$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354c65b5-a551-3fa2-b7a5-9d39909688c0.roa File: 354c65b5-a551-3fa2-b7a5-9d39909688c0.roa (raw, json) Hash identifier: 01+HmjJqA7NlhgoU9vUJi2X7/GHVOPb1RQPCbEo4MDM= Subject key identifier: DE:7A:ED:7B:6E:BF:95:BB:A7:2D:B9:68:6A:4E:E9:5C:AB:C7:9A:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849002151F2E161684F41C55080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354c65b5-a551-3fa2-b7a5-9d39909688c0.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 173.223.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:51:f2:e1:61:68:4f:41:c5:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=2fdc7bbc-5342-47f4-8fd8-99784f106670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:19:c7:b7:82:2a:96:b8:cd:49:5a:a5:e3: 76:5e:a5:a4:c5:eb:cb:af:15:44:8f:60:7c:e9:f3: 72:35:25:25:8a:40:3b:01:7f:70:0a:33:38:92:b4: 22:05:22:14:4b:44:3a:39:b6:55:b0:f7:2e:d5:42: 06:b1:0f:bf:9c:4f:60:71:1e:f4:a8:dd:46:00:c0: 34:c1:ef:8e:ac:2d:c5:47:92:90:80:0f:b6:7e:66: ce:86:85:ee:20:c7:d4:46:f6:9a:f9:62:ee:fb:7a: fc:7d:c8:08:52:23:65:5a:7e:24:26:49:cc:74:d2: 67:d0:44:a4:8a:fc:7e:ea:a5:ff:c4:30:4f:5a:7c: 76:e0:ae:8b:62:be:39:9c:74:57:c2:dc:3f:4a:f0: d4:ad:3a:5d:5b:64:3e:c5:59:a9:b9:42:7b:5d:8a: b2:b1:d1:66:6c:60:b5:2c:e7:ac:ee:bc:76:6d:db: ce:75:a4:51:0d:a3:1d:fa:5a:2f:79:08:3d:c0:88: ba:51:6e:b9:92:ce:3a:f2:1a:e7:c0:ee:6b:79:e8: 0f:73:b3:0b:f9:9b:a8:c4:ce:b1:c8:9a:b9:86:95: de:28:76:65:9d:9f:80:ea:cd:83:da:ed:7b:ee:a8: 64:fd:60:ee:50:29:11:3c:50:1b:53:3e:53:68:ad: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:ED:7B:6E:BF:95:BB:A7:2D:B9:68:6A:4E:E9:5C:AB:C7:9A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/354c65b5-a551-3fa2-b7a5-9d39909688c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a8:35:c1:5c:60:08:d6:ea:57:80:77:f3:8c:43:ef:a7:50: 32:f5:1c:0b:9a:f9:e8:c2:72:3c:8b:57:cb:47:70:e6:01:a4: fc:48:48:b0:0d:db:d8:23:e5:a0:57:61:09:da:f1:53:67:ae: 5f:34:a6:ef:dc:4e:e7:16:26:af:e0:c0:e3:56:96:16:a2:e5: 95:0b:be:64:ce:a3:c6:e1:d4:7e:d3:15:c5:af:7e:95:11:75: 91:93:70:45:8a:95:35:d0:e7:30:ad:fd:bd:0d:66:ea:de:33: 70:69:0a:02:58:a6:75:9d:8e:1d:6f:c4:13:33:06:80:53:bc: b0:5b:1e:29:1e:15:30:c7:2c:c3:1f:3a:ab:98:39:ce:7a:8f: 26:64:33:60:ee:4a:a1:73:45:4d:1b:c3:61:22:1a:ee:13:43: 78:c9:24:70:47:68:a7:e7:f0:94:29:19:dc:c6:a1:2b:58:84: cf:d7:b6:a7:78:99:fb:e8:69:af:b0:46:a8:f4:79:4b:5c:7d: 31:d8:1b:4b:18:c6:04:f3:35:9f:ab:93:c0:b1:31:d5:be:fc: f9:67:2a:c3:ac:49:67:e4:4b:1c:8f:e3:e7:25:38:f7:2a:a0: b3:b4:c5:61:02:3b:be:4a:96:a1:2c:2d:e4:bd:fd:49:d2:26: 8f:bf:91:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVHy4WFoT0HFUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MmZkYzdiYmMtNTM0Mi00N2Y0LThmZDgtOTk3ODRmMTA2NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkZx7eCKpa4zUlapeN2XqWkxevLrxVEj2B8 6fNyNSUlikA7AX9wCjM4krQiBSIUS0Q6ObZVsPcu1UIGsQ+/nE9gcR70qN1GAMA0 we+OrC3FR5KQgA+2fmbOhoXuIMfURvaa+WLu+3r8fcgIUiNlWn4kJknMdNJn0ESk ivx+6qX/xDBPWnx24K6LYr45nHRXwtw/SvDUrTpdW2Q+xVmpuUJ7XYqysdFmbGC1 LOes7rx2bdvOdaRRDaMd+loveQg9wIi6UW65ks468hrnwO5reegPc7ML+ZuoxM6x yJq5hpXeKHZlnZ+A6s2D2u177qhk/WDuUCkRPFAbUz5TaK2sMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN567Xtuv5W7py25aGpO6Vyrx5pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU0YzY1YjUtYTU1MS0z ZmEyLWI3YTUtOWQzOTkwOTY4OGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKoNcFcYAjW6leAd/OMQ++nUDL1HAua+ejCcjyLV8tHcOYBpPxISLAN 29gj5aBXYQna8VNnrl80pu/cTucWJq/gwONWlhai5ZULvmTOo8bh1H7TFcWvfpUR dZGTcEWKlTXQ5zCt/b0NZureM3BpCgJYpnWdjh1vxBMzBoBTvLBbHikeFTDHLMMf OquYOc56jyZkM2DuSqFzRU0bw2EiGu4TQ3jJJHBHaKfn8JQpGdzGoStYhM/Xtqd4 mfvoaa+wRqj0eUtcfTHYG0sYxgTzNZ+rk8CxMdW+/PlnKsOsSWfkSxyP4+clOPcq oLO0xWECO75KlqEsLeS9/UnSJo+/kdE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:35 2025 by rpki-client