$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4f15f6-620d-363c-8255-f201008a3630.roa File: 1a4f15f6-620d-363c-8255-f201008a3630.roa (raw, json) Hash identifier: /T66UL1f/HEOcpritD3/2IjHeG5iX7Y94+kFxWOKnZM= Subject key identifier: F7:96:81:AE:08:E8:90:8C:FF:39:27:97:EC:53:A6:EE:55:85:26:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584883E5C583E4932AC0EF27D300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4f15f6-620d-363c-8255-f201008a3630.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 63949 IP address blocks: 172.235.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c5:83:e4:93:2a:c0:ef:27:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=c82aa7ac-f346-4d33-af40-32504ede9e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:10:70:bf:f8:a1:d7:c4:ce:40:1d:6d:45: 64:aa:9a:e5:68:1c:ef:bf:fb:8b:af:24:00:00:2d: 1e:63:49:8b:b0:4f:b1:64:75:92:ba:1f:42:c5:48: d9:cf:fc:fe:a5:d8:41:2d:a1:5d:b9:86:47:67:17: 4b:07:62:4c:ff:6c:b8:f5:80:2d:bc:29:fc:08:e8: c9:7c:b1:27:87:1d:d9:20:43:1e:83:d6:ca:4e:21: 80:5b:c7:05:fd:65:77:56:2f:77:a5:d3:97:d3:3c: d9:fe:7d:df:26:4b:91:22:55:81:17:90:ea:bc:5e: 2b:9e:7d:a3:b1:60:be:6b:1e:4b:47:ad:04:9d:17: 7a:78:d8:c8:52:29:79:b9:94:4a:f9:87:28:ca:90: a6:64:3e:75:66:c9:89:33:a6:83:c1:70:42:5a:23: 69:f5:8c:09:bf:5b:29:3b:29:23:6b:47:8b:09:c3: b7:82:89:d3:1e:ae:a7:d5:91:63:53:50:6c:88:9c: 6b:3e:23:7f:a5:bf:7f:3c:17:67:a1:bf:d7:9f:0e: 0d:0b:3c:f1:c3:fd:57:d7:a4:21:1e:cd:1d:5d:43: 83:5c:f6:a0:5d:3a:98:b0:f9:4b:75:7d:9a:c2:3a: ef:1c:79:df:d4:fa:78:b1:05:6c:c5:6e:3f:b9:e9: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:96:81:AE:08:E8:90:8C:FF:39:27:97:EC:53:A6:EE:55:85:26:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4f15f6-620d-363c-8255-f201008a3630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ed:38:bd:cc:a0:58:5a:53:9f:0f:e6:8f:cd:4d:e4:f8:c7: ec:7f:59:03:da:3c:f5:44:fc:c2:e3:ed:ef:a5:28:88:11:89: 40:1e:ad:a3:dd:fd:b5:e6:35:29:6e:52:c2:d8:b0:c9:aa:9c: 37:b7:f8:96:f0:15:08:68:82:86:bf:fd:ba:d9:d1:b0:50:3e: 8b:f8:c9:1c:b0:f6:6c:33:b8:00:24:1b:04:cc:49:66:06:cb: 0f:68:55:5c:ea:97:9d:bf:73:54:db:fd:01:8a:5e:f8:3a:05: 74:7f:9b:fe:89:4c:0a:98:9c:09:63:de:40:08:f6:2f:e7:6b: 74:b7:23:a2:2a:b8:39:a4:40:d5:21:aa:16:3f:8c:ce:f4:5b: b4:94:f8:38:7e:20:55:61:dd:ff:cd:bc:a9:e6:f1:95:1e:14: bf:6a:1d:d3:f5:27:57:2d:35:66:b3:d7:43:2a:ee:b5:f7:2d: 78:5c:50:d5:38:6e:67:a8:8d:f4:6f:51:b0:c1:71:5b:5d:02: 8f:56:c0:60:5d:6a:87:ad:07:40:8e:eb:dd:42:28:fd:f1:bd: 72:e9:4f:08:83:71:af:00:36:f6:ba:96:65:d7:24:bd:40:88: ea:dc:bb:53:93:62:a0:22:42:4b:b2:fe:11:a4:18:76:76:ac: b4:8a:d2:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cWD5JMqwO8n0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk YzgyYWE3YWMtZjM0Ni00ZDMzLWFmNDAtMzI1MDRlZGU5ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9IQcL/4odfEzkAdbUVkqprlaBzvv/uLryQA AC0eY0mLsE+xZHWSuh9CxUjZz/z+pdhBLaFduYZHZxdLB2JM/2y49YAtvCn8COjJ fLEnhx3ZIEMeg9bKTiGAW8cF/WV3Vi93pdOX0zzZ/n3fJkuRIlWBF5DqvF4rnn2j sWC+ax5LR60EnRd6eNjIUil5uZRK+YcoypCmZD51ZsmJM6aDwXBCWiNp9YwJv1sp Oykja0eLCcO3gonTHq6n1ZFjU1BsiJxrPiN/pb9/PBdnob/Xnw4NCzzxw/1X16Qh Hs0dXUODXPagXTqYsPlLdX2awjrvHHnf1Pp4sQVsxW4/uemZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeWga4I6JCM/zknl+xTpu5VhSbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE0ZjE1ZjYtNjIwZC0z NjNjLTgyNTUtZjIwMTAwOGEzNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/tOL3MoFhaU58P5o/NTeT4x+x/WQPaPPVE/MLj7e+lKIgRiUAeraPd /bXmNSluUsLYsMmqnDe3+JbwFQhogoa//brZ0bBQPov4yRyw9mwzuAAkGwTMSWYG yw9oVVzql52/c1Tb/QGKXvg6BXR/m/6JTAqYnAlj3kAI9i/na3S3I6IquDmkQNUh qhY/jM70W7SU+Dh+IFVh3f/NvKnm8ZUeFL9qHdP1J1ctNWaz10Mq7rX3LXhcUNU4 bmeojfRvUbDBcVtdAo9WwGBdaoetB0CO691CKP3xvXLpTwiDca8ANva6lmXXJL1A iOrcu1OTYqAiQkuy/hGkGHZ2rLSK0iI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:29:19 2025 by rpki-client