$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/704f42d4-b15d-3516-96f1-fa0943e21f4c.roa File: 704f42d4-b15d-3516-96f1-fa0943e21f4c.roa (raw, json) Hash identifier: kiyLeB5tMAHhgjOIMKe+cwTg1Gezck+wSR/EfbAXZTI= Subject key identifier: 5F:DC:13:CE:85:D6:D6:CA:1B:A9:06:B3:E7:74:7B:7E:5F:D5:59:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF61723464BE39284CF37380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/704f42d4-b15d-3516-96f1-fa0943e21f4c.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 63949 IP address blocks: 172.235.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:72:34:64:be:39:28:4c:f3:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=8faeb414-82de-453c-8d88-57f6d076014e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:4a:bd:58:6d:bb:88:e1:4d:1b:96:22:d1: 24:f9:71:66:a2:17:24:ed:16:e1:40:c4:31:1d:62: 82:b6:32:9e:6d:ba:42:bb:89:16:40:ac:45:0b:46: 3a:46:bc:f3:19:ff:03:8d:2e:69:3d:66:f2:a1:98: 9c:6d:c3:ea:40:13:60:b3:db:7c:a1:e6:66:c2:aa: a0:b5:df:3a:62:6e:63:a1:0f:c1:26:99:50:6b:e2: 30:d8:81:2d:83:85:74:57:f4:f2:4b:b3:a1:a6:b8: 92:b0:3a:bc:32:25:c2:6b:fe:04:06:40:e8:31:13: ad:30:5a:2c:a3:fd:a4:c5:76:8a:aa:70:a1:37:a8: cb:4c:dc:0a:93:8f:5f:3e:61:fd:98:54:f8:10:60: 64:62:ed:76:8c:cf:be:d8:b4:d9:da:cf:57:46:c9: dd:e1:ca:d9:69:a8:0e:99:0c:48:51:04:03:9e:1d: a2:d0:4c:18:7a:9b:f1:5e:a0:e3:2d:17:9e:d3:e0: ac:98:4f:95:33:6e:7b:7d:8a:4f:4e:55:65:18:06: 66:90:eb:ff:fa:03:06:2d:da:ca:47:75:4b:be:50: f3:52:2d:92:4b:f6:9d:b0:ef:ea:ab:c7:89:d7:39: 7c:ee:5b:6d:ea:88:36:bb:7c:ae:f9:8e:c4:19:bf: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:13:CE:85:D6:D6:CA:1B:A9:06:B3:E7:74:7B:7E:5F:D5:59:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/704f42d4-b15d-3516-96f1-fa0943e21f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c9:04:c1:75:8a:cd:12:10:74:fa:d5:41:d5:c4:b2:3a:f1: bb:45:d0:e2:a8:f4:76:41:04:af:4c:d1:b5:d8:aa:23:4b:2e: 0c:15:4c:10:d1:01:6a:15:3d:e4:da:2c:38:df:1c:a4:76:4f: 9d:63:d8:61:e6:ea:81:ef:44:18:39:41:84:42:40:5f:5a:14: e4:1f:58:50:37:7d:11:5f:ba:87:6d:0f:2e:e0:58:68:92:59: 36:fe:d4:6b:be:01:19:32:ef:86:86:09:80:3d:f0:04:1c:cc: a4:c4:1f:86:1f:3e:27:d3:04:01:20:02:a2:fe:c4:30:fc:ff: f0:7a:d9:6f:66:84:a0:cd:98:63:ec:94:e2:2d:3a:d4:0f:fb: c6:ab:10:5b:12:c8:44:f9:eb:6a:2b:19:75:f9:ac:c5:cb:4c: 5b:49:21:93:26:1d:45:3b:99:14:bb:f5:e4:17:b4:34:5b:36: e4:21:00:83:3d:23:2e:11:db:b8:7f:ab:a2:6e:75:e6:0d:ed: 84:91:72:63:8a:28:0a:05:68:78:71:e1:f2:4b:42:00:bd:32: 70:97:64:25:c7:96:cb:1d:ec:a7:7b:84:5a:59:27:3a:98:7b: 50:02:e9:25:46:67:1a:38:5c:f3:06:46:79:0c:5c:35:a4:34: d6:30:d7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXI0ZL45KEzzc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OGZhZWI0MTQtODJkZS00NTNjLThkODgtNTdmNmQwNzYwMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV9KvVhtu4jhTRuWItEk+XFmohck7RbhQMQx HWKCtjKebbpCu4kWQKxFC0Y6RrzzGf8DjS5pPWbyoZicbcPqQBNgs9t8oeZmwqqg td86Ym5joQ/BJplQa+Iw2IEtg4V0V/TyS7OhpriSsDq8MiXCa/4EBkDoMROtMFos o/2kxXaKqnChN6jLTNwKk49fPmH9mFT4EGBkYu12jM++2LTZ2s9XRsnd4crZaagO mQxIUQQDnh2i0EwYepvxXqDjLRee0+CsmE+VM257fYpPTlVlGAZmkOv/+gMGLdrK R3VLvlDzUi2SS/adsO/qq8eJ1zl87ltt6og2u3yu+Y7EGb91pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/cE86F1tbKG6kGs+d0e35f1VlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzA0ZjQyZDQtYjE1ZC0z NTE2LTk2ZjEtZmEwOTQzZTIxZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/JBMF1is0SEHT61UHVxLI68btF0OKo9HZBBK9M0bXYqiNLLgwVTBDR AWoVPeTaLDjfHKR2T51j2GHm6oHvRBg5QYRCQF9aFOQfWFA3fRFfuodtDy7gWGiS WTb+1Gu+ARky74aGCYA98AQczKTEH4YfPifTBAEgAqL+xDD8//B62W9mhKDNmGPs lOItOtQP+8arEFsSyET562orGXX5rMXLTFtJIZMmHUU7mRS79eQXtDRbNuQhAIM9 Iy4R27h/q6JudeYN7YSRcmOKKAoFaHhx4fJLQgC9MnCXZCXHlssd7Kd7hFpZJzqY e1AC6SVGZxo4XPMGRnkMXDWkNNYw190= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:08 2025 by rpki-client