$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa File: 0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa (raw, json) Hash identifier: RSfObz/Nm96tnZqkyk4A26jJ/q2s33O3+793rreSAUk= Subject key identifier: 91:D0:70:E9:CF:27:E3:66:84:78:B4:F9:62:D4:CE:57:4E:88:63:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF2CD748A7C04284A6A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f2:cd:74:8a:7c:04:28:4a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=57c1cd42-5e62-4e44-98e9-5ee6852e053d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:3a:f0:f7:3d:3a:69:1f:57:7a:21:13:e4: 04:7d:a7:19:5b:59:50:c1:ab:88:36:29:8b:d7:d1: e6:86:26:5c:36:ff:81:e4:07:2c:94:4a:16:93:d2: 65:94:f5:60:98:24:e1:2e:01:66:1b:80:68:05:d0: f2:e7:25:3d:44:cd:7e:fc:6e:97:0f:80:aa:a9:53: 34:8e:b5:5f:bf:df:ef:e6:ab:e1:7f:4e:16:18:e1: d8:98:0b:3e:94:d3:3a:51:57:0e:49:4d:eb:cc:e3: 0f:dc:ee:7c:b8:42:18:7d:ac:ed:e6:d5:88:0e:0e: ac:d4:85:91:bf:2b:02:99:11:b9:70:f2:8e:f1:b3: ba:de:da:74:28:fb:6f:65:ca:1a:12:1d:8e:c5:08: e3:ed:84:d9:fe:9e:2c:ec:02:aa:13:f7:4f:ed:a0: 64:c1:ab:92:68:ea:31:8b:16:51:cc:fe:e7:1b:d3: 99:e5:35:51:c2:3b:a4:70:1a:0f:be:f9:ea:9a:29: 88:97:33:a0:af:f7:4a:8e:34:b0:7a:23:58:09:57: 3f:a8:19:2a:f5:d5:b4:7a:ba:bd:a8:bc:56:f0:d9: 17:1b:42:67:1b:5e:7c:cc:56:61:25:b7:c0:f1:16: 0b:ff:ab:bb:dc:22:6a:9d:d2:95:e7:86:18:00:54: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D0:70:E9:CF:27:E3:66:84:78:B4:F9:62:D4:CE:57:4E:88:63:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1bb196-7c8b-30a1-a588-4bd1703475f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:bf:10:a4:51:27:ee:35:66:2f:07:d1:a2:73:2d:10:d3:8c: 14:3f:86:11:14:bf:b3:01:44:28:12:92:d4:d4:79:e4:47:7e: 28:ea:76:e8:e0:54:27:a9:11:8d:2f:a6:c8:03:d7:8b:88:71: 07:93:0f:9f:1b:b0:e3:7a:01:55:5b:e9:f3:90:a8:56:34:f6: b1:fe:1b:5e:0a:dc:31:66:ba:83:b1:af:e6:21:07:19:51:c0: f7:33:31:a8:fc:fe:9a:9b:1e:5e:83:42:ec:ad:03:83:91:e1: e2:bd:ba:a2:5a:36:b9:94:48:43:0a:6b:b1:e3:c0:28:ff:c5: ad:9e:dd:97:c0:8c:ea:24:f1:ee:d9:45:1d:15:b6:83:66:9f: f3:cb:8c:50:28:1d:84:e4:64:db:93:75:68:1f:42:06:0b:02: 3d:dd:7a:df:1e:94:a7:a4:b5:b8:f6:1b:e4:f0:fa:8e:22:4b: fc:02:7d:61:01:be:d3:d8:be:91:90:72:3d:6b:dd:15:71:66: 47:76:3c:b3:3a:9b:3b:cf:67:29:84:4f:2c:81:73:3e:27:63: 0a:1f:3f:12:6b:49:f2:6b:1d:48:ca:ff:6e:12:8c:3a:a8:61: e0:eb:19:3a:d6:47:af:33:3e:b2:fc:05:6c:85:f5:c2:43:5f: 3d:5b:b3:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/LNdIp8BChKagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NTdjMWNkNDItNWU2Mi00ZTQ0LTk4ZTktNWVlNjg1MmUwNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5868Pc9OmkfV3ohE+QEfacZW1lQwauINimL 19HmhiZcNv+B5AcslEoWk9JllPVgmCThLgFmG4BoBdDy5yU9RM1+/G6XD4CqqVM0 jrVfv9/v5qvhf04WGOHYmAs+lNM6UVcOSU3rzOMP3O58uEIYfazt5tWIDg6s1IWR vysCmRG5cPKO8bO63tp0KPtvZcoaEh2OxQjj7YTZ/p4s7AKqE/dP7aBkwauSaOox ixZRzP7nG9OZ5TVRwjukcBoPvvnqmimIlzOgr/dKjjSweiNYCVc/qBkq9dW0erq9 qLxW8NkXG0JnG158zFZhJbfA8RYL/6u73CJqndKV54YYAFTjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHQcOnPJ+NmhHi0+WLUzldOiGMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGMxYmIxOTYtN2M4Yi0z MGExLWE1ODgtNGJkMTcwMzQ3NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy/EKRRJ+41Zi8H0aJzLRDTjBQ/hhEUv7MBRCgSktTUeeRHfijqdujg VCepEY0vpsgD14uIcQeTD58bsON6AVVb6fOQqFY09rH+G14K3DFmuoOxr+YhBxlR wPczMaj8/pqbHl6DQuytA4OR4eK9uqJaNrmUSEMKa7HjwCj/xa2e3ZfAjOok8e7Z RR0VtoNmn/PLjFAoHYTkZNuTdWgfQgYLAj3det8elKektbj2G+Tw+o4iS/wCfWEB vtPYvpGQcj1r3RVxZkd2PLM6mzvPZymETyyBcz4nYwofPxJrSfJrHUjK/24SjDqo YeDrGTrWR68zPrL8BWyF9cJDXz1bs38= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:30 2025 by rpki-client