$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ccc3983-ef64-3cc7-a48b-c9e663ac57d7.roa File: 2ccc3983-ef64-3cc7-a48b-c9e663ac57d7.roa (raw, json) Hash identifier: qqA43/fsr8OsrZ3MWxjII+/xeLo7cLatWWElk99jdOg= Subject key identifier: AE:1D:EB:7F:5C:B2:13:2E:A8:F2:18:8E:EB:3F:D7:77:D9:CE:A8:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849244E872C4D6BDF8D60FB9700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ccc3983-ef64-3cc7-a48b-c9e663ac57d7.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 63949 IP address blocks: 172.236.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:87:2c:4d:6b:df:8d:60:fb:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=3f7c0d11-24f1-4425-acab-5cb4757e8873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:48:60:1c:75:12:36:53:96:4e:78:fa:93: ce:85:24:36:42:3e:5e:28:47:db:a4:76:f4:58:97: 59:c0:56:c9:98:ca:86:2e:f9:b0:1c:a1:72:16:67: 02:3c:98:78:6a:98:20:69:72:50:a0:d1:2d:e0:b6: 55:1c:47:cf:d4:6e:df:3e:e0:ef:e1:a8:25:84:d8: e6:fd:d8:ee:e1:ba:ac:fc:8e:2d:05:7d:8d:bb:05: 97:20:7d:08:45:e0:2f:ae:c1:b3:6b:cf:23:a0:fc: 67:ad:cd:08:d8:27:d2:34:ca:50:7c:0c:a6:85:b3: 74:c9:bf:a7:ef:de:65:74:aa:9c:44:92:d0:dd:25: 40:87:7f:d4:33:ca:d7:6d:1c:ca:a0:e5:12:3e:6e: e2:65:fa:21:e7:f0:9b:02:5d:42:66:d9:15:2a:db: 52:84:ff:58:47:a2:55:9a:5a:d0:55:37:91:08:cb: 6e:a6:85:2e:8c:71:54:b1:ad:99:91:9c:6e:4e:24: 11:4c:9e:d0:f1:d7:2a:67:6e:b4:54:5d:bd:8a:40: 2a:7d:90:0f:03:28:31:62:0a:ba:38:ca:81:b7:99: b5:e0:52:e8:e9:7b:b4:e9:44:b8:e2:24:e5:ad:2c: 2f:06:47:4e:20:8f:91:a0:14:5a:c4:79:0d:b7:80: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1D:EB:7F:5C:B2:13:2E:A8:F2:18:8E:EB:3F:D7:77:D9:CE:A8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ccc3983-ef64-3cc7-a48b-c9e663ac57d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:26:fe:3c:65:2b:63:e3:1a:88:a9:1e:f4:59:c8:81:50:5b: 42:92:01:b5:1e:1c:0f:6d:db:2a:d4:48:a9:ae:18:a5:33:c1: 87:6a:f5:1d:1b:4f:cf:35:8b:97:08:39:26:ad:df:31:74:5c: e5:d6:cb:7a:68:5d:fa:2e:2a:43:3d:7b:f6:d9:53:c8:67:f2: fd:80:c1:41:b8:d4:76:82:50:95:8d:2c:71:ce:e3:93:b6:74: dc:e7:66:02:95:72:af:5e:b3:9d:fd:f9:ca:60:ba:b7:ed:19: 92:8e:65:a0:b9:6c:75:fd:8b:a8:e8:11:c3:75:07:26:73:bf: 9e:59:c5:34:ae:f1:16:9f:ce:90:18:a0:8f:73:41:02:97:54: 59:3a:1b:45:32:bb:cb:a1:2c:91:3c:cd:b6:12:0f:ef:b2:39: c7:56:89:20:ba:8c:be:dd:63:bc:1d:81:35:61:3f:db:e3:ed: a3:79:84:41:72:f3:82:95:e5:71:11:7b:e8:7c:69:44:85:8b: 64:72:96:ac:b3:dc:55:00:b6:68:9e:1b:38:5b:31:0b:20:1e: 10:02:d7:2d:3b:9c:6b:c2:24:d3:51:b5:31:85:95:ed:f8:e0: 5e:f3:78:c4:03:00:1d:35:94:29:95:1b:bb:70:19:fc:76:02: 98:74:43:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTocsTWvfjWD7lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk M2Y3YzBkMTEtMjRmMS00NDI1LWFjYWItNWNiNDc1N2U4ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC1IYBx1EjZTlk54+pPOhSQ2Qj5eKEfbpHb0 WJdZwFbJmMqGLvmwHKFyFmcCPJh4apggaXJQoNEt4LZVHEfP1G7fPuDv4aglhNjm /dju4bqs/I4tBX2NuwWXIH0IReAvrsGza88joPxnrc0I2CfSNMpQfAymhbN0yb+n 795ldKqcRJLQ3SVAh3/UM8rXbRzKoOUSPm7iZfoh5/CbAl1CZtkVKttShP9YR6JV mlrQVTeRCMtupoUujHFUsa2ZkZxuTiQRTJ7Q8dcqZ260VF29ikAqfZAPAygxYgq6 OMqBt5m14FLo6Xu06US44iTlrSwvBkdOII+RoBRaxHkNt4ACgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4d639cshMuqPIYjus/13fZzqigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNjYzM5ODMtZWY2NC0z Y2M3LWE0OGItYzllNjYzYWM1N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQm/jxlK2PjGoipHvRZyIFQW0KSAbUeHA9t2yrUSKmuGKUzwYdq9R0b T881i5cIOSat3zF0XOXWy3poXfouKkM9e/bZU8hn8v2AwUG41HaCUJWNLHHO45O2 dNznZgKVcq9es539+cpgurftGZKOZaC5bHX9i6joEcN1ByZzv55ZxTSu8RafzpAY oI9zQQKXVFk6G0Uyu8uhLJE8zbYSD++yOcdWiSC6jL7dY7wdgTVhP9vj7aN5hEFy 84KV5XERe+h8aUSFi2Rylqyz3FUAtmieGzhbMQsgHhAC1y07nGvCJNNRtTGFle34 4F7zeMQDAB01lCmVG7twGfx2Aph0QyQ= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:50 2025 by rpki-client