$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cf6971-546a-33c1-aa83-1fd96ef5a137.roa File: 32cf6971-546a-33c1-aa83-1fd96ef5a137.roa (raw, json) Hash identifier: Ctl342NaaE+LTB1mbY9BRw2bddU9rJU4wptxZbQtomg= Subject key identifier: 88:24:5F:74:FE:7D:8F:6A:58:41:1B:10:50:06:AF:BB:7D:96:93:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E5B61B597524666DDB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cf6971-546a-33c1-aa83-1fd96ef5a137.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 31984 IP address blocks: 173.222.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5b:61:b5:97:52:46:66:dd:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=fee2dfa0-ac60-4aae-baae-2641357a0f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:d1:57:91:83:f8:91:00:81:ea:dc:17:5d: 60:76:30:76:8f:32:2f:8a:e6:a0:ea:a3:01:ae:3b: b9:82:54:5f:64:06:47:dc:7c:2e:c6:a9:6f:5d:cb: b0:7e:ac:7f:9b:5c:ef:e8:1b:a2:04:33:80:64:a4: fc:48:1f:b0:2d:4e:b2:81:3d:50:10:78:36:00:d1: ca:cc:41:e9:61:99:34:6d:c5:06:a0:af:24:7d:03: d7:4b:8b:fe:41:7c:24:7c:a7:0a:f1:42:9e:fe:78: 6d:d1:3b:fb:61:aa:5f:c8:a8:be:73:26:e8:e8:ad: ba:2e:02:a4:b2:bd:56:09:48:ab:89:28:18:ed:bb: 0b:b0:8a:9f:be:da:6c:d9:8f:c7:03:f6:c9:d7:c7: 11:c9:10:a9:13:43:45:49:35:b6:8a:08:14:0c:03: 9c:c9:08:bf:1f:38:f4:ca:31:bd:98:3b:1f:82:2a: be:5f:89:15:de:73:96:d5:1d:b0:95:32:00:8d:97: c0:39:12:ca:f2:30:65:67:22:76:a7:12:bc:50:06: 22:f1:4b:4b:69:42:45:26:65:e3:0c:f6:20:95:4c: 21:f2:a0:3a:e6:16:1d:ef:9d:52:51:17:79:29:20: d6:2d:52:17:6b:1b:92:14:53:81:0b:f8:4c:1c:58: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:5F:74:FE:7D:8F:6A:58:41:1B:10:50:06:AF:BB:7D:96:93:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cf6971-546a-33c1-aa83-1fd96ef5a137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:54:cb:29:a8:64:9e:69:22:73:42:37:e1:4c:57:34:5e:81: c6:c1:e1:52:da:2d:53:65:69:ab:61:c6:81:2e:c5:20:cf:3f: 72:01:a5:c2:91:7e:48:2d:d9:60:75:7d:66:1f:da:2d:e6:d2: 4a:a4:8d:77:28:b5:7c:53:60:66:3a:89:1e:66:d4:32:8a:31: cb:9b:ce:93:13:d5:d9:a7:dc:b4:e6:72:1d:0c:75:35:cb:90: 3e:eb:33:62:47:e8:25:fa:71:3b:67:cc:47:49:53:1c:a6:94: 45:98:a2:ac:30:c0:53:a0:18:fe:c7:3d:46:f0:57:72:04:cb: 08:7d:61:0e:5f:0a:f2:75:67:04:a4:0f:22:fc:7e:10:65:7a: 15:bd:ba:00:70:e0:90:72:e4:37:ed:3f:a8:11:87:f7:88:8f: f3:78:b9:b6:90:9c:be:60:92:11:43:ad:5d:3e:82:41:00:9b: 5c:e7:97:05:4e:e9:7f:22:a1:f1:aa:84:43:ce:d6:fd:af:d2: 59:63:5b:06:ab:88:4e:0e:90:67:38:71:95:23:e8:54:36:eb: 9c:46:6e:fb:62:63:22:4d:f9:7c:27:cc:40:2c:f3:1b:e5:21: b8:e0:96:b9:0d:4d:2b:26:f3:82:56:4d:f2:af:8b:c2:8f:6c: 24:6e:81:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflthtZdSRmbdsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmVlMmRmYTAtYWM2MC00YWFlLWJhYWUtMjY0MTM1N2EwZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcLRV5GD+JEAgercF11gdjB2jzIviuag6qMB rju5glRfZAZH3HwuxqlvXcuwfqx/m1zv6BuiBDOAZKT8SB+wLU6ygT1QEHg2ANHK zEHpYZk0bcUGoK8kfQPXS4v+QXwkfKcK8UKe/nht0Tv7YapfyKi+cybo6K26LgKk sr1WCUiriSgY7bsLsIqfvtps2Y/HA/bJ18cRyRCpE0NFSTW2iggUDAOcyQi/Hzj0 yjG9mDsfgiq+X4kV3nOW1R2wlTIAjZfAORLK8jBlZyJ2pxK8UAYi8UtLaUJFJmXj DPYglUwh8qA65hYd751SURd5KSDWLVIXaxuSFFOBC/hMHFhOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgkX3T+fY9qWEEbEFAGr7t9lpPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjZjY5NzEtNTQ2YS0z M2MxLWFhODMtMWZkOTZlZjVhMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZUyymoZJ5pInNCN+FMVzRegcbB4VLaLVNlaathxoEuxSDPP3IBpcKR fkgt2WB1fWYf2i3m0kqkjXcotXxTYGY6iR5m1DKKMcubzpMT1dmn3LTmch0MdTXL kD7rM2JH6CX6cTtnzEdJUxymlEWYoqwwwFOgGP7HPUbwV3IEywh9YQ5fCvJ1ZwSk DyL8fhBlehW9ugBw4JBy5DftP6gRh/eIj/N4ubaQnL5gkhFDrV0+gkEAm1znlwVO 6X8iofGqhEPO1v2v0lljWwariE4OkGc4cZUj6FQ265xGbvtiYyJN+XwnzEAs8xvl IbjglrkNTSsm84JWTfKvi8KPbCRugTM= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:28 2025 by rpki-client