$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa File: 956684d0-4ee8-376e-8434-580d51955390.roa (raw, json) Hash identifier: 0e8nQfRr5qH3EQI3feYS7UohwbXG6RYuosyQ72U1ZvU= Subject key identifier: C0:24:8D:B2:CA:71:0D:EB:46:C9:61:B0:3C:AC:FD:46:AC:A7:EE:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848C150D50B0089296C37656680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 63949 IP address blocks: 172.237.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:d5:0b:00:89:29:6c:37:65:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=f84bf800-bbbc-49fd-a91c-e0b40f5cc9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:fa:d9:91:fa:99:08:6e:09:73:ad:a8:39: 4d:4c:c7:f8:d9:03:f0:d7:f0:63:2b:64:f4:fc:f2: 4c:94:43:4f:05:11:be:9a:5b:6f:4d:f4:ca:ba:2e: c4:16:20:48:f8:ca:c8:1c:a5:b1:4d:da:24:5f:60: ed:04:8c:65:5d:10:f7:39:b7:86:91:07:92:90:9e: 2e:71:4c:e6:87:9d:33:89:42:fc:cd:18:05:c2:aa: f0:72:b8:1e:c4:8f:f8:29:ad:4b:a3:df:6e:02:ef: d3:6a:b1:d9:fa:8a:f7:ce:80:7a:5c:0f:7f:9a:f1: aa:c0:51:97:b2:5a:4d:7e:48:88:42:bb:3c:34:f2: 3e:c7:81:1a:59:4b:9a:4b:a6:98:1b:cd:24:4e:5d: f2:68:54:39:42:3c:e8:65:6e:9c:83:4c:ba:c9:64: ff:cd:06:87:00:00:3d:fb:bb:40:66:7d:34:bc:fe: ff:57:fb:22:57:15:69:f7:21:18:ec:de:18:32:57: 53:65:44:91:51:09:99:bb:ad:06:85:3e:f4:ce:7d: 95:cf:47:db:f7:57:16:13:99:85:34:8b:d5:af:31: 2a:04:ab:ef:c3:f0:ab:e6:ef:3c:b5:5f:1e:bf:93: 05:e9:fb:c9:81:cc:83:2e:b8:a9:79:bb:38:e0:42: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:24:8D:B2:CA:71:0D:EB:46:C9:61:B0:3C:AC:FD:46:AC:A7:EE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d2:4a:c5:30:e7:a9:1c:2a:3c:4d:22:23:b9:99:01:bd:0d: 6b:2f:c9:e7:95:7d:b5:0a:f8:0d:57:87:91:af:11:2a:c3:50: e0:bb:88:c7:67:b7:87:2c:cf:0d:82:da:de:40:ed:90:03:c1: e9:39:c7:b0:e1:97:2a:6f:b1:35:68:b9:1a:2d:22:26:a9:cc: 18:c3:09:3d:c8:f6:30:1b:f8:aa:50:f9:fa:4a:a4:f2:a1:c4: c1:4e:a1:69:19:bc:cd:68:76:ed:7f:9d:fc:cb:e5:25:0d:b6: 94:6f:21:e5:93:88:02:aa:05:6f:d4:b6:d5:3f:22:ea:c2:77: f5:6d:f6:c7:ef:82:50:f3:2e:7b:f8:0e:48:fa:3f:57:84:59: f9:f0:a7:c7:32:5c:00:45:37:ef:de:30:eb:ad:a2:f4:79:06: e5:b3:f7:34:40:f0:4a:e5:65:33:f1:6d:e0:30:c4:02:d9:96: 76:5a:8b:5e:86:7f:54:19:0b:86:31:b1:02:cb:fe:1f:2f:44: 77:29:52:e1:24:3c:aa:c1:38:f4:1d:42:0d:a9:f1:0f:43:3b: 61:21:47:87:d3:5a:d7:58:f1:6c:32:a5:a0:0a:f3:a9:4f:e9: 21:cc:b8:b5:2a:17:0b:72:2c:5d:80:09:5a:75:fa:c9:69:d4: 68:5a:07:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNULAIkpbDdlZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk Zjg0YmY4MDAtYmJiYy00OWZkLWE5MWMtZTBiNDBmNWNjOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmz62ZH6mQhuCXOtqDlNTMf42QPw1/BjK2T0 /PJMlENPBRG+mltvTfTKui7EFiBI+MrIHKWxTdokX2DtBIxlXRD3ObeGkQeSkJ4u cUzmh50ziUL8zRgFwqrwcrgexI/4Ka1Lo99uAu/TarHZ+or3zoB6XA9/mvGqwFGX slpNfkiIQrs8NPI+x4EaWUuaS6aYG80kTl3yaFQ5QjzoZW6cg0y6yWT/zQaHAAA9 +7tAZn00vP7/V/siVxVp9yEY7N4YMldTZUSRUQmZu60GhT70zn2Vz0fb91cWE5mF NIvVrzEqBKvvw/Cr5u88tV8ev5MF6fvJgcyDLripebs44ELgsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAkjbLKcQ3rRslhsDys/Uasp+54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU2Njg0ZDAtNGVlOC0z NzZlLTg0MzQtNTgwZDUxOTU1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvSSsUw56kcKjxNIiO5mQG9DWsvyeeVfbUK+A1Xh5GvESrDUOC7iMdn t4cszw2C2t5A7ZADwek5x7DhlypvsTVouRotIiapzBjDCT3I9jAb+KpQ+fpKpPKh xMFOoWkZvM1odu1/nfzL5SUNtpRvIeWTiAKqBW/UttU/IurCd/Vt9sfvglDzLnv4 Dkj6P1eEWfnwp8cyXABFN+/eMOutovR5BuWz9zRA8ErlZTPxbeAwxALZlnZai16G f1QZC4YxsQLL/h8vRHcpUuEkPKrBOPQdQg2p8Q9DO2EhR4fTWtdY8WwypaAK86lP 6SHMuLUqFwtyLF2ACVp1+slp1GhaB8g= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:26 2025 by rpki-client