$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa File: 2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa (raw, json) Hash identifier: vXaSm51zr8dSqcUXh9IOyxbFShA9fh74T5P6GgkcoXc= Subject key identifier: 81:15:1B:46:20:34:F5:D0:B7:B6:36:52:4D:8C:27:30:66:CB:80:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614E3DE87009D543F3BD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4e:3d:e8:70:09:d5:43:f3:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=64d3b681-c060-4d55-ad9d-719491b4968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:8c:8d:6e:53:e7:c7:30:7d:f8:3e:8c:50: ba:9b:f0:fb:34:86:f7:77:76:63:ff:00:b0:e4:bb: a6:71:ca:d6:01:ed:c9:75:3f:9b:6a:c7:6c:46:e4: 19:e5:17:50:b4:ec:fa:87:76:fa:80:4d:41:60:a9: 67:28:aa:6f:e4:be:b3:a3:bc:18:a9:de:67:95:0b: 8f:bc:b6:f7:9e:40:89:77:fe:97:5f:9f:75:35:e9: cc:35:f3:0a:64:12:48:5d:7e:92:7a:d9:f9:74:ba: 3d:27:bd:ad:5a:8b:41:34:d3:85:1f:a5:bd:75:20: 46:ef:96:ca:42:8a:04:8e:a3:52:50:18:ae:9d:c1: 12:11:d0:4c:cb:cd:8c:2a:b8:66:0b:26:3a:c6:b8: 35:c8:f7:a7:8f:66:90:31:ec:3b:5d:ad:b8:90:28: 61:d1:80:51:77:e1:ed:81:c2:49:a3:6c:64:85:40: f7:a2:98:bc:87:b3:5c:f7:ba:41:11:9a:48:60:09: 01:00:67:4c:8b:ba:f5:3e:91:29:f8:94:da:88:4d: 02:62:b0:f4:05:ba:f1:c6:9b:de:dd:18:a3:7e:7d: 5a:d7:13:1d:c2:74:e2:b3:7c:81:fb:9e:52:32:0d: 86:76:55:fb:55:00:71:30:81:4c:15:5f:7f:8b:e5: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:15:1B:46:20:34:F5:D0:B7:B6:36:52:4D:8C:27:30:66:CB:80:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:30:21:ee:cc:ee:ed:90:7d:47:58:92:4d:47:70:98:02:86: 54:af:3f:fd:b4:7f:00:a1:aa:11:56:1f:56:7e:84:24:77:25: d1:22:2a:1f:73:db:ff:f7:87:14:1c:83:0f:39:b1:09:e8:98: 20:ba:e8:ba:b7:77:4c:bd:56:47:9a:7d:9b:22:d4:71:5c:00: 79:f2:5f:33:da:41:28:7e:67:10:a3:8b:4f:da:fa:20:21:ce: 0d:3b:31:13:1b:64:4e:d0:ec:de:80:cb:e9:6b:49:e6:fd:34: 72:1e:ba:f9:cc:71:e4:50:5b:80:4e:e3:fb:f6:25:19:eb:81: 7f:f5:0c:52:a3:aa:39:3e:10:b0:68:b4:08:d1:ad:09:ac:45: 1a:6d:0d:05:45:47:92:80:e3:0f:9b:18:7b:7a:7f:29:7b:1a: 00:09:ef:b3:4d:6e:79:e9:4e:a3:09:0c:d3:aa:24:54:5b:d9: 44:22:5d:6c:b7:61:bf:f7:91:79:83:f5:fb:1f:ef:56:cb:b9: e0:6a:79:41:36:ee:17:68:df:cf:2f:86:0f:af:ab:c0:98:3f: 1b:af:03:ac:58:e4:ba:a7:d8:99:9a:75:5b:a2:2c:ca:97:db: cc:24:eb:c2:36:2d:4d:4d:db:cd:c8:36:44:96:ae:42:4b:8a: 44:ce:d0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU496HAJ1UPzvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NjRkM2I2ODEtYzA2MC00ZDU1LWFkOWQtNzE5NDkxYjQ5NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrOMjW5T58cwffg+jFC6m/D7NIb3d3Zj/wCw 5LumccrWAe3JdT+basdsRuQZ5RdQtOz6h3b6gE1BYKlnKKpv5L6zo7wYqd5nlQuP vLb3nkCJd/6XX591NenMNfMKZBJIXX6Setn5dLo9J72tWotBNNOFH6W9dSBG75bK QooEjqNSUBiuncESEdBMy82MKrhmCyY6xrg1yPenj2aQMew7Xa24kChh0YBRd+Ht gcJJo2xkhUD3opi8h7Nc97pBEZpIYAkBAGdMi7r1PpEp+JTaiE0CYrD0Bbrxxpve 3Rijfn1a1xMdwnTis3yB+55SMg2GdlX7VQBxMIFMFV9/i+UwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEVG0YgNPXQt7Y2Uk2MJzBmy4C/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmMmE2NDEtZGRkOS0z MDkyLThmYmItZDlmYTE0OGUzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8wIe7M7u2QfUdYkk1HcJgChlSvP/20fwChqhFWH1Z+hCR3JdEiKh9z 2//3hxQcgw85sQnomCC66Lq3d0y9VkeafZsi1HFcAHnyXzPaQSh+ZxCji0/a+iAh zg07MRMbZE7Q7N6Ay+lrSeb9NHIeuvnMceRQW4BO4/v2JRnrgX/1DFKjqjk+ELBo tAjRrQmsRRptDQVFR5KA4w+bGHt6fyl7GgAJ77NNbnnpTqMJDNOqJFRb2UQiXWy3 Yb/3kXmD9fsf71bLueBqeUE27hdo388vhg+vq8CYPxuvA6xY5Lqn2JmadVuiLMqX 28wk68I2LU1N283INkSWrkJLikTO0Ew= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:48 2025 by rpki-client