61:b9:e1:ed:44:30:c9: d2:8d:a7:97:8c:16:17:8f:1b:3a:ea:3b:8e:53:85: f2:af:ce:f6:8e:3c:73:10:09:8e:02:9d:38:74:99: 4f:19:80:15:90:38:67:0d:47:1f:d1:c7:b5:0f:c9: a8:13:a6:13:b2:f1:97:dd:73:d7:d4:3b:36:94:7c: b5:4a:27:dd:e8:29:92:29:dc:e9:ce:b9:3b:0d:6e: 77:6d:cd:49:eb:b1:8c:5a:fb:9f:60:46:7c:af:5c: 87:4e:da:39:57:8e:c7:a6:83:30:9a:f0:63:24:a7: 09:1a:7d:c7:08:2e:ae:01:24:83:60:51:62:27:c9: 25:0d:f0:95:50:55:27:fd:39:ab:f7:37:ec:e8:4b: d0:c3:32:27:0f:bc:c3:af:09:21:01:ae:d8:ff:f7: a7:9c:da:91:29:cc:4f:de:eb:91:70:1d:9c:39:27: 0c:ef:ea:db:a7:ef:c1:2a:3a:e0:52:93:89:2b:d4: 1e:4c:7b:22:ab:3f:65:93:82:88:17:6a:2c:6a:f4: 25:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EB:18:C6:CF:BD:50:DA:67:85:40:55:7F:F9:5C:8A:86:FE:04:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08f99504-f5b5-3c89-aeba-b1efe9ec6ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:31:d2:e2:c9:a9:fd:b2:ff:1d:a9:c2:ee:23:a3:2d:60:fe: 98:64:36:4e:95:03:26:11:a0:cd:2d:04:3e:aa:9b:10:4e:35: 17:bb:d8:fb:bd:51:b0:07:d2:d4:79:d0:83:c5:6a:76:42:c1: 54:ce:f0:41:e0:47:d0:4e:7a:b3:47:2f:35:6c:84:e9:e1:d7: dd:f5:d6:60:fb:a2:c9:0a:fa:4a:09:3d:6e:51:ff:e0:b8:9c: df:98:75:b2:96:48:52:62:5f:00:2d:67:b5:81:14:c6:66:13: 57:e6:67:7d:33:56:79:2c:00:f9:33:01:67:39:90:38:d7:eb: 9d:c3:d3:a1:bf:48:55:b6:35:8a:35:2e:5b:81:de:73:32:1f: 40:37:ee:50:bf:ca:67:9b:e4:79:7b:b4:2f:d6:64:fa:c9:8d: b0:89:a9:8d:77:be:41:f9:15:71:36:7b:0f:92:bc:a5:de:25: 2b:71:57:ab:fe:cf:d7:ab:bc:9f:1f:0d:d6:9c:ab:ec:82:fc: 9d:53:1d:b9:2d:f5:aa:db:8d:33:36:dd:34:ff:ce:c6:f2:8a: dc:5c:3b:fa:0f:3e:38:c7:bd:09:0c:05:0e:b8:e9:da:16:5a: b3:50:cb:7b:1a:ad:c9:de:25:fa:8d:bc:88:12:da:97:71:dd: af:7f:f8:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUv2mT+i1m51yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk Mjc1MTA3ZTYtMTU5MC00ZmZlLWE1ZjMtMjhhZDdkYWUwZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0sZ7nfmM01Umbjj5tkhtSWTCoPn4WGEGCJJ jambkDzUmNHoi06UvMYE5h2cuj6niRx9ZGG54e1EMMnSjaeXjBYXjxs66juOU4Xy r872jjxzEAmOAp04dJlPGYAVkDhnDUcf0ce1D8moE6YTsvGX3XPX1Ds2lHy1Sifd 6CmSKdzpzrk7DW53bc1J67GMWvufYEZ8r1yHTto5V47HpoMwmvBjJKcJGn3HCC6u ASSDYFFiJ8klDfCVUFUn/Tmr9zfs6EvQwzInD7zDrwkhAa7Y//ennNqRKcxP3uuR cB2cOScM7+rbp+/BKjrgUpOJK9QeTHsiqz9lk4KIF2osavQlCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjrGMbPvVDaZ4VAVX/5XIqG/gT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDhmOTk1MDQtZjViNS0z Yzg5LWFlYmEtYjFlZmU5ZWM2Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMx0uLJqf2y/x2pwu4joy1g/phkNk6VAyYRoM0tBD6qmxBONRe72Pu9 UbAH0tR50IPFanZCwVTO8EHgR9BOerNHLzVshOnh19311mD7oskK+koJPW5R/+C4 nN+YdbKWSFJiXwAtZ7WBFMZmE1fmZ30zVnksAPkzAWc5kDjX653D06G/SFW2NYo1 LluB3nMyH0A37lC/ymeb5Hl7tC/WZPrJjbCJqY13vkH5FXE2ew+SvKXeJStxV6v+ z9ervJ8fDdacq+yC/J1THbkt9arbjTM23TT/zsbyitxcO/oPPjjHvQkMBQ646doW WrNQy3sarcneJfqNvIgS2pdx3a9/+JE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:29 2025 by rpki-client