$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa File: 8dca6e30-e5ec-3a17-ab58-0740102380f8.roa (raw, json) Hash identifier: 6EkopyWgFsDCiMW1SvW9eUdc9sc9m/UEv5GWM0n2bBg= Subject key identifier: 8F:5A:34:3A:12:C1:F2:D1:2A:23:6A:CD:AC:3B:19:B5:DC:0D:98:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848100A9CE4F1B145A7C94AFCE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 63949 IP address blocks: 172.235.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:9c:e4:f1:b1:45:a7:c9:4a:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=c09706c9-17b4-47c8-adfb-91c69a0759c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:99:b7:d5:d7:82:d4:42:92:6f:d6:22:dd: 40:77:3d:0d:f1:57:e0:12:4c:ea:78:c5:01:06:58: ee:06:88:d3:95:c2:59:55:45:29:eb:d3:ca:f5:0f: 8f:3e:91:d8:a0:89:7f:94:57:36:72:23:ed:31:ce: 35:d9:cf:99:48:fd:18:49:1d:df:ff:5a:06:b4:69: 2e:0b:c5:41:91:25:46:51:bf:af:29:e2:25:6f:d8: 6f:4b:0f:27:b8:14:6d:8b:0e:59:ac:d4:52:b1:5f: 27:2e:d1:cf:79:62:9b:3c:ec:31:04:6c:7c:94:17: cb:0e:81:e4:b5:33:bc:59:98:3c:87:29:44:ba:43: 02:e8:09:87:fe:c2:cd:73:93:e9:76:80:6d:5f:9b: 1b:c3:f7:44:f4:cd:5b:32:7a:70:26:3b:59:dc:cb: 9b:2c:17:52:3c:d2:2b:61:16:64:ee:f2:9b:46:2d: 61:47:0c:36:e3:82:3c:8b:0b:d8:d9:a6:f3:8a:98: aa:99:6f:34:d9:d1:9f:91:95:a1:3e:f6:53:03:4b: 0d:d4:c8:cf:80:dd:a3:5b:6e:6e:9b:2d:2c:ba:e0: d7:e4:1d:70:ce:2d:96:c5:8e:e9:f9:2c:60:68:35: d6:5d:8c:8c:84:5a:87:a4:a1:f0:5e:fe:b0:0f:8b: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5A:34:3A:12:C1:F2:D1:2A:23:6A:CD:AC:3B:19:B5:DC:0D:98:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1a:5e:66:9e:8e:d8:41:13:39:8c:f7:19:36:e2:62:1a:4a: 19:f9:71:b1:f4:88:17:47:d4:71:33:cb:e8:87:7b:a1:12:33: cc:32:07:05:30:4f:b5:2f:a7:3e:af:f0:ec:4f:82:2f:b3:c3: 5b:52:7a:d5:e1:8b:20:be:1e:58:c4:65:a1:98:38:be:b2:48: 54:f6:7e:d1:7b:d6:98:52:fd:fc:1d:db:ae:42:f1:b4:d9:b3: 8b:7e:10:86:5b:e0:c1:8a:1c:a0:08:58:6e:6f:44:3c:a1:5c: 71:a2:0e:55:a4:22:22:8f:7c:01:d8:d9:86:45:cc:e7:2d:09: 5f:48:54:a9:d6:c4:37:6d:d3:92:10:b2:1d:63:3d:a6:29:d7: 37:e8:58:da:21:1b:1a:24:23:68:86:5b:d1:1a:46:aa:5b:53: 22:b1:c5:70:85:69:ba:2d:b8:cf:e2:ed:1e:46:ba:57:f9:49: d9:cb:f4:e4:98:b4:5f:43:86:28:c8:d1:c3:a9:63:95:e2:a4: 18:a1:ac:9e:25:35:eb:80:3a:f9:93:64:68:18:35:dc:25:05: 50:10:09:8c:b6:2b:e4:83:60:9b:d4:7a:e9:91:64:d2:16:c3: 7f:80:80:f8:54:c8:6b:5e:e7:da:38:20:44:07:e2:df:39:29: 7a:71:23:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCpzk8bFFp8lK/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk YzA5NzA2YzktMTdiNC00N2M4LWFkZmItOTFjNjlhMDc1OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUyZt9XXgtRCkm/WIt1Adz0N8VfgEkzqeMUB BljuBojTlcJZVUUp69PK9Q+PPpHYoIl/lFc2ciPtMc412c+ZSP0YSR3f/1oGtGku C8VBkSVGUb+vKeIlb9hvSw8nuBRtiw5ZrNRSsV8nLtHPeWKbPOwxBGx8lBfLDoHk tTO8WZg8hylEukMC6AmH/sLNc5PpdoBtX5sbw/dE9M1bMnpwJjtZ3MubLBdSPNIr YRZk7vKbRi1hRww244I8iwvY2abzipiqmW802dGfkZWhPvZTA0sN1MjPgN2jW25u my0suuDX5B1wzi2WxY7p+SxgaDXWXYyMhFqHpKHwXv6wD4uuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9aNDoSwfLRKiNqzaw7GbXcDZjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGRjYTZlMzAtZTVlYy0z YTE3LWFiNTgtMDc0MDEwMjM4MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYaXmaejthBEzmM9xk24mIaShn5cbH0iBdH1HEzy+iHe6ESM8wyBwUw T7Uvpz6v8OxPgi+zw1tSetXhiyC+HljEZaGYOL6ySFT2ftF71phS/fwd265C8bTZ s4t+EIZb4MGKHKAIWG5vRDyhXHGiDlWkIiKPfAHY2YZFzOctCV9IVKnWxDdt05IQ sh1jPaYp1zfoWNohGxokI2iGW9EaRqpbUyKxxXCFabotuM/i7R5Gulf5SdnL9OSY tF9DhijI0cOpY5XipBihrJ4lNeuAOvmTZGgYNdwlBVAQCYy2K+SDYJvUeumRZNIW w3+AgPhUyGte59o4IEQH4t85KXpxI5Q= -----END CERTIFICATE-----Generated at Sun Feb 16 20:17:39 2025 by rpki-client