$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa File: 945902be-2e75-355d-ba30-77f51e86f5da.roa (raw, json) Hash identifier: qFIm2W9aK+2t77XmbsLdW+wokPxUKhdqfwLpUZAWlvE= Subject key identifier: D4:C3:B6:8C:C7:ED:36:B0:77:FC:2A:79:FF:AD:1C:07:A0:28:D5:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614EF4915148F80AE5B280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4e:f4:91:51:48:f8:0a:e5:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=7938ba8b-2e3a-4667-ac29-1f933e39b6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:ff:90:a4:9a:48:30:e5:e8:83:1c:d2:46: f4:56:b0:6e:c9:8b:6a:0c:21:88:17:30:ef:cd:a9: ca:e4:7a:af:a5:e7:23:0f:62:85:b6:ae:b0:75:0f: c3:75:0e:8d:f3:39:d2:17:10:56:d5:90:df:ba:6f: fe:04:5e:ea:9d:95:f4:86:51:05:51:68:98:73:1c: ec:8b:9e:ae:cd:96:6f:d3:e0:51:12:fd:cc:82:6c: 11:cd:3b:69:0c:ea:bc:7d:d5:66:83:fa:c2:24:0d: 3f:f5:4c:36:69:50:72:8a:c4:10:93:72:0d:5e:1b: 47:ca:e6:e5:2a:93:b3:32:67:dd:90:63:47:77:d9: 28:24:92:a5:83:ee:27:9f:54:bf:0f:41:d8:86:f0: c8:79:4e:2e:05:a5:4e:63:8a:76:dc:f3:f4:35:cf: 50:0c:8f:6d:9e:3f:3b:59:99:e0:d5:b9:a6:50:6d: d4:a8:7f:ea:14:9b:f9:b4:4b:b8:67:b0:e7:43:bb: 95:ab:95:06:0c:bc:ef:26:26:6a:19:d2:1a:16:7d: 60:77:ba:0b:e5:53:a3:fd:dd:8e:ba:47:66:60:fc: 3f:5f:e4:10:29:df:94:cc:c4:e4:7e:4a:3a:4e:52: e7:b2:a3:ff:ef:cf:8e:76:3f:9a:8e:6c:d4:4d:aa: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:B6:8C:C7:ED:36:B0:77:FC:2A:79:FF:AD:1C:07:A0:28:D5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:22:22:77:68:f0:63:26:8a:a7:1b:83:ae:ba:16:99:b5:cd: f6:7f:fb:d2:dd:de:45:3d:ba:3a:34:2f:15:36:5d:09:c0:9e: 59:f3:ee:b6:0a:e6:8a:ab:66:33:07:60:03:40:6a:5c:12:ae: af:0c:0b:10:ae:08:12:11:08:98:35:63:81:da:39:e0:6b:30: f8:cd:92:f1:77:4d:6b:85:15:88:fb:86:11:d4:72:fb:f8:b2: f5:f5:6e:5a:91:45:86:51:92:a1:d6:b4:c0:09:c0:9e:af:39: b8:38:58:fd:17:a1:21:ea:2e:cf:d3:1b:5e:5b:98:c7:a0:75: 05:b4:d0:04:ab:7e:73:47:bb:4c:f1:8c:2f:4a:0d:64:7c:1f: 9e:9b:b3:31:cb:bf:b6:5b:e9:04:45:e1:a8:1c:b1:6f:1e:5c: d3:52:b7:1b:f7:7d:8e:8a:02:41:32:0a:c8:23:6f:3b:6b:3a: 61:27:87:0b:c5:a4:e6:c9:ab:df:af:62:e5:21:68:a1:34:cb: 5f:77:33:5c:54:dd:8b:a9:df:5c:d2:f4:5e:ba:dd:ff:3d:4a: e8:85:54:51:76:fa:b6:b1:6a:35:4a:4b:85:63:45:56:59:2c: ac:85:5e:df:b4:66:18:b2:5e:2a:90:3f:0e:06:6b:ec:ce:11: 0c:8d:25:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU70kVFI+ArlsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NzkzOGJhOGItMmUzYS00NjY3LWFjMjktMWY5MzNlMzliNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9v/kKSaSDDl6IMc0kb0VrBuyYtqDCGIFzDv zanK5HqvpecjD2KFtq6wdQ/DdQ6N8znSFxBW1ZDfum/+BF7qnZX0hlEFUWiYcxzs i56uzZZv0+BREv3MgmwRzTtpDOq8fdVmg/rCJA0/9Uw2aVByisQQk3INXhtHyubl KpOzMmfdkGNHd9koJJKlg+4nn1S/D0HYhvDIeU4uBaVOY4p23PP0Nc9QDI9tnj87 WZng1bmmUG3UqH/qFJv5tEu4Z7DnQ7uVq5UGDLzvJiZqGdIaFn1gd7oL5VOj/d2O ukdmYPw/X+QQKd+UzMTkfko6TlLnsqP/78+Odj+ajmzUTap7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTDtozH7Tawd/wqef+tHAegKNVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ1OTAyYmUtMmU3NS0z NTVkLWJhMzAtNzdmNTFlODZmNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoiIndo8GMmiqcbg666Fpm1zfZ/+9Ld3kU9ujo0LxU2XQnAnlnz7rYK 5oqrZjMHYANAalwSrq8MCxCuCBIRCJg1Y4HaOeBrMPjNkvF3TWuFFYj7hhHUcvv4 svX1blqRRYZRkqHWtMAJwJ6vObg4WP0XoSHqLs/TG15bmMegdQW00ASrfnNHu0zx jC9KDWR8H56bszHLv7Zb6QRF4agcsW8eXNNStxv3fY6KAkEyCsgjbztrOmEnhwvF pObJq9+vYuUhaKE0y193M1xU3Yup31zS9F663f89SuiFVFF2+raxajVKS4VjRVZZ LKyFXt+0ZhiyXiqQPw4Ga+zOEQyNJQY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:17 2025 by rpki-client