$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa File: 8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa (raw, json) Hash identifier: QUysOlCGSHT9xXOW5yLSZu2Vxda3pULZzHjE2+mC994= Subject key identifier: 8F:91:D6:F9:16:74:90:00:6A:9D:7A:B3:5E:E4:DE:D1:A0:BB:65:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E59BD26197A18D81DC06EA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 63949 IP address blocks: 172.236.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d2:61:97:a1:8d:81:dc:06:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d693895b-6a15-4fb3-96b0-bafa0fdd5051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:01:d1:a4:e7:3c:a3:ef:d7:5f:7d:67:e3: 54:60:c2:8d:8c:8c:69:c6:a6:ee:aa:4c:84:18:a5: 85:73:c9:dc:61:38:58:af:e0:d2:52:18:96:07:51: c7:bf:52:3d:1e:19:e8:19:11:72:28:b2:30:c1:97: 7b:b3:bd:e8:b6:1d:01:f6:c9:8f:eb:4d:4a:b4:13: ce:b3:6d:63:84:2c:ba:d1:23:0a:f0:1b:64:de:bb: 59:ae:f9:76:d7:2c:7e:11:2c:f4:3f:11:e2:64:60: b5:5c:95:45:c1:2d:b2:13:b7:56:c7:0a:b6:9c:d7: 22:94:c7:93:08:20:01:7c:e0:b6:9d:ae:fc:15:3e: 33:d6:86:18:58:bc:72:59:41:2d:08:a8:35:42:36: 9b:14:28:ff:72:33:12:c0:82:09:8e:d2:07:d1:4b: 7e:de:05:a3:b5:5f:c9:e7:ff:e4:3e:18:7f:f7:9a: ef:ff:02:68:eb:de:e1:31:ef:81:a7:09:31:9d:73: 7f:61:92:52:94:4a:8b:86:14:6f:8d:30:cf:f6:ab: 51:40:24:4b:4c:a4:5e:cb:e8:8f:50:2e:a3:8d:7a: 2d:a7:d2:d6:68:c5:18:62:b5:6c:d3:16:8b:11:57: 2f:c4:27:63:e0:42:c1:13:19:14:96:8d:81:1d:2f: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:91:D6:F9:16:74:90:00:6A:9D:7A:B3:5E:E4:DE:D1:A0:BB:65:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:66:0e:3f:3f:32:60:07:ae:c5:17:8d:58:36:41:0e:3e:5d: 59:8f:c4:a6:0c:00:19:7f:0e:eb:f3:a4:94:59:3a:24:ad:fb: 34:35:ed:4a:cf:69:a2:48:aa:27:83:dc:81:80:bf:76:e4:91: 48:87:64:71:91:3b:ee:be:4a:45:18:07:cb:ca:a8:34:47:cc: cf:91:50:f5:65:0d:70:9d:04:dc:20:c7:cd:56:82:40:67:a6: b9:57:08:31:7a:40:b5:3a:0b:e5:02:fe:39:67:48:10:e0:7b: d5:03:c2:88:16:e1:45:98:6f:75:45:9f:9a:18:31:76:6c:82: e6:55:3a:3d:dc:d3:26:dd:16:26:65:6b:83:80:1f:ef:90:d5: a8:a2:6c:d4:1a:4b:04:ed:6e:c9:b1:41:de:27:a7:cc:a0:7e: 37:ff:0a:63:e8:cc:3f:22:9b:2d:6b:b3:65:fb:82:23:e4:74: c7:66:47:0e:3f:15:b9:2a:03:35:f7:5c:37:4d:c1:e3:a6:f8: cf:87:8f:61:fb:51:f4:3e:47:28:59:05:67:fd:e6:84:62:61: 13:7c:a1:f4:03:fa:3d:cc:a4:20:fd:df:57:ab:f8:eb:81:1f: 45:cf:35:f4:60:59:05:b3:1d:e9:31:7e:67:2f:cb:44:73:e6: 53:eb:f7:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9Jhl6GNgdwG6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDY5Mzg5NWItNmExNS00ZmIzLTk2YjAtYmFmYTBmZGQ1MDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm0B0aTnPKPv1199Z+NUYMKNjIxpxqbuqkyE GKWFc8ncYThYr+DSUhiWB1HHv1I9HhnoGRFyKLIwwZd7s73oth0B9smP601KtBPO s21jhCy60SMK8Btk3rtZrvl21yx+ESz0PxHiZGC1XJVFwS2yE7dWxwq2nNcilMeT CCABfOC2na78FT4z1oYYWLxyWUEtCKg1QjabFCj/cjMSwIIJjtIH0Ut+3gWjtV/J 5//kPhh/95rv/wJo697hMe+BpwkxnXN/YZJSlEqLhhRvjTDP9qtRQCRLTKRey+iP UC6jjXotp9LWaMUYYrVs0xaLEVcvxCdj4ELBExkUlo2BHS8LVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+R1vkWdJAAap16s17k3tGgu2W5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIyMzlkZmYtNmIxNy0z YjA1LWFhM2YtZTdiODJhMGRlYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNmDj8/MmAHrsUXjVg2QQ4+XVmPxKYMABl/DuvzpJRZOiSt+zQ17UrP aaJIqieD3IGAv3bkkUiHZHGRO+6+SkUYB8vKqDRHzM+RUPVlDXCdBNwgx81WgkBn prlXCDF6QLU6C+UC/jlnSBDge9UDwogW4UWYb3VFn5oYMXZsguZVOj3c0ybdFiZl a4OAH++Q1aiibNQaSwTtbsmxQd4np8ygfjf/CmPozD8imy1rs2X7giPkdMdmRw4/ FbkqAzX3XDdNweOm+M+Hj2H7UfQ+RyhZBWf95oRiYRN8ofQD+j3MpCD931er+OuB H0XPNfRgWQWzHekxfmcvy0Rz5lPr9+I= -----END CERTIFICATE-----Generated at Sun Feb 16 20:30:28 2025 by rpki-client