$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa File: 94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa (raw, json) Hash identifier: 2JtTru4Hypu68qMm9oyPRoJMwqLjcvWTw2zMz1Z7W80= Subject key identifier: 9C:E1:D9:87:B8:3C:B6:FC:E6:78:62:F2:86:EA:24:80:7C:ED:E6:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF617226DB8543AA17D88D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 63949 IP address blocks: 172.235.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:72:26:db:85:43:aa:17:d8:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c81cf7b0-6f2f-4a72-b855-1e13751a04c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:a2:ac:69:78:da:82:94:fe:70:9f:6e:4a: 97:d0:65:66:8c:b1:cc:dd:2f:61:ed:77:93:21:f5: 2d:c5:c9:7e:20:91:ee:39:1b:5c:77:cb:3a:76:cf: ab:1f:f3:e6:f6:98:96:21:77:a6:f9:a2:e0:90:ed: cd:b1:81:ef:c0:46:02:f6:d3:bf:c4:08:b8:95:98: a7:a2:82:25:fb:22:ee:1b:d5:91:c0:31:4f:12:87: fd:b9:49:48:17:3f:90:59:a6:07:5d:dd:99:3b:27: d9:85:01:31:b8:13:54:86:f3:1a:35:f9:e2:ab:32: 94:af:4b:06:ea:a6:0b:27:13:a4:38:fb:a2:46:90: a6:d2:fd:e0:df:d3:da:70:11:a1:d4:2f:9d:f3:19: fe:9f:41:98:e3:fe:41:e8:06:92:f3:33:72:3d:9c: fd:5c:61:93:91:cd:b4:77:2f:f0:eb:cd:98:55:8f: 0a:26:50:cd:32:82:8d:04:2e:d0:e3:31:21:66:dd: 74:ff:be:e6:2b:16:9d:ce:c8:85:0f:f4:d3:c6:cb: 32:e6:f8:fc:9b:f6:4a:da:36:c9:bc:10:ee:d6:78: 28:d0:0a:33:a1:ff:a7:bb:ce:82:04:31:50:4a:ff: e2:dd:62:53:45:59:60:ac:03:e5:e8:3b:3e:72:3b: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E1:D9:87:B8:3C:B6:FC:E6:78:62:F2:86:EA:24:80:7C:ED:E6:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b1:13:20:bb:fa:77:38:f8:56:1c:c7:cd:3b:58:22:08:28: 1d:b6:4b:5c:bb:b3:83:19:ae:c6:9e:67:87:e4:b2:40:de:51: bc:59:a9:5d:67:10:c4:d2:65:c4:d9:30:5e:7b:ff:27:70:ab: 30:37:74:db:3a:13:1e:9c:f0:8a:1d:2e:b4:12:09:26:1e:82: 8e:f2:17:4a:c3:a3:d7:53:03:03:37:6b:66:6d:1f:e8:c7:17: ff:be:9e:71:b8:6b:e7:1a:6e:d5:c3:d5:2b:25:85:ce:b1:ce: f8:de:4d:54:68:a6:b9:f9:14:ec:59:11:ba:96:15:f6:bf:52: cf:06:59:32:fe:28:7f:9b:c3:65:29:3e:a8:d6:9b:db:51:d2: 91:fd:ec:c6:71:14:31:3d:63:47:68:66:4b:d4:d5:60:9d:3b: eb:d4:96:10:8c:55:78:6f:93:eb:14:3d:f6:55:b4:28:e2:4b: 9d:24:40:5a:c0:33:65:48:b6:4f:b3:44:9c:a7:27:19:75:4a: 96:e7:2d:a4:e3:62:7c:2b:2f:38:5d:a0:8c:5b:be:66:45:ef: 06:be:74:6d:37:8a:6c:22:ae:ce:25:0e:76:62:e8:6b:e0:18: 9b:bc:24:6c:9a:b2:98:92:14:df:a6:6d:df:b7:01:27:d6:ef: bd:ab:36:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXIm24VDqhfYjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzgxY2Y3YjAtNmYyZi00YTcyLWI4NTUtMWUxMzc1MWEwNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouKirGl42oKU/nCfbkqX0GVmjLHM3S9h7XeT IfUtxcl+IJHuORtcd8s6ds+rH/Pm9piWIXem+aLgkO3NsYHvwEYC9tO/xAi4lZin ooIl+yLuG9WRwDFPEof9uUlIFz+QWaYHXd2ZOyfZhQExuBNUhvMaNfniqzKUr0sG 6qYLJxOkOPuiRpCm0v3g39PacBGh1C+d8xn+n0GY4/5B6AaS8zNyPZz9XGGTkc20 dy/w682YVY8KJlDNMoKNBC7Q4zEhZt10/77mKxadzsiFD/TTxssy5vj8m/ZK2jbJ vBDu1ngo0Aozof+nu86CBDFQSv/i3WJTRVlgrAPl6Ds+cjsXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzh2Ye4PLb85nhi8obqJIB87eY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ5NjVmNTctYzk0OC0z MmE0LThiYzUtYzMxZjE4ZmRiMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABexEyC7+nc4+FYcx807WCIIKB22S1y7s4MZrsaeZ4fkskDeUbxZqV1n EMTSZcTZMF57/ydwqzA3dNs6Ex6c8IodLrQSCSYego7yF0rDo9dTAwM3a2ZtH+jH F/++nnG4a+cabtXD1Sslhc6xzvjeTVRoprn5FOxZEbqWFfa/Us8GWTL+KH+bw2Up PqjWm9tR0pH97MZxFDE9Y0doZkvU1WCdO+vUlhCMVXhvk+sUPfZVtCjiS50kQFrA M2VItk+zRJynJxl1SpbnLaTjYnwrLzhdoIxbvmZF7wa+dG03imwirs4lDnZi6Gvg GJu8JGyaspiSFN+mbd+3ASfW772rNis= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:39 2025 by rpki-client