$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa File: 61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa (raw, json) Hash identifier: Oi/YW8biwyO3wriiNZ34o/VAZxRh1R9Qd3O9Hzmm0sU= Subject key identifier: 46:95:A5:61:0E:C5:5E:58:CA:D6:F1:0F:F1:43:0B:7B:80:2A:9B:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489EA4DDAAB0AD2444BC195520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa Signing time: Tue 21 Jan 2025 15:56:47 +0000 ROA not before: Tue 21 Jan 2025 15:56:47 +0000 ROA not after: Mon 21 Apr 2025 14:56:47 +0000 asID: 63949 IP address blocks: 172.237.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:a4:dd:aa:b0:ad:24:44:bc:19:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 15:56:47 2025 GMT Not After : Apr 21 14:56:47 2025 GMT Subject: CN=8f547eb1-f50b-4d38-a870-d8c8424459ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4a:57:3d:e8:8c:4d:e4:09:45:1d:fa:a3:2a: 24:78:bc:3f:f0:dd:4c:31:dc:c5:19:ce:cf:bb:03: 67:3b:74:16:a9:4d:64:ce:b1:98:c8:7b:af:96:ed: 12:d3:82:bc:c3:f6:b4:ca:88:50:e2:d2:ac:8d:5a: 04:4e:97:7d:b3:5d:a1:0c:01:bf:93:f2:1e:30:00: 91:62:c0:37:c2:ce:86:cc:9f:f3:78:87:88:00:9d: ab:e9:67:6e:26:47:b5:8b:0c:75:fe:9b:0c:d7:a1: 44:e9:7d:80:93:35:e9:a9:26:f3:36:68:79:ec:d3: 71:f8:f5:c3:d4:06:a5:6f:93:13:a6:aa:8b:b0:5b: e3:2a:d4:2a:eb:66:4a:88:e6:78:3f:b8:8a:6e:49: b5:e5:c3:b1:ba:2a:57:75:dc:23:c7:83:5a:17:90: 45:b1:39:81:4d:e6:47:af:c1:d9:f2:9a:09:23:57: 4d:89:ce:db:a2:62:a3:14:76:58:f2:a5:ea:2b:7d: 96:cf:6c:dc:d1:dd:6c:d5:43:6c:51:e1:19:4b:21: 4a:52:f7:fa:5b:ea:cd:c1:18:fb:89:c9:bb:75:05: b5:ac:24:e5:04:46:5c:60:3d:e9:46:4f:0b:11:6e: cf:d7:16:5e:22:d0:51:15:42:83:6e:49:80:b2:90: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:95:A5:61:0E:C5:5E:58:CA:D6:F1:0F:F1:43:0B:7B:80:2A:9B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7b:93:71:64:98:ee:42:a4:70:bc:85:4f:05:b9:07:96:34: 2a:96:31:2b:8e:da:d7:7c:77:3b:09:c0:b9:90:7e:f3:15:9a: 4e:7e:af:fa:a6:13:70:63:45:df:16:f5:cf:fb:1f:51:f4:f8: 1c:dd:b2:77:49:e6:9a:fb:24:db:c9:45:0c:86:d6:ac:5e:b6: 67:38:69:52:f6:7f:cc:1d:7a:36:70:be:56:4a:08:37:19:93: 42:f5:5c:a1:c5:53:79:27:89:e2:78:4e:ba:d8:8a:97:f8:db: 89:ee:89:56:95:3a:7e:4d:18:6c:3f:8c:b0:32:51:6b:71:65: 57:d8:6f:52:3f:df:6a:b1:e6:6b:ae:41:95:0e:8b:0c:90:9a: 7d:be:24:5b:51:40:ae:47:9d:df:b1:55:19:98:9f:31:1c:ac: e2:e6:fe:03:f6:5f:58:7f:ca:96:cf:df:34:18:e4:91:cd:8c: 9c:9f:7a:a4:42:6d:5c:7b:02:3f:ef:e3:39:4f:e8:82:ca:e7: a0:04:f8:04:cc:51:1a:c5:2f:ed:9c:52:05:69:ae:fa:44:d5: be:e6:f9:ad:a1:58:a5:1e:39:4a:ce:4c:de:be:d3:09:17:ee: 86:2f:0d:d0:12:ed:03:c2:43:65:fd:d3:33:d0:e5:d0:78:cb: 7c:9b:b6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiepN2qsK0kRLwZVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE1NTY0N1oXDTI1MDQyMTE0NTY0N1owLzEtMCsGA1UEAxMk OGY1NDdlYjEtZjUwYi00ZDM4LWE4NzAtZDhjODQyNDQ1OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kpXPeiMTeQJRR36oyokeLw/8N1MMdzFGc7P uwNnO3QWqU1kzrGYyHuvlu0S04K8w/a0yohQ4tKsjVoETpd9s12hDAG/k/IeMACR YsA3ws6GzJ/zeIeIAJ2r6WduJke1iwx1/psM16FE6X2AkzXpqSbzNmh57NNx+PXD 1Aalb5MTpqqLsFvjKtQq62ZKiOZ4P7iKbkm15cOxuipXddwjx4NaF5BFsTmBTeZH r8HZ8poJI1dNic7bomKjFHZY8qXqK32Wz2zc0d1s1UNsUeEZSyFKUvf6W+rNwRj7 icm7dQW1rCTlBEZcYD3pRk8LEW7P1xZeItBRFUKDbkmAspD9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaVpWEOxV5YytbxD/FDC3uAKpuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjFlM2QwZTAtMGU4ZS0z Y2RmLWIyN2YtZjgzZDZiMGYxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh7k3FkmO5CpHC8hU8FuQeWNCqWMSuO2td8dzsJwLmQfvMVmk5+r/qm E3BjRd8W9c/7H1H0+BzdsndJ5pr7JNvJRQyG1qxetmc4aVL2f8wdejZwvlZKCDcZ k0L1XKHFU3knieJ4TrrYipf424nuiVaVOn5NGGw/jLAyUWtxZVfYb1I/32qx5muu QZUOiwyQmn2+JFtRQK5Hnd+xVRmYnzEcrOLm/gP2X1h/ypbP3zQY5JHNjJyfeqRC bVx7Aj/v4zlP6ILK56AE+ATMURrFL+2cUgVprvpE1b7m+a2hWKUeOUrOTN6+0wkX 7oYvDdAS7QPCQ2X90zPQ5dB4y3ybtv8= -----END CERTIFICATE-----Generated at Fri Mar 14 15:00:56 2025 by rpki-client