$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50d3305b-78c1-3ba9-b11a-a6b41cf4b0ab.roa File: 50d3305b-78c1-3ba9-b11a-a6b41cf4b0ab.roa (raw, json) Hash identifier: grFHSGh9hHQVemGmOApaGnsj0RA64hs/scdNgmRR4cE= Subject key identifier: 20:DE:B3:F3:74:9E:27:9D:45:5F:63:7B:01:50:8A:A3:7C:BE:FB:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490F7C066110683222463BD740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50d3305b-78c1-3ba9-b11a-a6b41cf4b0ab.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 173.223.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:06:61:10:68:32:22:46:3b:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=cab7207d-c048-4687-b82a-5e2b72aece01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:3c:fd:47:b2:89:e1:82:b8:5a:2f:94:34: 47:33:f5:ea:ac:6a:c1:92:45:c4:6d:d4:aa:12:dc: 58:78:9b:06:8a:3d:ca:b2:84:c8:c8:22:5f:bc:ec: 8a:32:b6:8b:cf:a1:cb:de:d4:1c:64:e5:7c:a0:47: d1:83:cb:4e:05:4d:86:49:be:74:28:29:77:6c:09: 53:9f:b5:97:ff:a9:73:9b:d3:10:fd:ff:62:4c:85: cd:6a:6f:a3:c8:39:2d:86:bb:95:b2:f5:db:74:60: 91:fb:b4:08:7a:a6:aa:53:bf:76:76:0c:36:e7:85: b1:c7:9d:f3:32:77:d8:2a:59:d2:de:03:45:a7:25: 75:08:0f:26:e4:3c:d0:c6:4b:1c:fc:96:3b:92:1f: e6:af:00:cb:90:14:d7:25:8b:c3:f2:38:fd:48:ae: 1b:8a:07:f8:a1:b5:cb:93:6c:78:ce:1b:d0:7a:33: 2f:f2:3f:46:08:46:f0:31:dd:64:28:a0:2a:ed:c3: 49:72:28:79:87:ac:3e:a5:5e:87:e8:9a:a1:e6:86: 1b:cb:b2:59:86:a8:75:19:ff:14:58:f4:16:65:18: b6:52:48:88:34:e8:f0:a2:66:9b:f1:9b:d8:9a:cf: 7b:cf:c0:46:f1:ec:5b:21:d8:85:32:96:41:69:79: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:B3:F3:74:9E:27:9D:45:5F:63:7B:01:50:8A:A3:7C:BE:FB:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50d3305b-78c1-3ba9-b11a-a6b41cf4b0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f0:36:4c:68:e9:b3:20:ab:be:d8:b8:d4:8a:3c:0d:5a:fc: 98:29:ab:6c:c1:b8:c9:98:da:30:19:ec:ba:8b:22:80:f2:ef: e6:fa:9a:c5:ce:2e:07:b5:31:aa:f8:9f:03:8e:7f:a4:08:7e: 49:f2:31:65:ec:e8:7f:d3:f0:00:3e:17:d7:4c:17:61:93:dc: 75:59:b4:df:06:a2:bf:dc:08:af:a0:3c:35:20:06:93:f0:cd: c2:51:91:82:ba:ba:0f:d4:b7:eb:0e:e6:4a:09:2b:e7:a6:80: 81:d6:7f:b9:c7:dc:1a:b7:77:36:36:9b:ea:d4:5d:a4:9b:fb: 5f:90:34:3f:8d:bf:90:b4:c0:bd:f4:b6:43:14:75:75:04:47: 22:d0:ad:7b:2e:c0:e9:c0:57:0b:14:41:52:97:71:36:de:ac: bd:8e:e3:60:65:d1:7a:76:e6:ef:c3:ac:86:a6:b5:3b:32:7f: cb:71:29:43:84:e3:6d:c5:b1:4c:68:fc:99:5e:c3:b2:23:2e: ee:2c:b8:70:55:e2:50:08:34:18:8b:b6:90:50:15:29:4f:ed: 60:95:02:9a:19:ee:1e:d0:0f:03:cf:0a:ae:96:4a:fa:00:51: ba:dc:3a:dd:a8:c3:99:4d:fd:25:42:d0:35:17:95:7d:73:56: 79:3b:c4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAZhEGgyIkY710AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk Y2FiNzIwN2QtYzA0OC00Njg3LWI4MmEtNWUyYjcyYWVjZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPs8/UeyieGCuFovlDRHM/XqrGrBkkXEbdSq EtxYeJsGij3KsoTIyCJfvOyKMraLz6HL3tQcZOV8oEfRg8tOBU2GSb50KCl3bAlT n7WX/6lzm9MQ/f9iTIXNam+jyDkthruVsvXbdGCR+7QIeqaqU792dgw254Wxx53z MnfYKlnS3gNFpyV1CA8m5DzQxksc/JY7kh/mrwDLkBTXJYvD8jj9SK4bigf4obXL k2x4zhvQejMv8j9GCEbwMd1kKKAq7cNJcih5h6w+pV6H6Jqh5oYby7JZhqh1Gf8U WPQWZRi2UkiINOjwomab8ZvYms97z8BG8exbIdiFMpZBaXmI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDes/N0niedRV9jewFQiqN8vvtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTBkMzMwNWItNzhjMS0z YmE5LWIxMWEtYTZiNDFjZjRiMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3wNkxo6bMgq77YuNSKPA1a/Jgpq2zBuMmY2jAZ7LqLIoDy7+b6msXO Lge1Mar4nwOOf6QIfknyMWXs6H/T8AA+F9dMF2GT3HVZtN8Gor/cCK+gPDUgBpPw zcJRkYK6ug/Ut+sO5koJK+emgIHWf7nH3Bq3dzY2m+rUXaSb+1+QND+Nv5C0wL30 tkMUdXUERyLQrXsuwOnAVwsUQVKXcTberL2O42Bl0Xp25u/DrIamtTsyf8txKUOE 423FsUxo/Jlew7IjLu4suHBV4lAINBiLtpBQFSlP7WCVApoZ7h7QDwPPCq6WSvoA UbrcOt2ow5lN/SVC0DUXlX1zVnk7xBk= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:45 2025 by rpki-client