$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa File: 20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa (raw, json) Hash identifier: Y1/+Z84Ko9jOIp4Jv0l2P0Ch+fQ5aAQgQ5kITAJYiRg= Subject key identifier: E2:A9:70:A7:5D:DA:8B:B1:C7:D9:8C:0E:2F:BB:B2:2E:A4:BA:5A:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D5EECDE512C194AB9317F280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa Signing time: Mon 10 Feb 2025 11:15:14 +0000 ROA not before: Mon 10 Feb 2025 11:15:14 +0000 ROA not after: Sun 11 May 2025 10:15:14 +0000 asID: 63949 IP address blocks: 172.237.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d5:ee:cd:e5:12:c1:94:ab:93:17:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 10 11:15:14 2025 GMT Not After : May 11 10:15:14 2025 GMT Subject: CN=6ca15a72-3f75-4347-9a81-e33ce168844e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:a6:7b:3e:c7:35:36:b9:93:1d:62:89:ca: b4:c1:7a:db:2c:81:02:71:de:d6:10:83:3b:d0:59: 14:99:9a:67:d3:77:5f:a5:39:02:4d:e0:da:d3:86: 0b:1c:fe:90:0c:db:33:24:05:9a:bb:f8:47:7a:30: 4d:89:9a:da:f5:8a:58:53:ad:ca:95:cd:c6:3f:78: 91:68:4b:79:e3:46:f1:b9:7c:2a:49:df:46:e5:79: 96:00:7e:8b:87:9b:75:d7:3e:26:f2:b1:af:a4:81: 44:32:77:7c:99:d6:dc:a9:d4:db:ce:64:78:19:c3: f8:52:ab:62:88:b8:24:e6:99:a0:1c:f9:50:96:50: 00:c1:ce:9e:85:15:bd:d0:54:0f:75:c6:90:23:81: 12:2d:cb:52:25:de:b4:2a:43:87:57:93:79:91:c0: eb:24:c9:01:5e:dc:c3:15:2a:42:18:ed:f0:03:69: 3e:1f:1a:13:95:18:b8:73:af:31:ac:85:e0:e3:91: 15:00:46:cb:65:36:a9:78:97:91:7a:e2:a5:73:6c: 76:6e:a5:95:a8:80:08:d8:99:28:2e:16:77:94:ef: 01:ee:9d:80:4c:63:ec:33:ff:13:28:ab:b4:d6:eb: 2f:a8:90:4c:18:88:3e:cd:c2:07:80:9d:ad:7c:81: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A9:70:A7:5D:DA:8B:B1:C7:D9:8C:0E:2F:BB:B2:2E:A4:BA:5A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c8:5f:cd:bb:b5:c6:aa:e6:c2:a7:a7:14:e3:45:3f:b8:b6: 00:ac:96:a0:ac:3a:e3:ff:da:3d:67:0c:31:84:3b:95:32:35: 86:67:7f:b4:e4:f7:84:8e:e3:fd:a2:c1:5a:73:23:a2:aa:d4: 70:ef:a1:0c:50:f5:78:86:66:ae:ff:3d:75:d2:c6:a9:a2:1f: 40:d8:46:46:4d:a0:d0:4f:de:bb:fc:df:f6:68:ea:b5:25:d6: 5a:5d:57:00:b9:9e:6f:ff:95:d5:4a:e1:e1:98:a4:86:7e:52: 4f:86:db:fc:58:87:88:09:92:a8:36:f7:5c:ec:1d:fc:11:aa: b6:e5:ab:60:7f:94:1e:4d:32:cf:1a:dc:2d:44:b3:d4:24:f9: 55:90:d0:98:6d:85:d0:38:04:27:e8:35:38:49:14:b1:a3:96: 87:b5:ff:41:d2:d6:a7:d1:f8:81:f4:ca:fa:16:3e:89:fb:7e: d4:fa:4b:93:2d:f2:59:c3:ed:76:68:19:1a:42:89:1c:5c:03: bb:5c:63:94:1a:70:df:95:38:00:76:71:bf:a2:57:95:2e:13: be:e1:44:b8:dc:43:d8:79:1e:5a:09:3a:38:1c:64:5f:fa:93: 93:37:a5:5e:55:b3:75:d5:67:fc:61:df:1e:78:d6:69:08:7b: d1:2f:27:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjV7s3lEsGUq5MX8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMDExMTUxNFoXDTI1MDUxMTEwMTUxNFowLzEtMCsGA1UEAxMk NmNhMTVhNzItM2Y3NS00MzQ3LTlhODEtZTMzY2UxNjg4NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr+mez7HNTa5kx1iicq0wXrbLIECcd7WEIM7 0FkUmZpn03dfpTkCTeDa04YLHP6QDNszJAWau/hHejBNiZra9YpYU63Klc3GP3iR aEt540bxuXwqSd9G5XmWAH6Lh5t11z4m8rGvpIFEMnd8mdbcqdTbzmR4GcP4Uqti iLgk5pmgHPlQllAAwc6ehRW90FQPdcaQI4ESLctSJd60KkOHV5N5kcDrJMkBXtzD FSpCGO3wA2k+HxoTlRi4c68xrIXg45EVAEbLZTapeJeReuKlc2x2bqWVqIAI2Jko LhZ3lO8B7p2ATGPsM/8TKKu01usvqJBMGIg+zcIHgJ2tfIF+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKpcKdd2ouxx9mMDi+7si6kulriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBjOWJjZmYtOTU0Yy0z ZDU0LThhZDMtZWYwZWRlNDU2ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7IX827tcaq5sKnpxTjRT+4tgCslqCsOuP/2j1nDDGEO5UyNYZnf7Tk 94SO4/2iwVpzI6Kq1HDvoQxQ9XiGZq7/PXXSxqmiH0DYRkZNoNBP3rv83/Zo6rUl 1lpdVwC5nm//ldVK4eGYpIZ+Uk+G2/xYh4gJkqg291zsHfwRqrblq2B/lB5NMs8a 3C1Es9Qk+VWQ0JhthdA4BCfoNThJFLGjloe1/0HS1qfR+IH0yvoWPon7ftT6S5Mt 8lnD7XZoGRpCiRxcA7tcY5QacN+VOAB2cb+iV5UuE77hRLjcQ9h5HloJOjgcZF/6 k5M3pV5Vs3XVZ/xh3x541mkIe9EvJ7I= -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:59 2025 by rpki-client