$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa File: 31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa (raw, json) Hash identifier: LnMQhz+YJ8njb70onRQjToAgpg/FDEWynM+bgA/TPos= Subject key identifier: EB:53:FE:EC:53:12:77:96:13:42:12:57:4A:08:9D:DE:10:BB:3F:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF14690969C4543207C90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f1:46:90:96:9c:45:43:20:7c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=cb60b4ed-2eb2-41fd-8ef0-cb36da7d32c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:85:0c:1c:89:60:81:a3:96:a4:db:68:c7: 7a:b5:6c:95:91:1c:e2:73:e9:54:85:62:f9:29:f4: 64:3e:9e:36:8d:82:48:eb:64:2e:72:9d:3b:57:e0: 05:0a:2d:ac:1a:04:72:22:bd:f1:5e:43:48:6d:10: 86:5e:0f:0e:60:76:03:b0:49:e7:f5:c0:f1:8b:f6: 4a:30:0f:ab:7c:b8:52:56:10:3f:ba:fe:fc:09:7d: 11:0c:2b:29:33:79:72:60:ca:ab:53:80:60:89:bc: 91:90:89:d8:ec:30:3c:66:90:1d:96:77:c4:66:fc: ff:b2:52:82:60:4c:bc:c3:ff:d9:4b:e5:01:df:bc: da:d1:22:36:53:63:a3:1a:25:df:2c:58:61:b1:76: 2b:ad:fd:18:62:f4:0a:84:12:27:9a:e2:33:ec:f2: a8:82:74:a6:ba:4a:6d:ba:69:0a:9d:90:8c:b7:4e: ea:60:81:70:c3:28:85:22:58:67:b6:54:09:0d:ce: 5e:1b:4f:53:3b:30:2c:a5:a9:94:61:69:9d:6e:c0: 27:64:7a:17:b6:b0:46:87:c1:89:a1:5a:a8:d3:27: f9:6d:b3:c1:b1:68:54:2e:1a:a3:3e:a5:fd:41:ba: b0:85:ee:e6:94:e3:de:18:4b:ac:23:51:13:7c:dc: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:53:FE:EC:53:12:77:96:13:42:12:57:4A:08:9D:DE:10:BB:3F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:60:7b:70:85:cb:61:25:48:98:c5:e1:23:f7:68:62:6f:e7: d8:b2:90:77:03:94:1b:47:c5:2d:3d:67:e3:79:70:c4:05:49: a5:88:be:be:7b:7e:8e:16:b3:ae:b2:0a:c9:51:c4:36:07:b8: 08:1a:2d:c2:d2:80:6e:59:32:a0:72:bf:36:e0:47:65:40:c4: 54:06:3f:a0:00:f1:e0:73:21:b4:9c:75:67:69:c6:aa:92:8d: 0e:1a:0e:17:33:e3:53:65:36:e0:7a:29:1f:5c:b0:61:b3:fa: e9:0d:41:84:dd:ca:88:87:1e:b2:02:0f:2c:df:fa:e7:b2:d0: 8b:e8:3b:57:ea:80:9d:01:b5:b2:cb:bb:e6:36:14:bf:d4:18: 01:80:c9:49:0e:01:c6:e5:17:bd:e3:13:62:d5:0b:34:ec:00: f4:3b:bd:82:f2:9d:0f:be:7c:31:51:80:7b:f6:f8:08:f2:f2: 97:23:a5:3a:34:18:f4:eb:e8:59:e1:12:ce:29:09:31:10:33: 6d:49:5e:de:1d:9a:3c:a8:82:ce:87:c7:93:7e:41:48:83:79: 29:21:b0:ec:29:69:f6:6f:88:4d:f3:7c:40:76:a2:18:37:00: 9e:3f:da:87:33:6a:7b:ad:32:3d:be:31:39:30:97:c2:fc:e2: 66:65:fe:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/FGkJacRUMgfJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Y2I2MGI0ZWQtMmViMi00MWZkLThlZjAtY2IzNmRhN2QzMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzGFDByJYIGjlqTbaMd6tWyVkRzic+lUhWL5 KfRkPp42jYJI62Qucp07V+AFCi2sGgRyIr3xXkNIbRCGXg8OYHYDsEnn9cDxi/ZK MA+rfLhSVhA/uv78CX0RDCspM3lyYMqrU4BgibyRkInY7DA8ZpAdlnfEZvz/slKC YEy8w//ZS+UB37za0SI2U2OjGiXfLFhhsXYrrf0YYvQKhBInmuIz7PKognSmukpt umkKnZCMt07qYIFwwyiFIlhntlQJDc5eG09TOzAspamUYWmdbsAnZHoXtrBGh8GJ oVqo0yf5bbPBsWhULhqjPqX9Qbqwhe7mlOPeGEusI1ETfNxz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtT/uxTEneWE0ISV0oInd4Quz+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFlMjg0NGItMTZjYi0z ZDE5LWEwYjMtZTZjMzkzMDFjMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRge3CFy2ElSJjF4SP3aGJv59iykHcDlBtHxS09Z+N5cMQFSaWIvr57 fo4Ws66yCslRxDYHuAgaLcLSgG5ZMqByvzbgR2VAxFQGP6AA8eBzIbScdWdpxqqS jQ4aDhcz41NlNuB6KR9csGGz+ukNQYTdyoiHHrICDyzf+uey0IvoO1fqgJ0BtbLL u+Y2FL/UGAGAyUkOAcblF73jE2LVCzTsAPQ7vYLynQ++fDFRgHv2+Ajy8pcjpTo0 GPTr6FnhEs4pCTEQM21JXt4dmjyogs6Hx5N+QUiDeSkhsOwpafZviE3zfEB2ohg3 AJ4/2oczanutMj2+MTkwl8L84mZl/hc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:47 2025 by rpki-client