$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa File: 4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa (raw, json) Hash identifier: alO24atV22Rtd6V1NYpqz1GdsIehiFFh5tbmjwh+2W8= Subject key identifier: E9:26:AC:B5:D6:D4:5A:E7:09:C1:EC:70:52:19:51:C3:E3:E0:BF:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA121BD5D985ABF30B5AC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.225.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:21:bd:5d:98:5a:bf:30:b5:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=ea9aeb0d-68c1-45ec-82fb-cd583694e593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:c7:22:bb:a3:48:f5:64:df:ad:98:47:91: 1a:5a:e6:9e:36:df:b6:cd:76:9e:61:70:19:c9:c3: e1:e0:e4:b7:fd:0a:67:08:fd:20:52:5d:54:e6:e2: ed:ac:ff:65:dd:66:ab:51:26:f0:fb:23:12:35:9c: 03:20:c0:54:8c:40:68:40:74:be:d0:3d:3d:c7:dc: 28:8c:49:55:4b:b4:97:d9:b6:73:b3:c7:54:83:8e: 7c:c1:94:f4:15:c1:79:1a:bf:0d:98:38:d3:d4:f4: 73:2a:fd:d1:df:aa:2b:e0:e1:06:72:1d:d1:ff:41: b4:73:74:6c:f6:2b:b1:f9:7f:28:bb:79:14:c4:10: 19:14:01:8e:f4:50:3e:c5:11:b4:83:75:38:47:1c: 0d:03:ef:41:31:1d:0b:03:9e:f2:5e:82:b9:81:92: eb:04:8d:dd:49:41:fb:9f:20:70:5a:11:63:37:ac: 4a:a1:08:31:d8:fd:0b:d2:9f:7a:1c:d5:c3:01:bc: 59:f2:62:b3:12:be:39:d8:d4:e2:3c:d9:20:65:b6: 5c:bf:7f:61:5f:17:08:f2:9f:38:00:22:46:92:9c: 6b:4c:14:6c:fb:87:fa:62:58:72:30:81:e3:24:45: f3:de:1c:7b:91:c6:80:13:fe:42:db:dd:6d:24:2c: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:26:AC:B5:D6:D4:5A:E7:09:C1:EC:70:52:19:51:C3:E3:E0:BF:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:02:4f:96:af:17:41:2a:b9:89:09:06:cd:d6:55:53:51:88: 6e:03:7c:98:e4:1f:bc:f5:34:6d:e8:ca:d0:89:72:12:b2:2b: 92:6f:08:38:b9:49:fe:41:b4:36:6e:4b:18:96:2a:d8:d3:c6: 2e:ad:44:1d:41:7a:d0:cd:50:e1:98:50:48:ef:cb:c5:2b:4c: e5:59:9e:ac:c2:9d:22:ca:71:f7:09:8c:f3:ff:02:e1:e5:37: 7b:29:b5:d5:41:b4:81:2e:4e:5c:93:52:ca:91:ca:f9:23:1c: 10:43:27:82:a7:28:ef:b5:9b:7e:4b:7c:fe:79:2c:20:04:27: 5e:f9:ae:c3:0c:74:22:f5:a1:0c:d7:49:a7:1e:6d:b3:f9:2d: cf:e0:e2:5e:4b:c4:fb:ba:e5:dd:e8:bd:4d:68:b1:7b:2e:eb: 94:b3:94:4c:34:37:d1:61:31:b6:68:39:fb:29:2d:85:36:bb: f1:0f:35:ea:3d:d9:c9:2b:9e:84:c8:cb:83:f8:c6:72:b3:3a: 1b:c1:19:20:85:7f:42:f3:aa:f3:7f:9d:88:8d:95:8d:8c:87: 3b:1b:c9:24:c7:a4:7c:f3:cb:b1:4d:ba:62:3d:d2:ba:25:6d: ee:0b:98:7f:bd:5c:22:66:8d:4b:33:95:df:24:f5:7f:97:57: d3:08:6e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSG9XZhavzC1rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZWE5YWViMGQtNjhjMS00NWVjLTgyZmItY2Q1ODM2OTRlNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDvHIrujSPVk362YR5EaWuaeNt+2zXaeYXAZ ycPh4OS3/QpnCP0gUl1U5uLtrP9l3WarUSbw+yMSNZwDIMBUjEBoQHS+0D09x9wo jElVS7SX2bZzs8dUg458wZT0FcF5Gr8NmDjT1PRzKv3R36or4OEGch3R/0G0c3Rs 9iux+X8ou3kUxBAZFAGO9FA+xRG0g3U4RxwNA+9BMR0LA57yXoK5gZLrBI3dSUH7 nyBwWhFjN6xKoQgx2P0L0p96HNXDAbxZ8mKzEr452NTiPNkgZbZcv39hXxcI8p84 ACJGkpxrTBRs+4f6YlhyMIHjJEXz3hx7kcaAE/5C291tJCz3UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkmrLXW1FrnCcHscFIZUcPj4L8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRmYzU5MGItN2UxMi0z NmMwLWFmZGMtYzg4NWZjYTZmNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUCT5avF0EquYkJBs3WVVNRiG4DfJjkH7z1NG3oytCJchKyK5JvCDi5 Sf5BtDZuSxiWKtjTxi6tRB1BetDNUOGYUEjvy8UrTOVZnqzCnSLKcfcJjPP/AuHl N3sptdVBtIEuTlyTUsqRyvkjHBBDJ4KnKO+1m35LfP55LCAEJ175rsMMdCL1oQzX SacebbP5Lc/g4l5LxPu65d3ovU1osXsu65SzlEw0N9FhMbZoOfspLYU2u/EPNeo9 2ckrnoTIy4P4xnKzOhvBGSCFf0LzqvN/nYiNlY2MhzsbySTHpHzzy7FNumI90rol be4LmH+9XCJmjUszld8k9X+XV9MIbto= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:28 2025 by rpki-client