$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa File: 28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa (raw, json) Hash identifier: y27woC9mbDQFatfKwAQZLYleN1QQNnJitt8FDwxIt9E= Subject key identifier: AF:2B:FA:BA:19:81:8B:CD:BE:89:AE:36:C0:04:DF:E5:C1:2C:93:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584910E1863BA7FE3ACD30C79580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 16625 IP address blocks: 173.223.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:86:3b:a7:fe:3a:cd:30:c7:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=dcf442a5-47f8-4435-85f5-ee0dce49db3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:bb:d6:4c:80:e0:44:a2:e6:3f:d5:91:47: 0c:06:87:65:af:25:eb:85:61:5b:ea:7b:45:de:1f: 75:21:52:2d:4f:52:d3:dc:b1:f2:0e:74:f6:6e:c2: 15:d7:37:3b:74:d1:56:17:ce:8a:cf:29:0e:8a:fe: 55:86:27:22:f2:78:49:2f:1c:74:bb:7c:ed:7c:a7: 99:ce:87:28:d2:25:bb:26:63:67:c3:b5:6d:d8:3b: 9f:1f:0e:c9:48:a2:2f:38:28:02:01:fb:08:ac:dd: 4c:42:92:2b:b0:e0:45:ca:78:83:d3:78:e2:20:bb: 13:b5:31:5f:bd:15:43:bd:61:9e:e4:0e:83:38:46: a4:c7:22:e4:9d:44:a8:b2:5a:37:06:95:f2:af:d4: 31:3f:d2:85:02:bb:41:c8:ce:b7:80:09:be:de:cb: 6b:4d:73:b3:9b:65:2d:24:d2:92:0f:69:d5:97:c1: 10:55:e9:be:c3:dd:92:3c:4a:a9:f9:d2:66:e4:b2: 3a:5a:c9:a4:7b:24:65:e8:0c:32:e8:24:59:67:43: 4a:a6:75:68:3e:53:ca:de:2b:1a:5d:b6:1e:66:10: 51:98:1a:72:50:24:a4:7f:dc:ed:43:cd:b7:d5:cf: 27:8b:70:e9:18:51:6b:f8:f0:cc:10:7e:47:5f:de: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:FA:BA:19:81:8B:CD:BE:89:AE:36:C0:04:DF:E5:C1:2C:93:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:51:c0:16:22:76:4c:2d:9e:00:eb:a1:86:c4:f9:2d:a1:25: 8a:40:c4:a8:e8:84:d0:19:0f:1d:60:97:5f:58:dc:88:ba:5d: ae:f6:26:eb:f7:7d:ab:96:f8:75:c7:a0:03:11:67:af:ad:04: 45:05:74:63:81:ad:08:8d:01:eb:3c:ab:10:95:84:af:5c:33: 7c:85:26:f3:41:ea:45:4d:9d:18:89:36:1a:4f:93:b9:8f:a8: 6c:9c:bf:05:64:8a:5b:8b:07:93:56:6c:60:75:0e:33:99:21: 61:17:56:10:6e:fc:da:6c:fa:4d:5f:db:b9:38:a8:6a:cf:71: 65:c7:53:fa:7e:f7:f5:37:5c:08:d1:5f:31:db:c0:7e:6e:2e: 76:78:19:ce:2d:a9:f6:d9:b2:84:dc:a2:35:f2:47:c7:4d:cf: e5:be:43:72:d1:c3:14:25:d9:8e:39:95:32:b5:41:67:91:25: 22:c4:f4:d6:36:fc:83:51:bd:fb:90:b3:ae:05:2d:8d:c7:ea: 61:9f:32:0d:86:2d:cb:da:05:ce:9f:a9:e2:7b:9e:4d:ca:e5: c1:21:55:41:e5:7e:49:70:83:3a:ca:05:82:d1:4c:02:58:a0: ca:95:22:e0:16:f9:df:03:ac:2c:aa:3e:6f:f8:b8:aa:0f:17: 1a:b6:6b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4YY7p/46zTDHlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGNmNDQyYTUtNDdmOC00NDM1LTg1ZjUtZWUwZGNlNDlkYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+u71kyA4ESi5j/VkUcMBodlryXrhWFb6ntF 3h91IVItT1LT3LHyDnT2bsIV1zc7dNFWF86KzykOiv5Vhici8nhJLxx0u3ztfKeZ zoco0iW7JmNnw7Vt2DufHw7JSKIvOCgCAfsIrN1MQpIrsOBFyniD03jiILsTtTFf vRVDvWGe5A6DOEakxyLknUSoslo3BpXyr9QxP9KFArtByM63gAm+3strTXOzm2Ut JNKSD2nVl8EQVem+w92SPEqp+dJm5LI6WsmkeyRl6Awy6CRZZ0NKpnVoPlPK3isa XbYeZhBRmBpyUCSkf9ztQ8231c8ni3DpGFFr+PDMEH5HX959UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8r+roZgYvNvomuNsAE3+XBLJMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhhNDhmYTUtZTlkNi0z NjRmLTllZWQtZTQzYTMzYTRlMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtRwBYidkwtngDroYbE+S2hJYpAxKjohNAZDx1gl19Y3Ii6Xa72Juv3 fauW+HXHoAMRZ6+tBEUFdGOBrQiNAes8qxCVhK9cM3yFJvNB6kVNnRiJNhpPk7mP qGycvwVkiluLB5NWbGB1DjOZIWEXVhBu/Nps+k1f27k4qGrPcWXHU/p+9/U3XAjR XzHbwH5uLnZ4Gc4tqfbZsoTcojXyR8dNz+W+Q3LRwxQl2Y45lTK1QWeRJSLE9NY2 /INRvfuQs64FLY3H6mGfMg2GLcvaBc6fqeJ7nk3K5cEhVUHlfklwgzrKBYLRTAJY oMqVIuAW+d8DrCyqPm/4uKoPFxq2a98= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:21 2025 by rpki-client