$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88d40d93-4b81-377b-8f86-5eb2c73114b5.roa File: 88d40d93-4b81-377b-8f86-5eb2c73114b5.roa (raw, json) Hash identifier: Wmb+eFaFdvIk9LtfP5io6M+/VIdudxeI2M7g1Qu8KDs= Subject key identifier: 7B:2F:5A:C6:38:A8:73:3F:30:8F:52:A9:38:7C:82:AA:B3:6F:A8:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF1B4A2E3E3F3E3E7DAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88d40d93-4b81-377b-8f86-5eb2c73114b5.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f1:b4:a2:e3:e3:f3:e3:e7:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=8d3ba2da-e3bd-40c4-945e-c20302cffca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:98:c2:53:50:62:0b:8e:4b:03:8a:6a:43:52: 86:0d:7a:59:ec:80:d0:2a:a2:55:97:bb:0d:00:9c: 80:6f:7a:1b:2f:0f:5a:6e:eb:b2:97:85:c2:31:2e: be:d8:38:3b:0f:74:35:f5:8d:83:14:a8:f3:e8:f2: 2d:15:13:5e:16:a4:88:fb:15:2d:ae:5d:e8:d2:26: 06:cc:8a:66:fc:15:e6:93:ef:98:cc:c9:90:38:52: 69:e7:59:30:07:10:d3:a2:7d:bc:33:09:f6:5a:94: a5:c8:f4:ab:91:d9:ea:96:dc:ab:49:cb:4f:a0:b6: ea:e7:91:49:ae:5f:23:d6:87:76:e0:6d:2f:ab:ac: d3:da:17:26:81:0e:3f:48:f2:92:d5:bb:bb:9a:62: 43:7a:3f:69:b4:b0:29:43:89:d6:67:10:8f:9a:59: e0:e1:b8:72:46:f3:91:65:7c:14:b0:b2:85:40:55: be:05:9a:ed:68:e3:db:86:23:27:df:9a:22:d8:58: 72:5a:54:af:85:da:ba:e1:1e:8a:5d:e2:60:b6:48: 39:88:0d:dd:7d:f1:d0:60:93:eb:1b:39:d5:ce:6c: 3d:26:f3:cf:a8:5c:ab:b0:7e:5b:37:08:f7:1f:41: ee:fa:35:b8:28:ee:56:07:d9:2c:ba:52:c4:1c:c2: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2F:5A:C6:38:A8:73:3F:30:8F:52:A9:38:7C:82:AA:B3:6F:A8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88d40d93-4b81-377b-8f86-5eb2c73114b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7f:39:e3:c7:56:2b:29:9c:f2:49:77:f5:3a:d8:34:7b:d7: 14:26:f7:4b:b2:51:0c:73:6a:7f:be:f1:f1:ea:70:f1:74:8f: 8f:87:ca:c0:5e:29:91:8e:a1:26:05:9b:35:0f:de:cd:a7:4b: 54:82:26:9a:ca:6e:85:cb:4a:cf:a8:21:ba:a3:c3:ae:b0:f9: 21:e0:42:31:9f:1d:10:18:77:c8:ac:10:4c:79:68:48:d4:80: 86:77:42:f5:ac:58:e5:a3:9f:d2:6e:93:8c:ca:6a:da:cf:15: 25:b4:fb:b0:b5:3a:e0:40:1d:5b:ac:d2:9a:a6:9e:a1:b8:8a: 6d:2c:cc:c7:1c:ab:2e:ba:41:b4:59:5d:33:c2:48:b7:a9:80: d1:32:bc:83:99:24:36:55:e0:e8:64:5f:fd:e5:cb:b5:8d:8c: 77:53:5a:d5:42:42:07:53:9d:74:ec:c5:31:17:c4:b8:bd:87: 7a:58:75:67:5d:e5:18:08:b1:50:e2:99:33:62:2b:25:97:80: d3:46:5e:17:10:bc:75:52:f8:91:0b:16:c8:1c:0d:21:87:07: 89:5c:34:11:98:e9:29:1f:a5:f9:ea:a0:b2:ff:ae:c2:9b:f5: 64:08:8a:36:cb:de:bd:ab:00:85:08:7b:be:8c:bb:43:12:7d: 2d:ce:9e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/G0ouPj8+Pn2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OGQzYmEyZGEtZTNiZC00MGM0LTk0NWUtYzIwMzAyY2ZmY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85jCU1BiC45LA4pqQ1KGDXpZ7IDQKqJVl7sN AJyAb3obLw9abuuyl4XCMS6+2Dg7D3Q19Y2DFKjz6PItFRNeFqSI+xUtrl3o0iYG zIpm/BXmk++YzMmQOFJp51kwBxDTon28Mwn2WpSlyPSrkdnqltyrSctPoLbq55FJ rl8j1od24G0vq6zT2hcmgQ4/SPKS1bu7mmJDej9ptLApQ4nWZxCPmlng4bhyRvOR ZXwUsLKFQFW+BZrtaOPbhiMn35oi2FhyWlSvhdq64R6KXeJgtkg5iA3dffHQYJPr GznVzmw9JvPPqFyrsH5bNwj3H0Hu+jW4KO5WB9ksulLEHMII/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsvWsY4qHM/MI9SqTh8gqqzb6goMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhkNDBkOTMtNGI4MS0z NzdiLThmODYtNWViMmM3MzExNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5/OePHVispnPJJd/U62DR71xQm90uyUQxzan++8fHqcPF0j4+HysBe KZGOoSYFmzUP3s2nS1SCJprKboXLSs+oIbqjw66w+SHgQjGfHRAYd8isEEx5aEjU gIZ3QvWsWOWjn9Juk4zKatrPFSW0+7C1OuBAHVus0pqmnqG4im0szMccqy66QbRZ XTPCSLepgNEyvIOZJDZV4OhkX/3ly7WNjHdTWtVCQgdTnXTsxTEXxLi9h3pYdWdd 5RgIsVDimTNiKyWXgNNGXhcQvHVS+JELFsgcDSGHB4lcNBGY6SkfpfnqoLL/rsKb 9WQIijbL3r2rAIUIe76Mu0MSfS3Onqw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:54 2025 by rpki-client