$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5af13219-031a-3d27-8284-f923631e5f2d.roa File: 5af13219-031a-3d27-8284-f923631e5f2d.roa (raw, json) Hash identifier: HekxoNoG1jqs+6hl67i0tB4Pri/Nh8bJ/Yha+lYopNs= Subject key identifier: 06:BF:23:8A:2D:C8:F1:56:B0:50:A2:E2:E6:E0:10:AB:F8:21:16:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F926B464911BDBF78B25F5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5af13219-031a-3d27-8284-f923631e5f2d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 36183 IP address blocks: 172.224.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b4:64:91:1b:db:f7:8b:25:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a411df37-f8c1-4595-b73d-693d8ec85772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:2e:46:81:8d:76:c2:a3:dc:fd:1d:35:fd: 04:04:ce:a7:a6:a0:ac:26:c4:fa:7b:92:3c:f5:f0: a1:93:77:be:b1:73:11:a4:59:67:9f:f6:f2:64:4b: 94:a3:e0:55:d7:cf:b7:41:31:01:fd:8e:de:b3:57: 57:6d:a8:42:ab:51:49:45:83:03:81:30:88:20:b3: 28:91:b1:2d:35:9c:94:c5:2c:c1:ac:55:ec:11:55: d9:90:c1:9e:fe:39:b6:29:bd:28:77:f6:7c:24:7e: 91:85:1c:48:38:ff:05:e6:a8:ff:78:90:fa:7c:b2: 72:7c:b0:f5:4c:6e:0b:da:06:5d:2e:27:b8:57:6a: a8:92:0b:fc:88:73:c5:e3:f2:99:c5:0d:db:07:a1: f9:f1:36:d6:a4:40:83:2e:1a:fa:88:a0:7b:cf:c8: 5e:94:bf:df:7a:8f:c5:f5:f6:94:0c:f5:12:54:17: 63:f4:fd:30:ce:4e:44:a4:18:df:b8:45:92:37:73: 09:0a:dd:77:ed:13:8a:54:ec:63:ae:c9:0a:ce:6a: 2b:0d:5f:80:62:95:80:89:76:fb:a2:d7:af:61:69: 09:49:83:c0:d2:41:d5:de:b0:c8:8e:11:a4:bd:88: 04:6d:40:49:a5:16:74:be:09:4a:be:be:0c:df:64: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:23:8A:2D:C8:F1:56:B0:50:A2:E2:E6:E0:10:AB:F8:21:16:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5af13219-031a-3d27-8284-f923631e5f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fe:35:a5:21:79:9e:77:16:15:14:18:1d:23:12:16:51:2d: 3a:7c:05:c3:05:eb:64:db:70:02:13:9a:83:b5:5b:b7:c6:3e: b7:fc:9d:69:1a:9c:bd:b9:e5:98:cd:f4:44:db:93:f6:19:ed: 45:8e:34:da:09:67:4f:bb:02:65:b9:18:f7:20:c2:e4:59:76: 82:d6:2c:2f:1c:89:d8:98:43:d2:72:c6:a5:63:6e:4b:5c:e2: 9c:84:c3:49:cd:75:0d:29:1e:83:07:28:a2:9e:f9:ca:63:35: 7d:fd:5e:61:16:cc:44:38:42:27:86:b2:60:6b:eb:bb:80:97: d6:2d:5e:34:cf:c5:a3:5a:84:02:5b:3a:fa:37:33:0e:93:b7: 7f:29:22:dd:a1:6d:9a:77:a2:44:73:46:c5:68:cf:8e:82:ac: 5b:c1:c9:ae:99:a9:4d:49:56:0e:ab:b7:f7:9d:e0:05:28:3a: bd:85:c5:4d:41:ad:b0:17:b9:28:90:70:75:30:14:99:d2:f1: f0:04:22:71:6b:5a:09:f9:d1:56:25:92:c8:3d:38:0b:c1:e9: 5d:99:2c:65:4c:fd:da:d2:f0:c6:c7:a2:92:38:22:45:e8:62: 80:ec:1b:f0:38:4b:31:5c:fd:aa:86:a6:98:9d:5b:5a:fd:90: 23:66:3a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrRkkRvb94sl9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTQxMWRmMzctZjhjMS00NTk1LWI3M2QtNjkzZDhlYzg1NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KYuRoGNdsKj3P0dNf0EBM6npqCsJsT6e5I8 9fChk3e+sXMRpFlnn/byZEuUo+BV18+3QTEB/Y7es1dXbahCq1FJRYMDgTCIILMo kbEtNZyUxSzBrFXsEVXZkMGe/jm2Kb0od/Z8JH6RhRxIOP8F5qj/eJD6fLJyfLD1 TG4L2gZdLie4V2qokgv8iHPF4/KZxQ3bB6H58TbWpECDLhr6iKB7z8helL/feo/F 9faUDPUSVBdj9P0wzk5EpBjfuEWSN3MJCt137ROKVOxjrskKzmorDV+AYpWAiXb7 otevYWkJSYPA0kHV3rDIjhGkvYgEbUBJpRZ0vglKvr4M32SaaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa/I4otyPFWsFCi4ubgEKv4IRaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFmMTMyMTktMDMxYS0z ZDI3LTgyODQtZjkyMzYzMWU1ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7+NaUheZ53FhUUGB0jEhZRLTp8BcMF62TbcAITmoO1W7fGPrf8nWka nL255ZjN9ETbk/YZ7UWONNoJZ0+7AmW5GPcgwuRZdoLWLC8cidiYQ9JyxqVjbktc 4pyEw0nNdQ0pHoMHKKKe+cpjNX39XmEWzEQ4QieGsmBr67uAl9YtXjTPxaNahAJb Ovo3Mw6Tt38pIt2hbZp3okRzRsVoz46CrFvBya6ZqU1JVg6rt/ed4AUoOr2FxU1B rbAXuSiQcHUwFJnS8fAEInFrWgn50VYlksg9OAvB6V2ZLGVM/drS8MbHopI4IkXo YoDsG/A4SzFc/aqGppidW1r9kCNmOkg= -----END CERTIFICATE-----Generated at Wed Apr 9 08:02:04 2025 by rpki-client