$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42eca214-cc51-3cd8-93f1-70e4276225f6.roa File: 42eca214-cc51-3cd8-93f1-70e4276225f6.roa (raw, json) Hash identifier: Ml76eUnfh1g/GudTzg1optWLZfrHlkBXjQTWb7oPlZ8= Subject key identifier: 85:29:E6:3E:46:8A:D9:52:F6:08:0C:43:95:B5:56:87:52:4C:A5:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD67298F6404427359B2F70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42eca214-cc51-3cd8-93f1-70e4276225f6.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:72:98:f6:40:44:27:35:9b:2f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=a0709252-e38c-4c64-a542-0662662b181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:a0:ab:61:65:50:2c:cb:dc:63:2e:86:ee: 31:c3:34:ff:fd:2c:71:a9:a6:8f:79:aa:35:a1:3b: fb:aa:a8:80:7c:98:2b:74:df:d3:66:83:65:2f:7c: c7:8d:af:12:d1:ec:b3:ec:85:4c:29:c2:e2:95:33: d2:2e:24:e0:63:08:7a:16:39:a1:62:c9:70:23:6a: 26:45:5d:a2:63:c1:52:64:67:0e:cc:2c:21:34:c1: 7f:33:ff:8b:b8:e3:40:3e:14:9c:58:f6:08:6c:f3: b1:54:90:cd:73:28:8d:6f:90:0e:95:d1:f5:8b:4c: 1b:2a:fb:2a:d5:84:30:07:ec:df:2a:ed:47:3a:b0: 2d:82:6a:4e:e5:37:8a:ac:41:f6:33:42:d9:ce:37: 22:be:c4:8e:e9:86:ca:b9:5f:f4:7b:ae:30:c9:1c: 1c:70:1f:93:73:45:0a:ca:f6:24:3e:41:51:5b:db: bf:9d:b7:e3:12:ee:ca:b7:e7:c3:56:7c:53:70:9e: 9e:8e:67:a4:87:33:a2:22:a8:9d:0f:b6:a7:d8:07: a1:54:de:83:fd:c7:f4:05:9d:4f:77:7b:e3:a2:79: 7a:62:a6:1e:0e:ee:7b:2a:1a:4e:3a:f4:db:a8:b1: 39:ba:b3:a6:c8:76:9a:eb:72:c7:96:2c:b4:3f:66: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:29:E6:3E:46:8A:D9:52:F6:08:0C:43:95:B5:56:87:52:4C:A5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42eca214-cc51-3cd8-93f1-70e4276225f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:46:44:e2:f9:b7:37:dd:a9:18:3d:fe:3f:99:71:17:eb:e7: ff:d8:10:c8:b4:22:57:e0:fc:da:a1:2c:e4:14:62:21:2d:36: c7:67:07:91:13:4d:6a:f3:30:4d:81:69:47:4a:6e:ba:66:a1: eb:69:f5:c3:bf:59:b8:41:ad:80:fc:a7:a2:9c:d4:d5:6f:1c: 1f:f7:1e:d1:4a:0e:e1:99:69:e6:a1:50:f5:58:34:ce:ce:ee: 07:12:5a:04:89:50:71:e7:34:25:db:4c:25:c3:22:5c:d0:82: ef:f4:35:8b:32:4e:e1:6e:1d:9a:4d:02:0d:84:ba:50:3c:89: 04:54:03:47:87:17:d8:eb:c0:9d:b0:b2:9c:2d:bd:54:92:05: db:a6:dd:20:d1:59:ca:8f:70:c3:7c:0a:d2:3d:f2:40:87:8a: e7:be:89:b5:35:04:91:b4:9b:e0:61:62:ca:8c:72:32:a8:64: f8:58:ea:5a:79:4a:e7:0f:1d:38:c0:f4:b6:c1:5d:7c:a3:9f: cd:d1:4d:42:dd:e6:ca:ff:51:ce:d1:5f:84:c5:89:f8:52:60: 69:60:20:bc:88:bb:62:aa:18:cc:2c:d5:ce:e6:4f:b2:9d:3b: 88:ba:d9:af:70:c9:75:80:3f:e2:b5:7b:6a:13:0f:75:cf:f2: b4:b8:7a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nKY9kBEJzWbL3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk YTA3MDkyNTItZTM4Yy00YzY0LWE1NDItMDY2MjY2MmIxODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu46gq2FlUCzL3GMuhu4xwzT//SxxqaaPeao1 oTv7qqiAfJgrdN/TZoNlL3zHja8S0eyz7IVMKcLilTPSLiTgYwh6FjmhYslwI2om RV2iY8FSZGcOzCwhNMF/M/+LuONAPhScWPYIbPOxVJDNcyiNb5AOldH1i0wbKvsq 1YQwB+zfKu1HOrAtgmpO5TeKrEH2M0LZzjcivsSO6YbKuV/0e64wyRwccB+Tc0UK yvYkPkFRW9u/nbfjEu7Kt+fDVnxTcJ6ejmekhzOiIqidD7an2AehVN6D/cf0BZ1P d3vjonl6YqYeDu57KhpOOvTbqLE5urOmyHaa63LHliy0P2a5IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUp5j5GitlS9ggMQ5W1VodSTKVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJlY2EyMTQtY2M1MS0z Y2Q4LTkzZjEtNzBlNDI3NjIyNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNGROL5tzfdqRg9/j+ZcRfr5//YEMi0Ilfg/NqhLOQUYiEtNsdnB5ET TWrzME2BaUdKbrpmoetp9cO/WbhBrYD8p6Kc1NVvHB/3HtFKDuGZaeahUPVYNM7O 7gcSWgSJUHHnNCXbTCXDIlzQgu/0NYsyTuFuHZpNAg2EulA8iQRUA0eHF9jrwJ2w spwtvVSSBdum3SDRWcqPcMN8CtI98kCHiue+ibU1BJG0m+BhYsqMcjKoZPhY6lp5 SucPHTjA9LbBXXyjn83RTULd5sr/Uc7RX4TFifhSYGlgILyIu2KqGMws1c7mT7Kd O4i62a9wyXWAP+K1e2oTD3XP8rS4etg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:50 2025 by rpki-client