$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a879ab5-2573-3107-8725-744a17304cd4.roa File: 0a879ab5-2573-3107-8725-744a17304cd4.roa (raw, json) Hash identifier: WIzJ8AmQ9qRpZHIMShLI9Mk7PgkuxBnvlxXJbXwBl0w= Subject key identifier: D1:CD:42:D1:AC:79:BB:30:A7:57:CB:BE:57:B1:87:89:A5:25:72:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490F7C01FBB24960EA51285900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a879ab5-2573-3107-8725-744a17304cd4.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 16625 IP address blocks: 173.223.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:01:fb:b2:49:60:ea:51:28:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=e2db4844-9f1d-4478-bc2d-857bfb577fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:15:de:b7:51:db:78:40:9f:08:12:4f:09: 0a:ca:20:d0:6c:c2:8b:b6:f9:2c:30:fc:8a:99:f5: 01:18:b6:c6:2d:dd:22:15:85:d0:d1:50:9a:4b:c3: f5:22:68:ff:ae:8c:2b:e7:3b:dc:8a:99:3a:3f:37: 6b:6c:7f:aa:1e:2b:21:0c:49:e7:a4:2f:5a:39:23: bc:30:79:8c:04:54:f7:be:58:b8:96:28:2b:52:86: d7:df:e8:e7:7c:3c:b7:8f:8b:3c:7b:a9:b9:41:87: 3f:f2:43:3f:87:32:3c:43:01:ea:e7:78:67:c9:9a: fe:0c:4a:74:7b:82:6b:93:7b:84:dd:32:58:89:b0: 44:f4:67:9b:b6:a9:31:8f:82:f8:fa:d9:29:42:73: b3:35:c6:16:01:c7:3b:a4:0a:6e:10:1d:4d:b7:23: a7:de:0d:b5:6b:46:78:43:66:09:cb:8b:80:49:42: 82:6b:6a:96:58:94:99:24:57:a8:cb:43:11:c8:4b: 0e:4b:92:d0:c8:07:64:55:87:3b:7c:79:53:68:ab: 58:f5:ab:34:ee:2a:bb:5c:6d:5c:24:eb:e3:42:07: 6d:9e:44:8c:66:13:73:1c:97:f8:e8:22:1b:32:3e: fc:a4:cd:82:ba:c4:af:dd:17:7b:41:04:d9:12:77: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CD:42:D1:AC:79:BB:30:A7:57:CB:BE:57:B1:87:89:A5:25:72:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a879ab5-2573-3107-8725-744a17304cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:87:f1:83:77:ee:0d:00:02:c8:d0:5e:48:5c:40:66:15:34: 19:c5:e8:ce:5e:a6:57:82:87:a6:c5:3b:8e:64:f6:14:11:e4: 23:6d:54:17:b4:20:6d:1b:f8:3f:8b:f7:b4:84:a0:f5:30:94: 6a:ce:e3:bf:e2:75:e6:7b:b3:00:fa:ef:8d:70:27:fc:aa:fb: e9:6c:30:56:63:11:5d:60:5d:00:5f:93:77:18:f8:e9:cc:56: a2:e9:6c:5a:c3:5c:ea:5d:7a:b2:2d:0c:d0:e7:5c:75:be:0b: 4f:0f:0a:29:76:57:4c:32:95:24:98:f6:28:ac:8d:fe:5e:71: dc:24:f3:62:78:ac:fd:8d:55:28:9f:5d:05:99:03:21:20:63: 7d:27:dc:fa:ce:c3:63:1b:ff:20:aa:f5:b2:e1:c6:e7:56:0e: dc:3d:37:1e:db:8d:64:e4:e9:5b:1f:c1:26:8c:e0:24:ab:02: fd:e4:a8:3c:34:82:5d:a1:83:eb:c6:f1:6f:47:80:10:a1:8a: fa:ff:ef:aa:f9:06:d0:61:09:c3:dc:3d:50:10:88:7c:ba:fb: 7e:7f:aa:a4:b3:20:b0:b2:bc:4e:cc:78:60:bd:2a:1d:6e:0b: 4e:cf:d1:b3:70:79:90:83:fd:32:51:8c:c5:d8:ef:0c:06:6f: 42:39:ce:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAH7sklg6lEoWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTJkYjQ4NDQtOWYxZC00NDc4LWJjMmQtODU3YmZiNTc3ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMAV3rdR23hAnwgSTwkKyiDQbMKLtvksMPyK mfUBGLbGLd0iFYXQ0VCaS8P1Imj/rowr5zvcipk6PzdrbH+qHishDEnnpC9aOSO8 MHmMBFT3vli4ligrUobX3+jnfDy3j4s8e6m5QYc/8kM/hzI8QwHq53hnyZr+DEp0 e4Jrk3uE3TJYibBE9Gebtqkxj4L4+tkpQnOzNcYWAcc7pApuEB1NtyOn3g21a0Z4 Q2YJy4uASUKCa2qWWJSZJFeoy0MRyEsOS5LQyAdkVYc7fHlTaKtY9as07iq7XG1c JOvjQgdtnkSMZhNzHJf46CIbMj78pM2CusSv3Rd7QQTZEndGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHNQtGsebswp1fLvlexh4mlJXIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE4NzlhYjUtMjU3My0z MTA3LTg3MjUtNzQ0YTE3MzA0Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErd9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiH8YN37g0AAsjQXkhcQGYVNBnF6M5epleCh6bFO45k9hQR5CNtVBe0 IG0b+D+L97SEoPUwlGrO47/ideZ7swD6741wJ/yq++lsMFZjEV1gXQBfk3cY+OnM VqLpbFrDXOpderItDNDnXHW+C08PCil2V0wylSSY9iisjf5ecdwk82J4rP2NVSif XQWZAyEgY30n3PrOw2Mb/yCq9bLhxudWDtw9Nx7bjWTk6VsfwSaM4CSrAv3kqDw0 gl2hg+vG8W9HgBChivr/76r5BtBhCcPcPVAQiHy6+35/qqSzILCyvE7MeGC9Kh1u C07P0bNweZCD/TJRjMXY7wwGb0I5zk0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:26 2025 by rpki-client