$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa File: 88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa (raw, json) Hash identifier: hQ48auRAXyjJEL8Y+XeHlHjEQVxjCNBS9uF0J8lcNKc= Subject key identifier: 71:5B:9A:B8:22:AB:1E:42:97:A1:EA:C0:08:1A:0A:A3:15:1D:50:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C3AA8EA0317B54E6759C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 72.246.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:3a:a8:ea:03:17:b5:4e:67:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=396da96e-8e84-471c-b1d4-4e9967cd4e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:87:81:f9:1d:b3:df:81:86:8e:3b:cf:da:1f: 15:48:5e:ab:96:e6:04:fa:5f:ca:65:cc:a9:76:25: 77:e6:6b:75:29:db:4c:63:07:e3:d8:0b:1b:9a:96: d5:49:57:c0:c8:13:ab:4d:ad:80:ae:71:bc:14:3d: ed:60:6e:78:5c:e5:d6:d6:e7:e1:3f:e4:90:6e:7c: 27:cf:83:c0:2b:e1:7d:17:1f:b0:a2:4a:c0:df:bf: 0c:5c:7a:28:e1:be:fc:b4:88:2f:76:74:2d:d7:0f: bd:53:d9:82:03:66:8f:03:8c:02:f2:eb:08:3d:b2: 11:21:96:b7:10:f2:45:5d:4f:e7:80:b7:12:3a:dd: 96:43:2c:fc:1c:1a:e4:9c:da:d6:19:f9:49:9f:c7: 6a:95:42:e1:d6:58:6f:aa:02:f6:b0:6b:5c:1e:2a: 0c:72:62:bb:81:50:74:55:ef:d8:06:1d:13:6d:0e: 0a:14:f3:78:5f:e8:83:85:1c:4d:43:07:fe:75:ff: 3c:44:b9:21:db:50:0f:d3:82:b6:58:b3:d5:5d:96: af:d8:93:de:53:9f:05:ed:71:49:67:d5:5d:60:ed: 3e:74:93:37:75:19:cd:45:8e:36:90:79:71:0e:11: 22:77:b2:8c:b6:60:31:80:96:13:7f:30:85:d7:ec: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:9A:B8:22:AB:1E:42:97:A1:EA:C0:08:1A:0A:A3:15:1D:50:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:14:25:8e:54:f8:4c:b9:8b:e0:4c:46:cc:d7:e5:c2:f8:0a: b8:ec:f6:4d:4f:f0:bd:3e:96:6c:fa:eb:ae:8e:c9:f4:86:43: d6:8b:92:38:73:ec:24:b3:bc:0e:68:09:45:82:f4:25:cb:b5: bf:09:14:3f:ef:68:be:fd:7f:af:ea:10:a8:f8:3d:2d:0d:af: 59:2e:d0:2c:28:86:9e:41:59:49:86:3b:a9:76:12:8a:f2:02: 84:c6:d0:3f:72:6e:79:12:fd:f3:2e:17:2e:ef:56:1b:9d:82: 34:94:17:b0:c5:15:97:a6:0d:9a:4d:09:93:0c:ed:7f:51:be: f6:9e:b2:88:eb:89:32:66:08:ea:24:a8:c7:c8:1b:48:b5:74: b0:2c:63:a1:0d:94:d2:e5:80:05:d2:1f:a5:c6:d4:1c:c1:4e: 6a:72:cc:2c:1e:96:00:a4:87:77:c4:1f:1b:0a:03:80:d4:7f: e9:55:ee:29:73:d6:21:26:7d:af:ef:e9:5b:28:65:9a:a9:23: 8d:25:74:5f:f0:af:0d:5c:67:8a:3c:18:2f:60:56:e7:54:01: b8:c5:ae:78:df:7c:6e:28:04:9a:34:6d:3d:8e:87:08:8f:17: 1e:b7:56:f9:d3:49:a1:f4:32:df:5a:fa:11:1c:ae:62:53:8f: d9:4d:cc:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDqo6gMXtU5nWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk Mzk2ZGE5NmUtOGU4NC00NzFjLWIxZDQtNGU5OTY3Y2Q0ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oeB+R2z34GGjjvP2h8VSF6rluYE+l/KZcyp diV35mt1KdtMYwfj2AsbmpbVSVfAyBOrTa2ArnG8FD3tYG54XOXW1ufhP+SQbnwn z4PAK+F9Fx+wokrA378MXHoo4b78tIgvdnQt1w+9U9mCA2aPA4wC8usIPbIRIZa3 EPJFXU/ngLcSOt2WQyz8HBrknNrWGflJn8dqlULh1lhvqgL2sGtcHioMcmK7gVB0 Ve/YBh0TbQ4KFPN4X+iDhRxNQwf+df88RLkh21AP04K2WLPVXZav2JPeU58F7XFJ Z9VdYO0+dJM3dRnNRY42kHlxDhEid7KMtmAxgJYTfzCF1+zPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFbmrgiqx5Cl6HqwAgaCqMVHVDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhmNWIzNmYtMDU5Ni0z Y2NhLWFhNWItODA4ZGNkMGYzOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8UJY5U+Ey5i+BMRszX5cL4Crjs9k1P8L0+lmz6666OyfSGQ9aLkjhz 7CSzvA5oCUWC9CXLtb8JFD/vaL79f6/qEKj4PS0Nr1ku0Cwohp5BWUmGO6l2Eory AoTG0D9ybnkS/fMuFy7vVhudgjSUF7DFFZemDZpNCZMM7X9RvvaesojriTJmCOok qMfIG0i1dLAsY6ENlNLlgAXSH6XG1BzBTmpyzCwelgCkh3fEHxsKA4DUf+lV7ilz 1iEmfa/v6VsoZZqpI40ldF/wrw1cZ4o8GC9gVudUAbjFrnjffG4oBJo0bT2OhwiP Fx63VvnTSaH0Mt9a+hEcrmJTj9lNzOs= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:50 2025 by rpki-client