$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa File: 4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa (raw, json) Hash identifier: hh9A2fvsueWwb53aeXIXfwwNAMQknCAYenOcJ2EyqKw= Subject key identifier: 65:F4:A3:2B:8F:06:11:E8:8E:EF:29:58:08:58:2A:9F:7B:09:7B:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BEF8C3E0E30D5CB9D6180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ef:8c:3e:0e:30:d5:cb:9d:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=88f626b7-2427-4cbd-bbfc-10ef334146cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:0f:9c:a9:e6:61:91:b1:e5:6a:93:4a:a0: 21:5a:25:9a:f3:5a:6e:eb:e9:75:92:2b:75:39:15: a4:ef:8b:bf:b4:df:17:49:37:db:f3:16:68:df:d7: 18:73:47:e7:a4:3a:37:4d:81:81:52:3f:29:23:65: fb:7d:89:95:e6:57:55:d9:47:85:27:2c:03:c1:fe: 0b:b5:52:77:5e:45:e5:1e:c0:9c:4e:54:f1:7b:45: 59:d5:70:ba:e3:cb:80:c6:98:70:93:e5:66:1e:0f: 3a:c2:d1:65:47:d0:f6:9a:e5:2a:9f:3b:73:5d:37: 57:fb:cb:0a:1d:bd:16:6b:44:4e:77:ba:41:08:9a: 7d:f5:f4:90:7b:9d:64:4f:42:44:46:49:81:ce:a9: 5e:10:0d:8a:9d:bb:9c:4c:3a:eb:65:ed:25:c0:36: dc:50:66:f9:44:51:34:99:06:3a:6c:31:ee:b5:48: bf:d6:db:95:42:c3:65:58:70:3e:0f:ee:78:d6:49: 61:66:a0:b9:6c:71:3c:0f:4a:02:0e:36:a0:08:90: fa:68:ef:bc:b5:59:97:6e:53:bf:37:c3:46:d4:93: 71:3b:6f:cb:9b:d4:44:dc:cf:45:3b:54:6e:dc:51: 76:5b:14:91:3d:a8:1e:d5:72:14:3f:a7:b4:35:17: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F4:A3:2B:8F:06:11:E8:8E:EF:29:58:08:58:2A:9F:7B:09:7B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a9:81:94:74:bc:46:e5:4c:4b:38:ac:12:e8:61:b3:b2:09: b2:57:7f:fe:b9:f6:ec:6c:9c:33:b9:97:6a:35:f7:53:d1:d5: 23:ab:91:33:f3:2e:ec:ab:65:e8:e2:21:5b:65:65:61:96:29: 1a:a2:46:fe:52:6d:d5:16:14:a3:16:9f:05:7f:f3:eb:b2:27: cc:ea:ea:06:d7:6d:8b:5e:e3:3f:72:f2:70:f2:a0:fe:50:2d: 94:6d:fb:0c:99:de:52:06:d6:b5:a3:f0:e7:0b:ed:3f:67:92: 9b:8e:26:74:c4:c2:a8:91:8a:af:8f:30:85:42:c3:ba:46:fc: 23:58:f2:d6:42:cb:15:15:08:de:1a:6c:74:24:97:f1:44:65: ca:b3:6d:b7:f3:48:01:23:92:51:43:83:8d:bf:fd:68:ba:57: 08:d9:49:97:da:5a:59:e3:17:c3:d5:b2:1f:8a:ee:66:a1:68: f0:4d:00:1f:1c:13:14:1b:97:24:a4:00:74:c2:c8:6f:7e:e9: 06:e7:da:ec:aa:83:1e:1d:f9:c0:e3:4c:18:5a:33:4a:25:b3: 3a:ec:5f:57:99:5b:0c:58:4f:cb:1e:d2:a9:95:5c:f1:f2:81: 5f:67:50:42:c0:5b:23:e2:dc:a8:8d:cd:90:e6:f4:07:cf:3a: ed:8a:fc:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W++MPg4w1cudYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODhmNjI2YjctMjQyNy00Y2JkLWJiZmMtMTBlZjMzNDE0NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCYPnKnmYZGx5WqTSqAhWiWa81pu6+l1kit1 ORWk74u/tN8XSTfb8xZo39cYc0fnpDo3TYGBUj8pI2X7fYmV5ldV2UeFJywDwf4L tVJ3XkXlHsCcTlTxe0VZ1XC648uAxphwk+VmHg86wtFlR9D2muUqnztzXTdX+8sK Hb0Wa0ROd7pBCJp99fSQe51kT0JERkmBzqleEA2KnbucTDrrZe0lwDbcUGb5RFE0 mQY6bDHutUi/1tuVQsNlWHA+D+541klhZqC5bHE8D0oCDjagCJD6aO+8tVmXblO/ N8NG1JNxO2/Lm9RE3M9FO1Ru3FF2WxSRPage1XIUP6e0NRcWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX0oyuPBhHoju8pWAhYKp97CXtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDc0N2ExMWEtZmZjMS0z ODNlLTljOGItNTJkMTdhNWQ5MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEepgZR0vEblTEs4rBLoYbOyCbJXf/659uxsnDO5l2o191PR1SOrkTPz LuyrZejiIVtlZWGWKRqiRv5SbdUWFKMWnwV/8+uyJ8zq6gbXbYte4z9y8nDyoP5Q LZRt+wyZ3lIG1rWj8OcL7T9nkpuOJnTEwqiRiq+PMIVCw7pG/CNY8tZCyxUVCN4a bHQkl/FEZcqzbbfzSAEjklFDg42//Wi6VwjZSZfaWlnjF8PVsh+K7mahaPBNAB8c ExQblySkAHTCyG9+6Qbn2uyqgx4d+cDjTBhaM0olszrsX1eZWwxYT8se0qmVXPHy gV9nUELAWyPi3KiNzZDm9AfPOu2K/FY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:27 2025 by rpki-client