$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa File: 8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa (raw, json) Hash identifier: Tdzwa+37MU1uyHW1ccg0BfyoOFkfwR+zF7J9DJnu/I4= Subject key identifier: 96:1F:E2:E8:87:CF:79:C0:6B:07:53:D8:AA:37:E3:5F:67:14:14:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489E6B627A9A971E4DDF0A2500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 63949 IP address blocks: 170.187.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:62:7a:9a:97:1e:4d:df:0a:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4b74d84c-c2cf-4a9b-967f-9bb05531e1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:0b:0b:9e:89:f0:e7:d0:3b:94:52:4f:1f: 9f:b5:f6:cf:94:28:7c:e2:dd:29:f8:ad:43:86:39: 8b:05:00:66:76:e6:56:49:11:25:c2:1d:c8:fd:9d: be:09:c9:8e:c9:14:90:3f:5b:28:fd:6f:dd:31:a7: 0a:17:5a:b3:62:e4:1c:df:52:de:40:ba:e1:7a:72: 7a:28:e2:af:32:79:2a:6c:42:d6:65:62:4c:34:4e: f6:ee:52:f2:30:b8:98:0c:1c:fe:b8:73:9c:03:4e: 17:fb:7c:3e:58:61:68:6b:76:4d:8e:ac:80:a5:c8: 47:dd:fd:10:97:b0:e7:45:9a:77:3e:1d:c4:d8:c6: 92:e4:24:e9:59:f0:e9:d2:92:7e:1d:20:00:3e:4a: 16:3b:31:4c:b5:e4:f8:fa:50:ea:9d:20:66:e9:4e: 17:4b:8b:e3:df:75:3d:48:56:23:05:ae:83:24:2f: df:0c:f9:74:ef:2c:1f:2a:f0:25:7a:c7:46:44:22: cc:cc:e4:93:a0:bc:f6:f1:9f:03:9d:85:28:ce:dc: e6:af:53:e7:0e:c3:bc:89:b9:0d:6f:77:74:b1:8c: 2b:53:c2:13:f2:76:f6:71:65:8e:e9:f3:3f:5b:fa: 61:01:3d:3d:e2:c9:65:56:af:b4:eb:20:bf:b7:99: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:E2:E8:87:CF:79:C0:6B:07:53:D8:AA:37:E3:5F:67:14:14:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8393c4ba-ecf3-3b67-aa36-bf87bcd67c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:66:30:9b:4a:5f:3b:f3:ce:43:b0:e3:b8:f0:2b:b5:73:b7: bf:6c:6d:eb:a0:0f:93:33:a5:9d:27:4f:84:92:0c:ed:c1:84: 91:0e:6e:01:b6:a4:c9:24:05:c9:f3:8b:02:7f:1b:76:a8:fc: a9:51:ab:26:44:27:10:ff:39:ad:83:b7:5e:24:7b:f0:c9:ee: a5:42:bb:89:dc:f2:4e:da:79:1e:75:a5:37:4f:63:2a:0f:30: c1:44:ef:a5:f9:c8:b9:ff:42:49:67:1a:bf:da:8d:37:b4:7a: d0:fc:f6:1d:fd:6f:5d:c6:c6:ce:0a:20:16:9b:1e:f1:00:4b: 3d:67:01:eb:da:c6:53:4a:b2:9d:a2:dd:8c:a1:72:be:e6:77: 84:1f:d3:3d:13:b2:1b:1b:8f:35:a6:4a:34:9c:e7:5a:ad:67: c1:9f:5c:75:61:9d:06:48:df:f7:3e:5b:c7:9b:03:ba:6b:8e: 64:29:f4:52:b7:11:43:94:1b:bd:92:8e:55:b6:3b:54:5a:2f: b6:fc:63:ef:4d:4e:72:b1:2b:69:d0:72:f2:a3:5c:5a:2c:2c: e7:57:cc:2a:c1:d2:2b:f9:b6:69:d0:44:f1:67:4c:28:39:51: 3e:0e:e0:79:03:b6:80:39:d0:41:18:7e:ce:b2:a4:c7:a8:fa: 87:b0:ca:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2J6mpceTd8KJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGI3NGQ4NGMtYzJjZi00YTliLTk2N2YtOWJiMDU1MzFlMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOILC56J8OfQO5RSTx+ftfbPlCh84t0p+K1D hjmLBQBmduZWSRElwh3I/Z2+CcmOyRSQP1so/W/dMacKF1qzYuQc31LeQLrhenJ6 KOKvMnkqbELWZWJMNE727lLyMLiYDBz+uHOcA04X+3w+WGFoa3ZNjqyApchH3f0Q l7DnRZp3Ph3E2MaS5CTpWfDp0pJ+HSAAPkoWOzFMteT4+lDqnSBm6U4XS4vj33U9 SFYjBa6DJC/fDPl07ywfKvAlesdGRCLMzOSToLz28Z8DnYUoztzmr1PnDsO8ibkN b3d0sYwrU8IT8nb2cWWO6fM/W/phAT094sllVq+06yC/t5mRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYf4uiHz3nAawdT2Ko3419nFBSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM5M2M0YmEtZWNmMy0z YjY3LWFhMzYtYmY4N2JjZDY3YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqruQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdmMJtKXzvzzkOw47jwK7Vzt79sbeugD5MzpZ0nT4SSDO3BhJEObgG2 pMkkBcnziwJ/G3ao/KlRqyZEJxD/Oa2Dt14ke/DJ7qVCu4nc8k7aeR51pTdPYyoP MMFE76X5yLn/QklnGr/ajTe0etD89h39b13Gxs4KIBabHvEASz1nAevaxlNKsp2i 3Yyhcr7md4Qf0z0TshsbjzWmSjSc51qtZ8GfXHVhnQZI3/c+W8ebA7prjmQp9FK3 EUOUG72SjlW2O1RaL7b8Y+9NTnKxK2nQcvKjXFosLOdXzCrB0iv5tmnQRPFnTCg5 UT4O4HkDtoA50EEYfs6ypMeo+oewyp4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:26 2025 by rpki-client