$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa File: 0ab80909-a430-3e11-b205-e1a70373741a.roa (raw, json) Hash identifier: eHwfqEQdFq9CvInaNDkD/sxOskNYVcJiaCLvElRpNIc= Subject key identifier: 0F:3F:CA:DD:AF:67:5B:EC:23:86:26:EB:E2:93:DB:F2:E8:8C:72:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD672AD0F1A8CE9B46BC880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:72:ad:0f:1a:8c:e9:b4:6b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=8f671616-4bda-4ca4-a515-6174641afb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:24:cb:7d:4e:44:83:75:be:ea:ee:b8:dd:fb: 95:2f:31:40:0c:92:7c:f1:91:e4:22:20:2e:17:68: c3:30:ce:4a:3a:f3:51:ed:b3:58:78:53:ed:91:f4: 15:62:50:f9:0b:d1:ca:46:10:a7:ab:94:e4:99:63: ea:b7:08:5c:fb:06:91:8e:e5:64:8f:76:53:72:36: 18:a2:2b:ca:9e:60:5a:cf:41:e4:d3:07:84:61:11: 5f:3d:fa:a4:f7:2c:cf:ac:78:b7:3d:14:55:92:dd: 16:5c:2f:55:08:9e:8a:7c:7b:91:1d:ef:95:78:46: cc:9e:f0:5b:25:c1:48:19:47:c4:d9:07:6e:0f:55: 1e:b7:40:4b:cc:3f:d4:63:c4:4a:38:35:af:77:46: 42:82:04:1f:67:08:0a:2e:a1:ba:bf:c9:ab:0f:3a: ac:09:3d:03:a5:a2:ce:d6:82:73:9f:85:74:b8:c1: c6:6e:db:89:48:c8:f5:e1:ee:dc:ed:1e:41:46:18: ff:66:27:16:e1:d2:e3:47:57:76:7a:00:78:4b:42: 6c:ba:9a:51:a9:4d:c0:aa:c4:f6:b8:37:fb:ba:bf: e4:f6:06:7e:fc:c8:7e:46:a8:cb:85:17:cf:ee:2c: fa:36:15:50:61:7c:cd:85:a5:0a:bd:75:ef:a0:76: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3F:CA:DD:AF:67:5B:EC:23:86:26:EB:E2:93:DB:F2:E8:8C:72:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:27:2c:b0:62:39:67:8a:95:8f:df:84:ca:04:eb:67:b0:dd: da:07:38:35:d1:92:f9:3e:a1:ce:7a:6d:6b:a8:4d:b4:5a:fe: 28:33:33:2f:00:b4:09:ad:ad:cf:83:05:dd:1d:b1:42:ad:a8: 4f:fd:02:d2:fb:fa:89:73:ce:69:93:a8:75:33:33:fe:38:cf: bd:63:53:20:65:1f:18:c0:4f:23:e0:7f:b5:33:da:97:8e:db: 02:66:bd:a0:4d:3f:6e:67:81:f8:a6:d8:f4:4c:10:f7:56:70: a2:a6:14:06:18:97:19:a8:c8:ca:24:cd:cf:77:14:4d:fd:8b: bb:cf:7b:c6:5d:f3:8a:39:33:06:86:75:1d:00:f1:3d:0c:ac: 0b:f2:6c:13:f4:7a:a7:35:f9:7a:b5:c4:71:11:6a:b2:22:d8: 41:e6:ff:04:1d:d2:3e:bc:10:90:77:d2:ad:56:86:36:d3:36: 99:48:50:f7:1c:5a:1e:a6:20:b5:02:b1:a8:38:ef:80:be:e2: 5e:a4:ac:7c:45:e5:7d:be:dc:34:56:35:a5:ce:64:f7:68:ed: 1b:0a:5e:3c:06:60:52:76:8c:e1:7d:02:fe:57:08:b0:3b:08: 41:d1:2b:ed:2f:aa:57:0a:c3:84:3f:b9:99:4b:01:35:92:9e: 8b:92:d4:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nKtDxqM6bRryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk OGY2NzE2MTYtNGJkYS00Y2E0LWE1MTUtNjE3NDY0MWFmYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyTLfU5Eg3W+6u643fuVLzFADJJ88ZHkIiAu F2jDMM5KOvNR7bNYeFPtkfQVYlD5C9HKRhCnq5TkmWPqtwhc+waRjuVkj3ZTcjYY oivKnmBaz0Hk0weEYRFfPfqk9yzPrHi3PRRVkt0WXC9VCJ6KfHuRHe+VeEbMnvBb JcFIGUfE2QduD1Uet0BLzD/UY8RKODWvd0ZCggQfZwgKLqG6v8mrDzqsCT0DpaLO 1oJzn4V0uMHGbtuJSMj14e7c7R5BRhj/ZicW4dLjR1d2egB4S0JsuppRqU3AqsT2 uDf7ur/k9gZ+/Mh+RqjLhRfP7iz6NhVQYXzNhaUKvXXvoHa1vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8/yt2vZ1vsI4Ym6+KT2/LojHIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFiODA5MDktYTQzMC0z ZTExLWIyMDUtZTFhNzAzNzM3NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsnLLBiOWeKlY/fhMoE62ew3doHODXRkvk+oc56bWuoTbRa/igzMy8A tAmtrc+DBd0dsUKtqE/9AtL7+olzzmmTqHUzM/44z71jUyBlHxjATyPgf7Uz2peO 2wJmvaBNP25ngfim2PRMEPdWcKKmFAYYlxmoyMokzc93FE39i7vPe8Zd84o5MwaG dR0A8T0MrAvybBP0eqc1+Xq1xHERarIi2EHm/wQd0j68EJB30q1WhjbTNplIUPcc Wh6mILUCsag474C+4l6krHxF5X2+3DRWNaXOZPdo7RsKXjwGYFJ2jOF9Av5XCLA7 CEHRK+0vqlcKw4Q/uZlLATWSnouS1MI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:49 2025 by rpki-client