$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60bef23e-9abd-3a9e-9e56-a6973ad3ef9b.roa File: 60bef23e-9abd-3a9e-9e56-a6973ad3ef9b.roa (raw, json) Hash identifier: bVlrJoQxx1BDjbHyQSdTyqlruXjfHArfHXd/1ptGGRY= Subject key identifier: 44:25:FD:4B:E7:1C:4C:1A:8D:0E:83:E2:EF:A6:EE:98:43:2A:EA:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E2D21EFF9CE6C267B3D4A200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60bef23e-9abd-3a9e-9e56-a6973ad3ef9b.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 36183 IP address blocks: 172.225.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:1e:ff:9c:e6:c2:67:b3:d4:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=3ebe14ed-c11c-45b3-8c4f-5d1815e538a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:70:a9:e8:d3:4e:fa:a4:a7:b1:6d:26:5c:1d: a5:59:17:96:16:bf:a5:4d:7f:e9:62:78:0c:54:a3: 8f:2c:fc:5b:81:fa:ab:0b:21:a0:17:4c:a2:ff:6f: f1:19:44:07:e4:8f:80:75:38:57:d7:e8:2d:be:70: 6e:af:93:a4:73:e7:c0:df:bc:cb:df:40:7f:92:70: 8b:d6:21:28:8a:8a:8d:de:75:35:e4:28:9c:a4:ef: 44:28:99:7d:1c:4b:a4:72:67:9b:a9:5b:d5:0f:84: 5c:71:d5:72:9d:d1:2f:ce:80:e8:0c:b2:23:12:34: e8:95:28:25:43:7f:4c:02:0d:3e:eb:a2:81:7e:34: 28:fe:7d:4f:1b:e5:a0:4e:23:0f:c0:39:e2:fe:56: 9c:43:c1:c2:82:a5:cb:a8:9e:c3:27:e5:38:74:95: f2:7b:c8:a0:98:ca:8e:58:b6:ca:4a:95:b1:9c:e6: 48:5e:a2:05:f3:4d:8b:26:9e:fb:fe:77:d3:d8:ab: 7d:2d:76:10:23:24:76:2b:42:ea:cf:f1:1b:77:6b: a9:67:b5:97:f4:58:67:1c:19:43:1c:a7:33:4b:cf: b7:5a:bf:d3:26:29:d2:68:7e:6d:40:aa:1f:68:69: fe:7e:c3:d4:fd:25:97:db:23:19:57:da:e0:90:d8: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:25:FD:4B:E7:1C:4C:1A:8D:0E:83:E2:EF:A6:EE:98:43:2A:EA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60bef23e-9abd-3a9e-9e56-a6973ad3ef9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:79:9e:95:0b:3c:4f:53:74:20:e3:e3:aa:09:d8:5f:d0:1f: 89:72:12:b2:06:7a:f9:39:10:eb:25:a3:c4:92:f3:cd:35:75: 15:42:f9:4b:d7:10:09:45:3a:d1:a7:95:8c:5f:91:a9:3c:6a: 7b:5d:9b:e7:8a:44:8b:15:7e:2f:8c:05:f8:a4:5a:81:56:38: 9f:c2:84:eb:a4:98:fb:fd:80:4e:f6:30:65:18:82:6c:df:25: db:45:3d:fa:81:88:43:95:cf:a2:fd:8c:97:7e:bc:d4:de:fb: 88:55:6f:db:47:65:f3:69:10:96:06:70:43:93:5f:ec:63:0f: b7:eb:fe:13:79:5b:6e:ac:44:99:38:93:13:90:6f:1e:67:eb: 04:3d:b6:0e:5d:40:0b:7e:49:5b:40:dd:43:c7:64:5a:f2:f9: a6:e0:de:33:c5:39:f1:3e:ba:d5:34:a6:56:f3:40:b7:2e:43: e6:e1:50:96:22:f4:66:da:d0:47:22:fc:6e:ae:2a:d8:a2:89: c0:c8:4d:81:bb:fc:13:4d:1f:a1:b2:52:35:68:cb:f8:45:b8: 43:30:36:11:ae:30:ff:46:ab:97:ae:73:35:91:66:89:63:20: de:28:76:af:e1:d2:fb:41:7b:90:29:34:25:6d:31:d5:62:8a: b3:4b:00:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0h7/nObCZ7PUogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk M2ViZTE0ZWQtYzExYy00NWIzLThjNGYtNWQxODE1ZTUzOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53Cp6NNO+qSnsW0mXB2lWReWFr+lTX/pYngM VKOPLPxbgfqrCyGgF0yi/2/xGUQH5I+AdThX1+gtvnBur5Okc+fA37zL30B/knCL 1iEoioqN3nU15CicpO9EKJl9HEukcmebqVvVD4RccdVyndEvzoDoDLIjEjTolSgl Q39MAg0+66KBfjQo/n1PG+WgTiMPwDni/lacQ8HCgqXLqJ7DJ+U4dJXye8igmMqO WLbKSpWxnOZIXqIF802LJp77/nfT2Kt9LXYQIyR2K0Lqz/Ebd2upZ7WX9FhnHBlD HKczS8+3Wr/TJinSaH5tQKofaGn+fsPU/SWX2yMZV9rgkNivwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQl/UvnHEwajQ6D4u+m7phDKuqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBiZWYyM2UtOWFiZC0z YTllLTllNTYtYTY5NzNhZDNlZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd5npULPE9TdCDj46oJ2F/QH4lyErIGevk5EOslo8SS8801dRVC+UvX EAlFOtGnlYxfkak8antdm+eKRIsVfi+MBfikWoFWOJ/ChOukmPv9gE72MGUYgmzf JdtFPfqBiEOVz6L9jJd+vNTe+4hVb9tHZfNpEJYGcEOTX+xjD7fr/hN5W26sRJk4 kxOQbx5n6wQ9tg5dQAt+SVtA3UPHZFry+abg3jPFOfE+utU0plbzQLcuQ+bhUJYi 9Gba0Eci/G6uKtiiicDITYG7/BNNH6GyUjVoy/hFuEMwNhGuMP9Gq5euczWRZolj IN4odq/h0vtBe5ApNCVtMdViirNLAIM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:44 2025 by rpki-client