$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1941612a-f81f-3004-a54f-149c2e0ad45c.roa File: 1941612a-f81f-3004-a54f-149c2e0ad45c.roa (raw, json) Hash identifier: taShDpjVg0LEhxPb+lxGO7CGQEV0XjefOwV/iUAzWec= Subject key identifier: BF:79:6C:77:63:48:C4:68:3B:87:57:17:B3:77:D3:51:55:0F:13:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD67432C959696E25EB15D8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1941612a-f81f-3004-a54f-149c2e0ad45c.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:74:32:c9:59:69:6e:25:eb:15:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=9b0848b2-5163-410f-ba4f-01d406d6940e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:3c:55:59:7b:10:e5:17:ed:89:c9:5e:66: 02:12:92:70:18:9d:64:4e:d5:32:d4:ad:0b:99:83: ad:ac:90:85:b0:be:d0:e5:7e:09:38:82:66:e1:27: 5b:45:38:eb:83:40:16:bf:db:65:93:ab:f5:1d:2d: db:e0:75:71:18:77:2c:02:5f:3d:81:d9:46:b6:57: 1d:17:42:33:71:02:05:ff:52:1f:d6:7e:2c:40:98: 60:58:d3:df:f2:d8:35:56:40:45:b1:eb:ea:fa:2d: 10:72:67:3a:49:0f:46:51:33:7c:67:a6:27:f5:ec: a3:68:b6:6f:6b:1a:13:6b:99:a0:ec:6c:3a:8f:ca: 37:f4:64:22:37:51:ef:30:aa:ea:bf:1e:f0:65:69: 50:64:89:f4:84:be:68:2e:70:c5:f3:c6:0d:1a:d5: 7c:e9:2e:91:29:6e:83:59:4d:6c:ff:9f:aa:de:fc: 23:3a:27:e0:8e:30:7a:02:b9:10:7d:79:d8:bf:d8: 2a:44:de:5c:03:51:26:84:6e:10:03:72:85:ba:c3: 91:50:b9:02:5d:c1:9c:ad:46:8e:c6:4a:b7:c8:1d: c0:2b:40:ab:79:72:59:39:c4:24:be:b6:ab:86:c4: 11:a1:b9:45:9e:30:49:65:94:54:3e:f7:44:b4:13: 50:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:6C:77:63:48:C4:68:3B:87:57:17:B3:77:D3:51:55:0F:13:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1941612a-f81f-3004-a54f-149c2e0ad45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3d:b7:94:7c:d1:c0:64:b4:b6:0d:be:32:61:f1:37:f3:01: 32:60:0e:e6:ed:09:99:52:11:e2:bd:bb:58:e8:ef:c3:73:92: 36:32:fb:11:c1:85:55:20:c2:94:e0:4e:05:9e:77:d1:3f:63: 71:0e:ee:84:85:af:f8:fa:33:96:a5:cf:37:c9:03:06:ec:8c: 27:9e:2e:86:55:a9:65:ed:f0:30:0d:f2:71:1f:fd:a8:30:7c: 4c:68:af:90:c3:e3:fa:ef:7c:44:1f:ee:c7:22:21:9d:e7:60: 11:8d:9e:26:ae:be:9c:02:1e:f6:fd:b2:41:73:91:0d:36:77: 48:5d:47:a5:d8:ee:ae:74:09:e6:b8:3c:d6:cf:a3:8e:9f:86: b1:39:ba:02:8d:54:06:38:3d:87:ba:90:72:3a:81:9e:94:30: 4f:bf:83:85:7e:07:65:bb:7f:b6:e8:b9:30:5d:a6:5d:ca:ac: ec:47:ca:67:43:44:a9:86:01:ae:45:62:b4:5f:ae:10:1f:73: 14:9a:e0:b0:af:f1:b0:4d:b8:90:5d:ed:36:47:03:1a:0c:4b: a1:aa:d2:6a:a8:9e:3d:21:58:9e:54:20:93:32:c4:f5:52:4e: a3:9b:80:1f:92:c8:3e:a5:c8:e3:09:2e:f7:bc:e9:a1:43:e4: 97:f6:fb:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nQyyVlpbiXrFdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk OWIwODQ4YjItNTE2My00MTBmLWJhNGYtMDFkNDA2ZDY5NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbU8VVl7EOUX7YnJXmYCEpJwGJ1kTtUy1K0L mYOtrJCFsL7Q5X4JOIJm4SdbRTjrg0AWv9tlk6v1HS3b4HVxGHcsAl89gdlGtlcd F0IzcQIF/1If1n4sQJhgWNPf8tg1VkBFsevq+i0Qcmc6SQ9GUTN8Z6Yn9eyjaLZv axoTa5mg7Gw6j8o39GQiN1HvMKrqvx7wZWlQZIn0hL5oLnDF88YNGtV86S6RKW6D WU1s/5+q3vwjOifgjjB6ArkQfXnYv9gqRN5cA1EmhG4QA3KFusORULkCXcGcrUaO xkq3yB3AK0CreXJZOcQkvrarhsQRoblFnjBJZZRUPvdEtBNQjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL95bHdjSMRoO4dXF7N301FVDxNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk0MTYxMmEtZjgxZi0z MDA0LWE1NGYtMTQ5YzJlMGFkNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA49t5R80cBktLYNvjJh8TfzATJgDubtCZlSEeK9u1jo78NzkjYy+xHB hVUgwpTgTgWed9E/Y3EO7oSFr/j6M5alzzfJAwbsjCeeLoZVqWXt8DAN8nEf/agw fExor5DD4/rvfEQf7sciIZ3nYBGNniauvpwCHvb9skFzkQ02d0hdR6XY7q50Cea4 PNbPo46fhrE5ugKNVAY4PYe6kHI6gZ6UME+/g4V+B2W7f7bouTBdpl3KrOxHymdD RKmGAa5FYrRfrhAfcxSa4LCv8bBNuJBd7TZHAxoMS6Gq0mqonj0hWJ5UIJMyxPVS TqObgB+SyD6lyOMJLve86aFD5Jf2+6c= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:05 2025 by rpki-client