$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89fa792f-ace9-3717-b0d1-56deb16571ef.roa File: 89fa792f-ace9-3717-b0d1-56deb16571ef.roa (raw, json) Hash identifier: DpqnN4pzH31nFGfNkYuLokvEThdkt6SG41lL0hTFxM8= Subject key identifier: 65:B3:B4:DD:BE:1C:A2:0C:14:3C:CD:DE:DF:26:64:40:E0:7C:30:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584910E17EE39B2E39EBABDB51D8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89fa792f-ace9-3717-b0d1-56deb16571ef.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 20940 IP address blocks: 173.222.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7e:e3:9b:2e:39:eb:ab:db:51:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=8a44506a-65a4-4031-b952-143524cb3b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:40:dc:ca:92:88:b1:fc:21:19:5b:a5:1f: 89:4f:64:54:72:e5:bc:c6:c4:af:85:bb:63:d5:f5: 87:19:9c:1b:74:32:2b:07:a6:76:c8:72:d0:16:e0: 04:bc:2d:22:23:b3:e4:8b:20:94:e9:c0:5e:75:23: cd:80:02:e2:de:d8:ac:58:61:55:0e:28:ea:4c:4d: 79:d4:16:76:4f:de:bb:f3:a2:99:01:f8:e7:60:15: 08:52:37:f2:1b:34:f5:30:77:6e:06:24:e6:14:37: 41:e1:77:a4:db:b0:bf:a6:f2:1f:77:36:f5:34:67: 58:47:fc:e4:87:13:44:2e:63:93:7f:29:01:9b:bc: 08:17:70:09:28:e4:cb:fa:df:83:ac:70:84:7e:09: 58:45:64:a7:bd:90:bb:94:8c:5c:ea:90:73:87:c9: db:ad:54:e6:63:ae:0d:d1:9a:c0:8e:cf:81:47:7d: 08:4b:a5:ae:a9:4f:04:cb:cc:c3:c9:99:3a:f9:54: f0:17:fc:bf:eb:87:01:5b:dd:52:1c:3c:0c:05:d4: 25:6f:a7:39:db:e1:a3:8a:61:c1:43:b0:30:2b:0f: 6b:8b:18:8a:6a:67:3d:3c:22:b2:06:e6:5e:7a:b4: 30:43:13:65:02:cc:25:e3:ce:9a:73:bd:1e:30:37: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:B4:DD:BE:1C:A2:0C:14:3C:CD:DE:DF:26:64:40:E0:7C:30:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89fa792f-ace9-3717-b0d1-56deb16571ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:12:5c:97:52:4b:a8:ba:ff:af:ea:b2:65:3c:0f:44:1d:85: b6:58:5a:1b:6a:04:28:14:80:8c:e6:05:6a:47:38:ae:5b:9d: 16:83:63:3e:6b:28:f8:1a:32:38:9a:0f:d8:df:d5:dd:1e:36: f9:e7:78:c0:0f:cc:1a:0b:3b:36:ea:2b:7c:90:e6:72:10:73: 8e:b2:35:77:51:31:b5:f3:b4:00:c0:94:04:8a:a8:a9:47:33: a4:ed:9a:bf:13:ba:dc:c8:c0:38:2a:0e:8d:d9:e9:74:94:3c: 50:37:59:b0:83:96:1c:70:3a:27:72:19:e9:fa:ca:76:09:da: 4d:05:a7:49:ed:73:05:bc:1e:2d:20:43:1f:4d:ad:a9:76:35: bf:f7:16:3c:1c:78:9b:cc:18:01:80:ac:08:d8:8d:0c:89:0e: ec:e8:4f:66:b7:de:76:f4:36:9b:a9:ff:85:c4:db:75:43:15: 2d:f9:a0:4e:01:41:58:57:35:97:82:ff:3e:6d:68:e3:74:24: 62:4e:a6:38:1e:51:e1:78:b2:ba:bd:e9:5f:0a:64:c9:27:6f: e4:08:90:d9:e4:a6:23:6a:30:a3:fd:dd:e8:01:d9:b9:9c:a0: 46:9e:78:e8:bf:7c:97:8e:25:e0:a4:af:33:4b:7c:f5:9b:1b: 1b:7e:cd:ca -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkQ4X7jmy4566vbUdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk OGE0NDUwNmEtNjVhNC00MDMxLWI5NTItMTQzNTI0Y2IzYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV1A3MqSiLH8IRlbpR+JT2RUcuW8xsSvhbtj 1fWHGZwbdDIrB6Z2yHLQFuAEvC0iI7PkiyCU6cBedSPNgALi3tisWGFVDijqTE15 1BZ2T96786KZAfjnYBUIUjfyGzT1MHduBiTmFDdB4Xek27C/pvIfdzb1NGdYR/zk hxNELmOTfykBm7wIF3AJKOTL+t+DrHCEfglYRWSnvZC7lIxc6pBzh8nbrVTmY64N 0ZrAjs+BR30IS6WuqU8Ey8zDyZk6+VTwF/y/64cBW91SHDwMBdQlb6c52+GjimHB Q7AwKw9rixiKamc9PCKyBuZeerQwQxNlAswl486ac70eMDf2TwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGWztN2+HKIMFDzN3t8mZEDgfDAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlmYTc5MmYtYWNlOS0z NzE3LWIwZDEtNTZkZWIxNjU3MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBrd4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEhJcl1JLqLr/r+qyZTwPRB2FtlhaG2oEKBSAjOYFakc4rludFoNjPmso +BoyOJoP2N/V3R42+ed4wA/MGgs7NuorfJDmchBzjrI1d1ExtfO0AMCUBIqoqUcz pO2avxO63MjAOCoOjdnpdJQ8UDdZsIOWHHA6J3IZ6frKdgnaTQWnSe1zBbweLSBD H02tqXY1v/cWPBx4m8wYAYCsCNiNDIkO7OhPZrfedvQ2m6n/hcTbdUMVLfmgTgFB WFc1l4L/Pm1o43QkYk6mOB5R4Xiyur3pXwpkySdv5AiQ2eSmI2owo/3d6AHZuZyg Rp546L98l44l4KSvM0t89ZsbG37Nyg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:24 2025 by rpki-client