$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa File: 310aa2b6-46c7-3c3f-be18-80729877d42a.roa (raw, json) Hash identifier: hssbcnjytXhkgz2RWsS2Efqp3a7HvcJYRWEBFd1KXSs= Subject key identifier: 41:78:9E:17:6F:E1:11:64:82:05:FA:96:AE:5E:CA:24:BB:E3:C6:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA12ABF6E42AB0C7B183800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.225.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2a:bf:6e:42:ab:0c:7b:18:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=688ec82a-9948-447c-9ced-e30c8f766b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:74:d4:96:73:9b:de:9f:6e:5d:ef:4a:c0: aa:f9:2a:37:5f:ed:46:38:8f:09:24:d3:91:36:b4: 31:4f:6c:d1:ce:53:7c:f8:52:8c:bb:ca:d0:8a:2c: 42:23:60:22:d7:69:ff:95:38:f3:0e:8a:b7:d4:c7: 38:e2:ef:e2:c0:bd:c0:cf:94:91:1d:ae:98:2c:ff: 07:0f:10:25:e5:ff:31:73:83:47:2e:04:94:b1:64: 10:21:e3:ec:a5:22:80:3f:79:91:ee:76:d7:17:9e: e4:3b:90:b0:a2:3b:7e:df:d4:5b:6c:60:b1:8e:28: a3:4e:7f:6b:f3:9e:66:5c:e7:5d:d8:9b:12:de:63: 82:e6:01:58:b6:a1:d9:41:49:df:09:f5:10:d9:67: 94:94:ee:67:d5:35:fb:06:7d:d6:d5:87:5f:c8:80: b0:eb:74:b9:aa:66:a3:b2:00:81:c6:9a:87:b4:a6: 50:d6:73:ca:72:b8:76:e4:a2:84:67:3c:03:6f:5a: f9:69:3e:a5:38:8d:4d:6d:6a:25:c5:01:d0:dc:e0: df:83:8d:66:a4:b2:29:a9:7f:cb:fe:f0:d9:03:d9: c5:3a:4a:55:3e:ee:43:ff:3a:67:dc:46:cc:11:b0: 2b:b5:9d:9c:98:fa:5d:20:7e:b7:5a:00:2d:be:f4: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:9E:17:6F:E1:11:64:82:05:FA:96:AE:5E:CA:24:BB:E3:C6:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:99:1b:67:85:aa:32:0d:d3:fd:11:c5:1e:be:71:e7:13:be: fd:b7:62:63:5e:29:c0:eb:28:60:4c:a5:e4:38:c5:03:06:f2: 66:4c:fd:ec:9e:a3:09:76:69:7c:34:fb:d9:b4:c3:43:7c:1d: 74:c7:97:22:6d:9e:66:00:5f:a5:61:dd:70:8f:3f:1a:5c:a0: b1:62:13:a0:05:fb:35:79:90:2b:9f:5f:73:e6:cd:ce:ee:e4: e6:af:c4:97:94:46:b1:dd:b3:45:6d:bb:55:1b:1d:4c:7a:70: 1d:4c:80:94:25:f1:ff:2e:54:24:52:2c:14:fb:ec:25:61:49: 54:74:bf:e8:78:04:3a:09:86:84:d7:87:f9:56:24:4a:25:3b: 8d:e7:47:36:d8:c9:12:eb:b0:8e:05:ea:b1:64:de:74:36:15: d5:96:be:ca:72:38:69:48:5d:cd:1c:68:a7:f1:29:2b:5b:b1: 3b:bf:42:e6:b4:ea:04:75:1e:0b:00:95:74:2a:bd:c7:69:10: df:73:15:45:be:c9:04:e1:9c:49:72:f7:78:c8:05:aa:91:62: d2:90:9d:ee:30:8c:f3:76:46:9e:62:9c:c0:fe:94:3d:c6:ff: 60:5a:7b:8d:85:42:90:bc:fd:69:8c:b0:a1:c3:3a:c2:39:58: 89:f4:bb:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSq/bkKrDHsYOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk Njg4ZWM4MmEtOTk0OC00NDdjLTljZWQtZTMwYzhmNzY2YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocJ01JZzm96fbl3vSsCq+So3X+1GOI8JJNOR NrQxT2zRzlN8+FKMu8rQiixCI2Ai12n/lTjzDoq31Mc44u/iwL3Az5SRHa6YLP8H DxAl5f8xc4NHLgSUsWQQIePspSKAP3mR7nbXF57kO5Cwojt+39RbbGCxjiijTn9r 855mXOdd2JsS3mOC5gFYtqHZQUnfCfUQ2WeUlO5n1TX7Bn3W1YdfyICw63S5qmaj sgCBxpqHtKZQ1nPKcrh25KKEZzwDb1r5aT6lOI1NbWolxQHQ3ODfg41mpLIpqX/L /vDZA9nFOkpVPu5D/zpn3EbMEbArtZ2cmPpdIH63WgAtvvRhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF4nhdv4RFkggX6lq5eyiS748bqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEwYWEyYjYtNDZjNy0z YzNmLWJlMTgtODA3Mjk4NzdkNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGZG2eFqjIN0/0RxR6+cecTvv23YmNeKcDrKGBMpeQ4xQMG8mZM/eye owl2aXw0+9m0w0N8HXTHlyJtnmYAX6Vh3XCPPxpcoLFiE6AF+zV5kCufX3Pmzc7u 5OavxJeURrHds0Vtu1UbHUx6cB1MgJQl8f8uVCRSLBT77CVhSVR0v+h4BDoJhoTX h/lWJEolO43nRzbYyRLrsI4F6rFk3nQ2FdWWvspyOGlIXc0caKfxKStbsTu/Qua0 6gR1HgsAlXQqvcdpEN9zFUW+yQThnEly93jIBaqRYtKQne4wjPN2Rp5inMD+lD3G /2Bae42FQpC8/WmMsKHDOsI5WIn0u6Q= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:42 2025 by rpki-client