$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fac626-0300-3084-9ca8-2318aa3d8512.roa File: a0fac626-0300-3084-9ca8-2318aa3d8512.roa (raw, json) Hash identifier: pmw60SFz3JHEdSGlrjRPah6272+xOfWj4LGVY4OAA9Y= Subject key identifier: 0A:EE:4D:68:B8:91:18:C4:76:32:06:E3:21:F0:90:DB:5E:DB:35:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E2D1A564EB63204CD2C84C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fac626-0300-3084-9ca8-2318aa3d8512.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 36183 IP address blocks: 172.225.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:a5:64:eb:63:20:4c:d2:c8:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=af06b2f9-9791-4d8a-9c37-bb6bd89d3882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:80:a7:8f:14:4b:38:4f:d3:93:69:89:56: 13:21:d2:8e:fa:da:49:8f:72:47:49:87:f2:e2:c1: cf:6d:c5:c9:fa:b6:83:21:bc:e4:f5:7c:4b:76:be: 86:d3:03:11:58:51:a6:6f:f6:68:12:77:d8:aa:ae: 22:71:b7:e1:fb:21:58:9b:80:63:36:f4:e8:ba:10: 94:7a:a1:36:35:1a:35:74:b9:8e:15:fd:d7:bb:be: fb:d6:0f:94:73:92:de:30:9a:61:e6:80:04:a1:12: 22:f0:41:79:87:ff:ae:2d:c7:ae:dc:0b:50:ea:40: 39:0b:72:33:c4:38:f6:fb:3c:e8:43:1b:b5:4c:97: 53:cc:b5:05:e5:3d:c8:8b:b0:7c:6c:52:d8:06:6b: 36:26:65:72:00:92:0f:7d:6d:57:f9:d1:d4:53:69: c7:20:b9:cd:03:fa:5c:c9:c0:d1:ac:9b:94:84:7b: 97:87:68:ca:8d:fa:84:6c:00:c4:54:29:91:da:7b: ba:d5:dd:de:55:c4:0a:d0:5d:69:5d:59:36:eb:ec: 11:7a:30:e8:cd:bd:1e:9b:80:cc:9e:14:2f:1a:8a: 7d:e9:d4:b7:92:07:58:40:8d:09:e9:27:38:e8:e1: 01:22:a1:ad:82:ea:07:f4:45:57:38:ae:72:40:d1: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EE:4D:68:B8:91:18:C4:76:32:06:E3:21:F0:90:DB:5E:DB:35:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fac626-0300-3084-9ca8-2318aa3d8512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:36:99:f6:f6:26:7c:2f:31:e7:cb:dd:84:6c:f3:55:b1:ef: 62:24:41:64:5c:b3:ff:96:63:44:62:ec:d0:f6:3b:de:6a:e3: 79:aa:08:6c:69:80:80:e1:4f:b0:bb:ba:06:8a:d1:1a:35:cc: a3:35:11:48:94:be:1e:12:0f:a6:57:d9:80:09:28:6b:98:ae: c9:e7:49:f8:5f:54:ec:29:64:ce:d9:7a:80:ce:73:0b:af:7b: 79:9b:a6:89:03:6c:84:1b:04:29:82:2b:2a:5a:bf:c6:bc:fb: bb:89:66:61:01:56:0e:4e:c1:e8:3c:e3:42:9e:12:e3:98:b1: 01:57:73:58:34:88:e0:87:54:d8:de:a1:5e:da:f6:a9:6d:42: ec:13:47:be:dc:1f:9f:4d:05:e2:c2:14:21:51:49:72:17:93: 28:b0:9d:b3:df:81:15:0c:ec:ea:2f:c0:eb:0a:20:ab:34:b7: 5e:47:55:62:83:c8:75:bd:32:83:6a:27:ea:d4:62:cc:0d:b3: 47:c2:37:18:f1:f8:eb:a0:b0:e9:32:95:87:ef:cb:bd:11:d9: a2:83:13:6a:fd:2a:4d:87:a8:2d:76:da:93:21:6b:5a:71:d6: 28:9b:e8:60:01:41:2a:5f:8a:25:fd:e8:06:70:6b:20:5b:ef: cd:57:40:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aVk62MgTNLITEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YWYwNmIyZjktOTc5MS00ZDhhLTljMzctYmI2YmQ4OWQzODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzeAp48USzhP05NpiVYTIdKO+tpJj3JHSYfy 4sHPbcXJ+raDIbzk9XxLdr6G0wMRWFGmb/ZoEnfYqq4icbfh+yFYm4BjNvTouhCU eqE2NRo1dLmOFf3Xu7771g+Uc5LeMJph5oAEoRIi8EF5h/+uLceu3AtQ6kA5C3Iz xDj2+zzoQxu1TJdTzLUF5T3Ii7B8bFLYBms2JmVyAJIPfW1X+dHUU2nHILnNA/pc ycDRrJuUhHuXh2jKjfqEbADEVCmR2nu61d3eVcQK0F1pXVk26+wRejDozb0em4DM nhQvGop96dS3kgdYQI0J6Sc46OEBIqGtguoH9EVXOK5yQNGg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAruTWi4kRjEdjIG4yHwkNte2zWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBmYWM2MjYtMDMwMC0z MDg0LTljYTgtMjMxOGFhM2Q4NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE2mfb2JnwvMefL3YRs81Wx72IkQWRcs/+WY0Ri7ND2O95q43mqCGxp gIDhT7C7ugaK0Ro1zKM1EUiUvh4SD6ZX2YAJKGuYrsnnSfhfVOwpZM7ZeoDOcwuv e3mbpokDbIQbBCmCKypav8a8+7uJZmEBVg5Oweg840KeEuOYsQFXc1g0iOCHVNje oV7a9qltQuwTR77cH59NBeLCFCFRSXIXkyiwnbPfgRUM7OovwOsKIKs0t15HVWKD yHW9MoNqJ+rUYswNs0fCNxjx+OugsOkylYfvy70R2aKDE2r9Kk2HqC122pMha1px 1iib6GABQSpfiiX96AZwayBb781XQPw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:08 2025 by rpki-client