$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78a46fe5-ef49-32b2-bd08-862561d1923c.roa File: 78a46fe5-ef49-32b2-bd08-862561d1923c.roa (raw, json) Hash identifier: J863KkhOMX6u+jW/uG01OY+BUejC6KKhdNeYHmj459g= Subject key identifier: 00:C1:06:03:B9:3D:FC:C1:CE:B1:72:8B:CD:30:22:67:AD:B2:41:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F4F81F098091AC5665C17B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78a46fe5-ef49-32b2-bd08-862561d1923c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.224.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:1f:09:80:91:ac:56:65:c1:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f72ef076-fd82-4d69-a3fb-113b18ad3ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:44:96:f0:81:71:21:d0:de:d2:81:f4:74: 01:f9:ed:ab:4b:16:81:c8:0b:c1:9f:c2:e0:f0:9d: 0e:17:d2:05:82:c4:65:97:fc:5c:c0:76:69:c8:44: b3:3e:fd:cf:00:6a:bc:4e:84:40:1e:a5:1d:1b:90: 25:3b:87:64:f8:e5:1b:43:26:20:1b:4c:dc:4e:2f: 37:46:d1:1a:4e:88:e0:ba:76:e4:72:0b:fb:7b:49: dd:ba:8c:5f:5e:fc:00:49:da:8d:c4:00:2b:f0:66: 1f:7d:f6:a0:9f:2a:85:eb:a3:8a:a8:6d:2d:2e:e8: 68:c7:ca:ff:62:dc:6e:df:84:5d:0d:d1:61:fd:f0: 67:92:6d:6c:11:a2:e3:78:f7:31:35:a9:f1:50:2e: 06:25:b1:bd:80:22:bc:33:1e:f6:14:af:22:2c:a1: 78:38:03:3a:cd:bf:ff:0a:0d:2e:ed:08:69:65:26: 9f:62:57:64:1b:7b:07:50:88:2e:76:c0:04:d2:c6: 4a:8c:c5:c5:0b:51:2b:4c:da:1d:76:dd:4d:62:05: 45:87:d2:2c:be:fb:07:74:66:98:dc:f7:59:47:9c: 15:81:0e:f6:30:53:14:df:38:df:6e:f8:05:df:82: 96:90:42:af:26:6b:1d:09:f9:6a:ac:00:22:47:cc: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:06:03:B9:3D:FC:C1:CE:B1:72:8B:CD:30:22:67:AD:B2:41:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78a46fe5-ef49-32b2-bd08-862561d1923c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b2:4b:fc:10:bc:35:1c:ad:ac:55:ba:d7:ce:8e:fa:47:c1: 6b:54:04:1a:4c:bd:12:ef:de:db:44:39:55:e3:1e:9e:2d:42: 1d:52:c7:5e:89:aa:91:fb:b4:fc:bb:bc:54:e3:68:a0:c3:10: c2:4e:98:ee:ea:e3:9b:06:60:2d:23:85:ae:d4:c2:c9:03:3a: 94:b2:05:59:ca:97:33:79:11:80:6f:83:55:f8:cd:e4:80:c0: 4e:fa:d8:11:25:ff:b8:ec:9b:d0:0b:f3:c2:5c:8f:c8:a4:16: 24:1e:f6:11:ca:7f:34:53:c9:11:8b:94:5d:a9:b5:e0:44:5d: dd:92:78:96:03:26:32:8e:1f:7f:de:8d:04:75:d1:fd:ed:8b: ea:f8:29:3c:d0:5e:f7:98:87:4d:b3:6b:9c:f7:a4:49:00:10: 7b:ae:14:71:f9:e1:bd:d6:62:ce:dc:8c:79:d0:01:e7:40:19: 8f:b9:3b:d7:a4:0a:53:3d:93:72:78:e4:0f:b4:b8:e6:21:50: 4a:d7:57:24:1b:06:bf:71:e3:f4:f1:c0:53:59:7d:32:37:2f: 3d:41:00:a3:1b:59:81:32:06:38:40:d2:3c:69:a9:fd:aa:55: bd:14:47:c9:e2:5b:12:ba:e1:3e:35:81:ce:3a:7a:27:96:29: e1:72:7f:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+B8JgJGsVmXBe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjcyZWYwNzYtZmQ4Mi00ZDY5LWEzZmItMTEzYjE4YWQzY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV9ElvCBcSHQ3tKB9HQB+e2rSxaByAvBn8Lg 8J0OF9IFgsRll/xcwHZpyESzPv3PAGq8ToRAHqUdG5AlO4dk+OUbQyYgG0zcTi83 RtEaTojgunbkcgv7e0nduoxfXvwASdqNxAAr8GYfffagnyqF66OKqG0tLuhox8r/ Ytxu34RdDdFh/fBnkm1sEaLjePcxNanxUC4GJbG9gCK8Mx72FK8iLKF4OAM6zb// Cg0u7QhpZSafYldkG3sHUIgudsAE0sZKjMXFC1ErTNoddt1NYgVFh9IsvvsHdGaY 3PdZR5wVgQ72MFMU3zjfbvgF34KWkEKvJmsdCflqrAAiR8z1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADBBgO5PfzBzrFyi80wImetskFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzhhNDZmZTUtZWY0OS0z MmIyLWJkMDgtODYyNTYxZDE5MjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyyS/wQvDUcraxVutfOjvpHwWtUBBpMvRLv3ttEOVXjHp4tQh1Sx16J qpH7tPy7vFTjaKDDEMJOmO7q45sGYC0jha7UwskDOpSyBVnKlzN5EYBvg1X4zeSA wE762BEl/7jsm9AL88Jcj8ikFiQe9hHKfzRTyRGLlF2pteBEXd2SeJYDJjKOH3/e jQR10f3ti+r4KTzQXveYh02za5z3pEkAEHuuFHH54b3WYs7cjHnQAedAGY+5O9ek ClM9k3J45A+0uOYhUErXVyQbBr9x4/TxwFNZfTI3Lz1BAKMbWYEyBjhA0jxpqf2q Vb0UR8niWxK64T41gc46eieWKeFyfxY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:33 2025 by rpki-client