$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa File: 29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa (raw, json) Hash identifier: gm47wQHmawgC9Iptmmv8wLDzDV97LoYoN7ltBBqqsNk= Subject key identifier: F5:55:D9:D5:50:1D:15:8A:12:9A:BB:8B:E8:64:00:14:70:4F:7A:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614E0358CF2A30EAB8C500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4e:03:58:cf:2a:30:ea:b8:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=e96b308a-81c5-413f-b3cd-09630abde9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:a5:49:02:d3:db:0f:c6:ff:26:d1:64:62: 8b:97:4b:c7:02:2c:83:7c:a9:fa:28:c6:ee:0d:47: d1:24:1c:e3:4b:bb:26:32:73:0a:b9:a7:a0:ed:32: cb:bf:39:c7:74:1b:ce:39:1c:9f:29:5b:36:a2:f4: c0:f0:98:aa:37:32:6b:3a:62:29:c6:db:aa:0b:7d: b3:ac:11:f1:46:4c:34:71:6e:42:3b:f9:8e:24:fb: c6:64:3b:ef:98:b4:5a:2f:2b:33:b9:05:7e:3e:dc: 24:e0:0c:be:64:8c:1c:8b:13:7c:1b:1d:e5:73:e5: 39:ef:f3:19:28:a3:5a:5b:7f:3a:b5:34:69:f5:ee: b8:f8:3f:95:d7:6e:5c:46:b8:63:4a:d2:e9:f2:1b: 96:df:a5:08:cc:a8:73:a7:d9:54:5e:fa:64:5d:7b: 0c:e6:9c:1a:f2:5f:81:20:18:69:74:6c:08:aa:80: c7:3d:78:95:2e:7c:65:e5:98:63:97:96:6e:a0:7c: 6a:25:ac:bf:cc:65:45:5f:a3:a2:b1:b8:59:02:ae: 4d:ed:fe:d0:46:fb:1c:1d:2d:8e:b3:51:57:03:ad: c6:68:40:b1:95:8d:ef:b5:dc:a8:a7:f3:b0:ea:8e: f1:f7:aa:50:bc:58:a2:8b:c3:6d:bf:77:45:69:cd: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:D9:D5:50:1D:15:8A:12:9A:BB:8B:E8:64:00:14:70:4F:7A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:90:3d:2a:3a:88:0c:0c:2a:5f:1d:1b:9f:e9:21:a2:02:d7: f6:c6:02:57:3f:43:24:4c:8a:82:c6:26:a3:10:05:d9:9c:da: e4:b1:c4:96:25:47:54:f3:d3:a1:9f:50:2b:60:67:24:9a:02: c8:bc:39:92:67:5b:e1:41:1e:14:84:28:fc:a1:90:b4:4f:41: 5c:08:bd:c3:eb:ed:e4:ce:1c:49:c2:d3:55:04:78:69:d0:25: 7e:2c:6c:68:21:e3:2c:6b:ae:fe:dd:ed:3a:13:97:6f:15:32: 34:3b:7e:f2:d6:a6:9e:15:c1:90:4c:11:2e:ef:e2:0e:15:5d: af:2f:22:bd:21:36:93:18:29:25:37:35:29:01:20:87:dd:84: d9:2c:6b:87:6b:bf:b9:56:3b:75:28:66:f2:de:47:47:5b:db: af:ba:58:15:58:7c:0d:24:a5:5b:27:11:c8:f2:26:b4:29:a7: c0:bd:c1:de:51:24:51:79:53:c9:61:32:a5:f2:cf:c8:b4:f0: 3f:f9:40:0b:e7:c1:0c:e2:0c:14:61:7e:17:77:14:a6:ab:c4: c6:62:c8:d9:90:3d:ad:be:c9:7f:ec:4a:19:98:a5:df:6b:0f: c2:a6:96:a0:72:31:da:2b:25:a6:3d:c1:2d:af:81:be:b8:2e: 26:b2:a3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU4DWM8qMOq4xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTk2YjMwOGEtODFjNS00MTNmLWIzY2QtMDk2MzBhYmRlOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4alSQLT2w/G/ybRZGKLl0vHAiyDfKn6KMbu DUfRJBzjS7smMnMKuaeg7TLLvznHdBvOORyfKVs2ovTA8JiqNzJrOmIpxtuqC32z rBHxRkw0cW5CO/mOJPvGZDvvmLRaLyszuQV+Ptwk4Ay+ZIwcixN8Gx3lc+U57/MZ KKNaW386tTRp9e64+D+V125cRrhjStLp8huW36UIzKhzp9lUXvpkXXsM5pwa8l+B IBhpdGwIqoDHPXiVLnxl5Zhjl5ZuoHxqJay/zGVFX6OisbhZAq5N7f7QRvscHS2O s1FXA63GaECxlY3vtdyop/Ow6o7x96pQvFiii8Ntv3dFac3ozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVV2dVQHRWKEpq7i+hkABRwT3qdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlmYTAwZGQtYTRjNC0z OWExLWJiZmEtYzA1ZTU1Y2Q5MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+QPSo6iAwMKl8dG5/pIaIC1/bGAlc/QyRMioLGJqMQBdmc2uSxxJYl R1Tz06GfUCtgZySaAsi8OZJnW+FBHhSEKPyhkLRPQVwIvcPr7eTOHEnC01UEeGnQ JX4sbGgh4yxrrv7d7ToTl28VMjQ7fvLWpp4VwZBMES7v4g4VXa8vIr0hNpMYKSU3 NSkBIIfdhNksa4drv7lWO3UoZvLeR0db26+6WBVYfA0kpVsnEcjyJrQpp8C9wd5R JFF5U8lhMqXyz8i08D/5QAvnwQziDBRhfhd3FKarxMZiyNmQPa2+yX/sShmYpd9r D8KmlqByMdorJaY9wS2vgb64LiayowU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:37 2025 by rpki-client