$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa File: 3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa (raw, json) Hash identifier: QVIw6lYhSnBAFDDjRZ6IJAshipLrtU15PZkaYLbJSL4= Subject key identifier: D1:5A:3F:F5:9E:9E:98:60:11:91:4B:94:76:25:2E:81:48:9D:60:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E16BF073E587AE6B40D1CE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:f0:73:e5:87:ae:6b:40:d1:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=4d45e299-c81e-43b2-93f4-d51c32a03a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:3a:b5:60:23:f9:52:1e:39:85:0c:e6:02: 9c:3c:2b:cd:90:e3:83:d8:83:e6:48:9d:7b:fc:0c: 1c:9c:3e:f0:37:b1:9d:62:3a:35:ba:17:a9:08:64: 74:a6:ca:cf:74:55:08:9e:5e:73:55:42:99:0e:9a: 70:5a:a9:bc:03:b1:1b:68:9d:d0:98:48:21:d3:11: 94:53:59:df:3f:c3:0e:46:94:3e:c1:2e:e0:18:99: 2c:65:67:15:55:35:be:b1:66:68:f9:0f:24:9e:8f: 2e:7c:67:33:fc:1e:c0:49:80:cd:c7:3a:a8:3d:56: 35:48:51:bb:41:d0:9a:e8:44:84:bf:ac:3e:e2:c5: e9:11:c1:48:b2:fb:79:17:db:9a:e6:6a:8d:a3:86: fb:1f:e3:f7:0e:87:00:fc:7e:f2:5b:b7:72:1e:67: 8e:1d:8d:f2:46:4b:7e:03:54:d4:4d:49:9b:8f:2d: 6d:c7:60:e8:7d:8e:5b:8e:b5:a1:9a:2d:9b:47:f8: 16:de:61:9f:5f:3b:8e:d3:e2:0a:18:d7:03:08:cc: 99:43:f2:7e:ac:dd:ff:30:c2:b9:74:5b:d6:45:49: 5a:ea:11:6e:1e:72:87:84:dd:f6:83:23:56:8f:e7: 52:78:56:ca:d1:cf:57:5c:e6:cb:62:d2:0b:b0:78: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5A:3F:F5:9E:9E:98:60:11:91:4B:94:76:25:2E:81:48:9D:60:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:47:7b:8d:0a:0e:d7:1a:8f:6b:70:64:f8:ca:8a:5c:c1:64: d0:88:c4:51:3a:41:8e:7b:83:c8:dc:49:bb:6d:2c:30:ec:78: 9f:fb:66:cf:dd:46:e0:8b:14:46:a6:6a:b0:ad:44:60:7e:01: 98:c5:73:24:8b:13:56:7a:ed:62:a2:7a:49:c0:31:38:ea:dd: c1:a6:5c:13:dd:8a:65:73:3f:95:07:16:ae:84:fe:f3:f5:b9: 00:1b:fa:17:10:cd:06:ec:72:d0:3c:9b:34:2e:99:53:03:13: ff:63:fb:89:a7:b4:29:91:c6:9d:66:1b:9e:9b:ee:c7:dc:58: fc:0c:e4:bd:16:ed:a9:97:66:0a:21:d2:b7:d2:92:cb:32:cc: 93:23:79:74:22:bf:05:2a:34:4f:4a:0b:47:d8:2d:ca:68:b0: 39:3b:0c:a2:80:d8:d4:53:c0:94:4e:66:e0:38:28:6a:0c:d0: cb:92:28:d4:2e:eb:91:e5:63:9d:95:47:72:ec:2e:f0:bb:1f: 87:ad:0e:6a:77:de:6c:ec:11:5d:89:d3:03:2c:a7:7b:2d:a8: 0c:dc:fd:5d:e4:17:86:a4:bc:3c:57:87:4c:b3:12:04:36:59: d2:c5:3f:44:47:79:08:ec:de:41:fc:86:8f:30:87:fe:8d:8c: ad:70:b5:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/Bz5Yeua0DRzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NGQ0NWUyOTktYzgxZS00M2IyLTkzZjQtZDUxYzMyYTAzYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8A6tWAj+VIeOYUM5gKcPCvNkOOD2IPmSJ17 /AwcnD7wN7GdYjo1uhepCGR0psrPdFUInl5zVUKZDppwWqm8A7EbaJ3QmEgh0xGU U1nfP8MORpQ+wS7gGJksZWcVVTW+sWZo+Q8kno8ufGcz/B7ASYDNxzqoPVY1SFG7 QdCa6ESEv6w+4sXpEcFIsvt5F9ua5mqNo4b7H+P3DocA/H7yW7dyHmeOHY3yRkt+ A1TUTUmbjy1tx2DofY5bjrWhmi2bR/gW3mGfXzuO0+IKGNcDCMyZQ/J+rN3/MMK5 dFvWRUla6hFuHnKHhN32gyNWj+dSeFbK0c9XXObLYtILsHh4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFaP/WenphgEZFLlHYlLoFInWDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U5MWY2ZTUtNGIzYi0z YWY5LWIwOWYtNmYxZmUxYThmY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENHe40KDtcaj2twZPjKilzBZNCIxFE6QY57g8jcSbttLDDseJ/7Zs/d RuCLFEamarCtRGB+AZjFcySLE1Z67WKieknAMTjq3cGmXBPdimVzP5UHFq6E/vP1 uQAb+hcQzQbsctA8mzQumVMDE/9j+4mntCmRxp1mG56b7sfcWPwM5L0W7amXZgoh 0rfSkssyzJMjeXQivwUqNE9KC0fYLcposDk7DKKA2NRTwJROZuA4KGoM0MuSKNQu 65HlY52VR3LsLvC7H4etDmp33mzsEV2J0wMsp3stqAzc/V3kF4akvDxXh0yzEgQ2 WdLFP0RHeQjs3kH8ho8wh/6NjK1wtfU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:02 2025 by rpki-client