$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/377c2306-0381-3cff-9f1d-d8f45221d340.roa File: 377c2306-0381-3cff-9f1d-d8f45221d340.roa (raw, json) Hash identifier: FkIrBjSaCQZlK1Mlr9fd0tasWwcYt3pNOFL2eldTHKA= Subject key identifier: 37:8E:AB:7C:C8:0C:9E:28:F3:2F:39:30:A0:DC:04:81:3A:84:E3:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849403947D81327CAE4E28EEB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/377c2306-0381-3cff-9f1d-d8f45221d340.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 63949 IP address blocks: 172.234.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:47:d8:13:27:ca:e4:e2:8e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=253790bc-fa23-4b2e-b353-7042c55078d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:db:ee:49:44:09:b2:1f:8e:ea:1d:89:ba: e7:64:8a:9e:06:bf:9a:a1:be:25:9f:90:6f:33:fb: 05:cd:e4:b2:f1:ac:82:e3:49:8b:4c:da:51:16:c6: 42:e9:65:93:01:7d:fa:95:24:a5:31:00:9e:a2:03: 3b:6e:ca:a2:07:21:80:4b:ed:13:11:90:de:a9:14: c8:67:91:9f:6e:68:94:f7:aa:3c:97:05:9b:90:98: 45:25:45:50:3d:54:e3:b8:b5:60:f9:82:e4:49:ef: 4b:1f:f8:e1:0c:6d:56:3c:2b:52:ab:14:59:49:2a: 8c:01:e5:56:9b:1b:d7:44:a1:7f:40:29:b1:32:68: 17:60:4f:1a:2e:5b:3e:57:f1:9b:93:f6:64:28:46: 5e:86:c3:35:30:c0:63:2f:0f:59:b3:e3:27:3a:aa: d3:6f:d3:0f:9c:cb:97:1f:18:db:3d:9e:f6:39:02: 0e:80:36:9a:a2:27:1e:eb:ad:e3:8b:81:87:d9:0c: 4e:82:34:68:77:d4:8b:d6:9e:df:a0:2c:58:24:c4: 0f:a7:15:8f:6d:6b:64:41:e6:72:2e:ee:e0:f5:e6: 95:b3:da:e0:fd:ef:23:65:be:f7:38:da:a7:c8:f3: 62:e6:2f:06:e9:e5:0f:2b:a2:da:03:d8:34:09:f7: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:AB:7C:C8:0C:9E:28:F3:2F:39:30:A0:DC:04:81:3A:84:E3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/377c2306-0381-3cff-9f1d-d8f45221d340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d1:a2:cb:11:f4:cf:79:47:eb:55:1d:3f:16:46:fc:c8:ac: 4c:eb:d3:3e:11:34:de:a6:c2:b2:e0:f5:da:0a:67:37:38:32: a9:b8:6c:3e:46:3f:22:64:b8:65:d4:39:e7:eb:fd:f6:07:4f: ae:8a:ac:70:46:0f:94:62:d4:09:ab:15:57:8e:52:6b:f6:29: 13:77:88:a9:5c:d7:ac:b2:cc:b6:ec:fe:71:9c:e0:85:b6:8a: a5:45:35:a6:ce:ef:54:f8:3f:aa:0c:00:bf:c3:d7:bd:1e:92: 9c:a1:1a:f7:80:a4:f3:de:c4:fb:46:af:54:19:73:f4:04:bc: 4d:a4:17:71:93:d0:b7:7d:ec:58:f2:a9:70:43:84:f3:fd:38: 0b:e9:4d:5f:95:b9:ba:f7:31:7e:b0:06:9e:1c:6c:27:3b:a4: b6:3b:b5:19:f7:40:5c:80:ec:d2:cc:7f:81:90:ee:cb:09:8f: f2:97:37:ff:5c:bc:03:9e:df:d5:d2:f7:47:22:5a:3f:e5:02: 5a:c5:7a:42:73:23:41:7a:63:39:f6:b4:cf:6b:2d:4c:84:c5: cf:56:96:de:f4:1c:37:4c:97:d6:6a:46:b9:85:60:7f:a9:40: e4:4b:e0:7f:51:0e:3c:fe:3f:52:cd:e3:f9:27:ef:50:45:25: a1:3f:a7:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUfYEyfK5OKO6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MjUzNzkwYmMtZmEyMy00YjJlLWIzNTMtNzA0MmM1NTA3OGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisrb7klECbIfjuodibrnZIqeBr+aob4ln5Bv M/sFzeSy8ayC40mLTNpRFsZC6WWTAX36lSSlMQCeogM7bsqiByGAS+0TEZDeqRTI Z5GfbmiU96o8lwWbkJhFJUVQPVTjuLVg+YLkSe9LH/jhDG1WPCtSqxRZSSqMAeVW mxvXRKF/QCmxMmgXYE8aLls+V/Gbk/ZkKEZehsM1MMBjLw9Zs+MnOqrTb9MPnMuX HxjbPZ72OQIOgDaaoice663ji4GH2QxOgjRod9SL1p7foCxYJMQPpxWPbWtkQeZy Lu7g9eaVs9rg/e8jZb73ONqnyPNi5i8G6eUPK6LaA9g0Cfcv5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeOq3zIDJ4o8y85MKDcBIE6hOOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzc3YzIzMDYtMDM4MS0z Y2ZmLTlmMWQtZDhmNDUyMjFkMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrOowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLRossR9M95R+tVHT8WRvzIrEzr0z4RNN6mwrLg9doKZzc4Mqm4bD5G PyJkuGXUOefr/fYHT66KrHBGD5Ri1AmrFVeOUmv2KRN3iKlc16yyzLbs/nGc4IW2 iqVFNabO71T4P6oMAL/D170ekpyhGveApPPexPtGr1QZc/QEvE2kF3GT0Ld97Fjy qXBDhPP9OAvpTV+Vubr3MX6wBp4cbCc7pLY7tRn3QFyA7NLMf4GQ7ssJj/KXN/9c vAOe39XS90ciWj/lAlrFekJzI0F6Yzn2tM9rLUyExc9Wlt70HDdMl9ZqRrmFYH+p QORL4H9RDjz+P1LN4/kn71BFJaE/pwY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:21 2025 by rpki-client