$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa File: 87dc928d-56d9-335f-8791-38a1a46bbb9d.roa (raw, json) Hash identifier: rYRKeSb+fY4JXPF03hglpHLQQamgXr1fQ1VM7Ml9USQ= Subject key identifier: CA:63:C7:69:CD:36:F0:E6:DB:89:D2:B5:53:FE:2C:00:7E:F0:9E:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614EE5F7760BE65E21D780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4e:e5:f7:76:0b:e6:5e:21:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=520af2e8-8049-43de-94d8-95a908738831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:f8:3d:b4:13:3f:ca:4e:e7:e3:da:64:09: 35:ad:70:69:aa:75:b9:01:db:b7:ac:f5:44:e5:68: e9:a3:f8:10:6a:73:8b:0e:04:42:d3:20:94:c3:29: ae:cb:d1:0b:98:bd:03:d2:61:55:68:3a:25:75:9e: 96:0a:d9:86:50:13:ba:68:96:df:49:29:3f:46:e2: 4a:91:1d:33:9a:9c:f7:a8:92:49:f5:96:53:d6:2d: 57:e0:32:bb:6d:7d:00:34:59:db:8d:29:e8:e9:60: 29:b3:2c:36:4d:c2:82:52:bb:ef:ff:9b:87:cb:43: 5d:f0:b6:fc:a2:25:c6:06:c2:54:46:e7:ac:2d:59: 63:22:79:0c:c3:cb:d7:47:d1:5f:8b:62:69:97:6b: 13:c4:f8:36:59:7c:3b:8f:72:dc:3d:44:8b:7d:23: a0:27:ae:5b:c5:06:37:87:3c:2f:ca:83:b6:87:8a: 9f:1a:4d:26:23:de:22:0a:54:d0:76:55:44:50:88: 91:a8:38:da:03:cd:04:9b:81:b5:ea:48:7a:e6:f8: 12:5c:77:22:e1:ba:49:10:80:70:d2:36:61:2e:43: 59:1d:d2:ba:e8:cb:87:f7:26:97:c2:59:3c:39:cc: 49:d6:57:e4:38:07:1b:5b:a2:b4:8c:aa:c8:5f:14: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:C7:69:CD:36:F0:E6:DB:89:D2:B5:53:FE:2C:00:7E:F0:9E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:44:8f:dc:be:b9:51:bd:80:e6:85:88:14:23:1c:14:cd:bb: fc:0b:49:32:6b:75:d0:46:6e:5f:7f:51:14:93:f8:ff:a6:ee: e1:24:9b:ac:67:8b:a2:d3:8c:a5:1c:d1:19:24:41:31:e7:f0: 30:bf:ce:cb:0b:d0:2a:d2:59:7d:4f:dd:24:17:fd:92:6c:d9: 3a:4d:75:58:d8:92:a5:10:35:af:ed:ba:0e:fb:e6:60:18:c2: 8e:36:d5:8b:fe:ad:0f:a9:85:d5:bd:18:a6:0e:01:20:ac:ea: 0b:2b:6b:15:02:0b:c3:c8:20:00:50:75:0d:43:df:4d:64:0b: 69:fd:26:59:bf:e0:fa:06:47:b9:10:75:9c:a1:00:31:8f:e1: 60:35:5d:57:42:49:b5:0c:17:56:c1:0b:bd:f8:0c:50:c1:0e: 04:f3:64:0b:6a:4f:21:a8:0a:71:c8:28:30:59:1c:bf:2a:ef: c6:e0:55:69:a5:4c:61:c4:76:1c:58:74:fa:ec:3a:07:7c:88: 77:12:f5:76:d9:93:e8:25:e3:44:95:1a:31:36:37:7b:10:af: 21:2b:a5:cb:b4:87:fd:8d:7d:54:70:2b:c7:b7:66:9a:1d:ec: 95:06:31:70:d3:3f:95:83:63:f6:d8:cd:cf:ba:af:fa:76:48: c1:1f:92:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU7l93YL5l4h14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NTIwYWYyZTgtODA0OS00M2RlLTk0ZDgtOTVhOTA4NzM4ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZX4PbQTP8pO5+PaZAk1rXBpqnW5Adu3rPVE 5Wjpo/gQanOLDgRC0yCUwymuy9ELmL0D0mFVaDoldZ6WCtmGUBO6aJbfSSk/RuJK kR0zmpz3qJJJ9ZZT1i1X4DK7bX0ANFnbjSno6WApsyw2TcKCUrvv/5uHy0Nd8Lb8 oiXGBsJURuesLVljInkMw8vXR9Ffi2Jpl2sTxPg2WXw7j3LcPUSLfSOgJ65bxQY3 hzwvyoO2h4qfGk0mI94iClTQdlVEUIiRqDjaA80Em4G16kh65vgSXHci4bpJEIBw 0jZhLkNZHdK66MuH9yaXwlk8OcxJ1lfkOAcbW6K0jKrIXxS2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpjx2nNNvDm24nStVP+LAB+8J7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdkYzkyOGQtNTZkOS0z MzVmLTg3OTEtMzhhMWE0NmJiYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFEj9y+uVG9gOaFiBQjHBTNu/wLSTJrddBGbl9/URST+P+m7uEkm6xn i6LTjKUc0RkkQTHn8DC/zssL0CrSWX1P3SQX/ZJs2TpNdVjYkqUQNa/tug775mAY wo421Yv+rQ+phdW9GKYOASCs6gsraxUCC8PIIABQdQ1D301kC2n9Jlm/4PoGR7kQ dZyhADGP4WA1XVdCSbUMF1bBC734DFDBDgTzZAtqTyGoCnHIKDBZHL8q78bgVWml TGHEdhxYdPrsOgd8iHcS9XbZk+gl40SVGjE2N3sQryErpcu0h/2NfVRwK8e3Zpod 7JUGMXDTP5WDY/bYzc+6r/p2SMEfkkk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:16 2025 by rpki-client