$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa File: 9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa (raw, json) Hash identifier: 1WlAEiAopSRB+9JbWQ0skl3uHJa/QHuXqESR0aHxsXE= Subject key identifier: 15:D4:72:A7:82:73:F0:EE:DF:AE:9A:84:6B:30:59:E7:A4:58:31:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848C6E6357E44714C679386DDE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 63949 IP address blocks: 172.233.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:35:7e:44:71:4c:67:93:86:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=9d288079-cb79-406e-8491-0c44f92a7300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:f3:57:57:0e:81:5d:35:9d:5b:a7:b0:8d: 43:f7:e4:0c:b1:14:e0:94:a6:34:98:29:f4:8d:68: 4a:6c:7f:47:e6:f7:72:74:8f:4d:10:06:6c:79:e9: a2:06:64:95:39:8e:99:75:1a:b3:92:07:d2:ed:dc: 2a:7a:da:f5:9e:fa:d9:41:51:31:6f:80:f3:77:12: ba:ab:30:2a:97:69:9f:bb:15:36:9e:50:28:16:46: f2:48:f8:1b:63:b4:4f:ee:e1:80:2c:5c:03:be:87: cb:48:0c:2e:75:61:50:cd:f1:96:54:f7:81:c2:e9: 36:44:33:bf:65:41:39:83:5b:8a:6b:7a:d7:c8:0f: b2:74:aa:4b:5e:bf:19:ab:66:b2:78:6a:d2:fe:cc: aa:04:41:eb:b7:4a:b4:88:72:14:2a:b2:37:c2:7d: d5:aa:5c:8f:41:75:4c:31:6d:d1:7a:68:79:2a:f6: 23:6e:18:d0:56:7d:3e:8d:17:37:5c:71:bc:a2:14: 16:2d:85:ca:4c:00:f9:ed:33:9e:dc:25:8b:d5:23: 4b:3a:db:18:2e:17:1e:62:9c:e6:9d:95:eb:72:e4: 92:55:87:d1:43:00:d1:c6:9c:f9:5d:2f:8e:79:6e: 14:f4:b1:53:4b:62:f9:c0:9b:f1:28:d9:ff:9e:8a: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D4:72:A7:82:73:F0:EE:DF:AE:9A:84:6B:30:59:E7:A4:58:31:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fcdd00c-0898-3dd7-934e-a39c0a7873bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c0:75:97:78:c4:f5:25:76:6c:4d:5c:2d:23:8f:9a:1e:76: 92:13:12:35:9b:d1:66:7b:24:19:8b:94:93:11:5b:63:0b:a3: 83:6c:b7:89:85:73:96:6a:8b:28:73:91:25:5e:6e:09:c7:92: f6:78:a1:dd:85:d8:a6:ac:c5:54:da:65:68:96:dd:27:6a:e4: 38:8a:cc:68:14:4e:b0:83:6d:23:8d:97:28:11:8a:07:ea:53: 92:ab:a5:f7:21:19:38:d6:03:a9:08:5b:c9:aa:e3:a5:74:3b: c5:67:65:a8:b5:ec:11:70:86:f8:b0:5b:65:00:b5:3c:f6:f7: 1e:81:bf:48:2e:41:81:9b:f3:a1:a3:43:66:6b:9b:68:88:4c: 5f:b2:b0:d0:d6:9a:15:60:c6:28:79:6c:62:e0:29:37:cf:ea: a8:11:ca:70:25:cb:8a:c0:24:7a:0e:5d:94:af:c5:40:c5:7c: 40:0b:49:27:33:8e:7e:80:d0:48:cc:fd:0a:91:ab:86:d3:b3: e2:cd:da:3f:dd:76:52:69:c3:c9:39:de:a4:a0:d2:33:15:79: b9:9d:ce:87:ab:21:1c:3b:eb:18:d9:f6:08:e3:2e:a6:fa:ae: d2:7d:18:6e:b3:87:00:cf:23:7c:e3:59:04:2b:51:55:fb:0d: 9b:96:41:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jV+RHFMZ5OG3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk OWQyODgwNzktY2I3OS00MDZlLTg0OTEtMGM0NGY5MmE3MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbfzV1cOgV01nVunsI1D9+QMsRTglKY0mCn0 jWhKbH9H5vdydI9NEAZseemiBmSVOY6ZdRqzkgfS7dwqetr1nvrZQVExb4DzdxK6 qzAql2mfuxU2nlAoFkbySPgbY7RP7uGALFwDvofLSAwudWFQzfGWVPeBwuk2RDO/ ZUE5g1uKa3rXyA+ydKpLXr8Zq2ayeGrS/syqBEHrt0q0iHIUKrI3wn3VqlyPQXVM MW3Remh5KvYjbhjQVn0+jRc3XHG8ohQWLYXKTAD57TOe3CWL1SNLOtsYLhceYpzm nZXrcuSSVYfRQwDRxpz5XS+OeW4U9LFTS2L5wJvxKNn/noqEeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXUcqeCc/Du366ahGswWeekWDGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZjZGQwMGMtMDg5OC0z ZGQ3LTkzNGUtYTM5YzBhNzg3M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfAdZd4xPUldmxNXC0jj5oedpITEjWb0WZ7JBmLlJMRW2MLo4Nst4mF c5ZqiyhzkSVebgnHkvZ4od2F2KasxVTaZWiW3Sdq5DiKzGgUTrCDbSONlygRigfq U5KrpfchGTjWA6kIW8mq46V0O8VnZai17BFwhviwW2UAtTz29x6Bv0guQYGb86Gj Q2Zrm2iITF+ysNDWmhVgxih5bGLgKTfP6qgRynAly4rAJHoOXZSvxUDFfEALSScz jn6A0EjM/QqRq4bTs+LN2j/ddlJpw8k53qSg0jMVebmdzoerIRw76xjZ9gjjLqb6 rtJ9GG6zhwDPI3zjWQQrUVX7DZuWQek= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:42 2025 by rpki-client