$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c6ced0c-0161-3d8b-97b7-fb0fae00f9b1.roa File: 8c6ced0c-0161-3d8b-97b7-fb0fae00f9b1.roa (raw, json) Hash identifier: cJHj35xZVyocWSUiCp0QAcPgRQk9PvpJb6QksTzJlzI= Subject key identifier: BA:E9:D7:F3:13:95:09:AB:99:3A:EA:60:5D:1D:84:03:6C:AF:7D:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848D0ABB0720B98A9922F6D5E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c6ced0c-0161-3d8b-97b7-fb0fae00f9b1.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 63949 IP address blocks: 172.232.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b0:72:0b:98:a9:92:2f:6d:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=5f989ef1-e130-41b1-b5e8-556884d0250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:7c:22:ec:8e:f4:90:58:6b:6c:28:5d:6b: 4d:8d:1b:45:1b:9c:14:2a:b7:48:90:91:52:d7:4f: 10:f7:1c:33:3c:0e:33:f0:33:82:25:0d:b2:ae:3b: f4:ab:c3:a2:25:72:1c:92:e6:66:9d:40:03:28:4d: 17:cd:1c:45:c5:a8:20:cb:6e:74:8c:3c:64:af:da: d1:22:f1:d9:6b:ad:a1:f3:ac:63:a0:e1:0a:f5:26: 0c:0c:38:10:6b:c8:96:bd:d8:cb:f6:82:4d:1f:87: 40:c8:4a:3f:70:cd:0c:f3:88:ea:71:3c:44:0a:8a: b2:c9:f3:29:4c:28:a0:bf:ac:19:66:b3:79:32:0f: a1:ea:84:3d:7b:1c:0c:0d:16:c8:ce:61:98:c9:15: 3d:98:25:ac:25:24:35:a0:9d:3d:0f:28:49:d6:26: b2:7e:05:77:82:cd:3b:b6:c5:a3:6e:70:0a:e9:ee: a5:4c:ad:96:c2:a9:02:81:65:7a:d9:26:f1:02:cb: 9a:dd:4b:e4:75:8c:f3:f7:b9:89:08:ac:84:3b:8c: 24:7c:3e:94:dd:ff:2d:1c:4d:56:cc:99:13:78:47: a6:d3:54:c6:2a:cd:97:5b:c6:1c:74:f5:dd:9c:82: 27:35:c0:b9:55:69:a7:00:d5:76:2d:bc:85:fe:79: af:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:D7:F3:13:95:09:AB:99:3A:EA:60:5D:1D:84:03:6C:AF:7D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c6ced0c-0161-3d8b-97b7-fb0fae00f9b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.232.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:be:ec:08:d6:2f:20:f5:98:d0:2b:01:6d:52:e1:c5:0c:0f: 6e:21:ed:d3:30:69:a0:cc:79:08:ce:3d:aa:b3:c5:e1:16:90: 90:9c:84:f9:52:4b:67:dc:ad:37:33:25:ee:4f:cb:a4:48:92: 2c:bc:25:90:82:1e:5b:45:a2:0c:42:7a:b7:77:4b:00:c6:57: c0:e2:32:8e:67:26:d3:7e:33:c2:4f:d5:fd:15:67:74:e9:e6: 24:ee:68:3d:c8:7f:36:7e:3d:00:65:20:5f:de:94:99:33:20: fd:26:e1:96:4c:89:dc:69:be:7d:54:c6:67:de:81:d2:54:bc: 60:59:dd:6d:95:68:49:19:6d:f9:62:a9:63:84:32:bc:a3:b3: 91:e1:bb:05:a4:d3:45:08:36:d4:bf:ad:ef:1b:5c:83:58:a6: fc:72:fc:db:77:f2:cb:48:fd:d7:0f:2c:76:67:19:c7:09:c2: 30:3a:0e:25:a0:51:52:f9:06:83:3e:84:3e:1d:2d:f6:ce:2c: c4:d1:19:1a:92:3e:f5:57:a3:8f:ba:61:77:b2:e2:84:b7:65: 73:df:da:2a:90:62:04:6e:26:d1:08:51:29:e7:01:d1:d2:95: 42:e8:c0:ff:53:b6:7d:78:71:57:56:af:53:cf:78:6d:66:20: f7:cb:70:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7ByC5ipki9tXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NWY5ODllZjEtZTEzMC00MWIxLWI1ZTgtNTU2ODg0ZDAyNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU98IuyO9JBYa2woXWtNjRtFG5wUKrdIkJFS 108Q9xwzPA4z8DOCJQ2yrjv0q8OiJXIckuZmnUADKE0XzRxFxaggy250jDxkr9rR IvHZa62h86xjoOEK9SYMDDgQa8iWvdjL9oJNH4dAyEo/cM0M84jqcTxECoqyyfMp TCigv6wZZrN5Mg+h6oQ9exwMDRbIzmGYyRU9mCWsJSQ1oJ09DyhJ1iayfgV3gs07 tsWjbnAK6e6lTK2WwqkCgWV62SbxAsua3UvkdYzz97mJCKyEO4wkfD6U3f8tHE1W zJkTeEem01TGKs2XW8YcdPXdnIInNcC5VWmnANV2LbyF/nmv8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrp1/MTlQmrmTrqYF0dhANsr33eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM2Y2VkMGMtMDE2MS0z ZDhiLTk3YjctZmIwZmFlMDBmOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrOhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC+7AjWLyD1mNArAW1S4cUMD24h7dMwaaDMeQjOPaqzxeEWkJCchPlS S2fcrTczJe5Py6RIkiy8JZCCHltFogxCerd3SwDGV8DiMo5nJtN+M8JP1f0VZ3Tp 5iTuaD3IfzZ+PQBlIF/elJkzIP0m4ZZMidxpvn1UxmfegdJUvGBZ3W2VaEkZbfli qWOEMryjs5HhuwWk00UINtS/re8bXINYpvxy/Nt38stI/dcPLHZnGccJwjA6DiWg UVL5BoM+hD4dLfbOLMTRGRqSPvVXo4+6YXey4oS3ZXPf2iqQYgRuJtEIUSnnAdHS lULowP9Ttn14cVdWr1PPeG1mIPfLcKA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:12 2025 by rpki-client