$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a82457d6-833b-343d-9c43-32678bbc12ec.roa File: a82457d6-833b-343d-9c43-32678bbc12ec.roa (raw, json) Hash identifier: 7X2pU8p0kkhT1hHybWD1uEoDT/pgaB/gaIP3nW/qt3I= Subject key identifier: D9:E5:87:A5:0F:76:37:05:0E:3D:6E:4B:AA:3E:58:76:A8:F6:E4:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA129321522F786E4C6A100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a82457d6-833b-343d-9c43-32678bbc12ec.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.225.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:29:32:15:22:f7:86:e4:c6:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=dfd67f5a-e6f4-4884-bfa7-411b17f10cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b4:7d:96:c5:3d:83:57:87:2b:0a:8f:7e:d7: 69:e5:dc:cd:df:d2:98:f8:db:70:66:da:3d:69:da: 5b:a8:33:65:c8:ae:0a:bc:db:7e:3d:d3:e6:a6:d2: e1:56:3e:26:6f:cb:0c:69:e8:4c:93:b3:c5:17:8f: ef:af:39:78:64:33:e2:6e:5c:a9:16:1f:62:7f:6d: 82:88:64:41:b4:89:01:1a:54:84:11:92:be:96:43: fb:28:b3:d2:4b:af:8e:17:5b:43:ad:3b:17:8a:f2: 73:b2:3e:cf:4b:3c:e0:b3:72:5e:53:ad:95:18:49: 3c:6d:7b:f2:3a:13:80:20:a4:07:93:15:57:02:04: 92:ed:71:70:f1:d8:f4:f3:0f:89:07:ef:70:14:60: 0a:c2:52:89:0b:f4:82:d9:1f:ac:36:eb:ce:cd:44: 5f:29:d9:52:55:a1:71:09:2b:7a:71:06:ab:47:51: 81:78:a9:fc:36:bf:78:14:78:66:02:dc:21:53:20: 8b:9d:88:e8:9b:e2:d9:f7:e9:71:59:02:bb:1e:ee: 32:17:0e:a9:7a:23:00:49:cb:24:58:0b:12:3d:e1: 24:3c:b1:d9:7f:a0:79:63:50:28:c4:e9:05:6c:b1: e7:62:12:f3:2b:71:21:5d:20:e4:ac:d7:2a:59:99: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:87:A5:0F:76:37:05:0E:3D:6E:4B:AA:3E:58:76:A8:F6:E4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a82457d6-833b-343d-9c43-32678bbc12ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fc:1c:bd:6f:a4:80:1a:06:4a:60:da:e0:96:19:03:45:10: 74:c0:c5:b4:b4:b3:b1:a1:1a:85:28:b1:ec:28:b9:6b:75:fc: 6e:2d:2a:7c:56:5c:1c:0b:cb:68:35:ed:73:d5:6d:6f:01:4d: 97:24:4c:08:8f:a5:ad:4d:a0:4f:95:4e:53:55:6d:45:ea:1b: a4:e6:af:ac:5a:c9:cc:52:fb:eb:fd:23:6d:37:87:f6:00:a7: 41:80:3e:b7:10:77:b8:73:6c:84:76:6c:66:e1:80:c5:35:44: 29:f6:3a:75:5b:37:47:42:f5:61:70:5e:bc:f5:71:d8:f1:6f: ab:5a:63:ea:e9:70:e6:bf:9e:0b:d8:f4:f2:c2:60:b9:62:98: 26:66:d2:a5:ab:dc:aa:87:4d:76:dc:d6:2d:d2:ce:6f:4d:1d: 08:07:c1:2e:c4:12:0e:90:21:3f:9b:ae:7f:6b:e0:e1:8d:6b: 8f:bb:a8:be:7a:eb:d0:38:fe:d2:10:10:ac:1b:16:6f:b2:23: 1e:a3:6b:e0:e3:d7:ef:11:8b:bc:d4:55:a5:0f:de:96:e7:e6: ef:f3:f0:57:a3:f8:d1:1b:ca:0a:d9:80:33:78:08:79:87:c0: 55:e9:e2:0a:2d:4d:14:40:3a:59:99:fd:c9:7c:b1:60:2d:ab: a7:cc:82:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSkyFSL3huTGoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZGZkNjdmNWEtZTZmNC00ODg0LWJmYTctNDExYjE3ZjEwY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLR9lsU9g1eHKwqPftdp5dzN39KY+NtwZto9 adpbqDNlyK4KvNt+PdPmptLhVj4mb8sMaehMk7PFF4/vrzl4ZDPiblypFh9if22C iGRBtIkBGlSEEZK+lkP7KLPSS6+OF1tDrTsXivJzsj7PSzzgs3JeU62VGEk8bXvy OhOAIKQHkxVXAgSS7XFw8dj08w+JB+9wFGAKwlKJC/SC2R+sNuvOzURfKdlSVaFx CSt6cQarR1GBeKn8Nr94FHhmAtwhUyCLnYjom+LZ9+lxWQK7Hu4yFw6peiMAScsk WAsSPeEkPLHZf6B5Y1AoxOkFbLHnYhLzK3EhXSDkrNcqWZlSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnlh6UPdjcFDj1uS6o+WHao9uREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgyNDU3ZDYtODMzYi0z NDNkLTljNDMtMzI2NzhiYmMxMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf8HL1vpIAaBkpg2uCWGQNFEHTAxbS0s7GhGoUosewouWt1/G4tKnxW XBwLy2g17XPVbW8BTZckTAiPpa1NoE+VTlNVbUXqG6Tmr6xaycxS++v9I203h/YA p0GAPrcQd7hzbIR2bGbhgMU1RCn2OnVbN0dC9WFwXrz1cdjxb6taY+rpcOa/ngvY 9PLCYLlimCZm0qWr3KqHTXbc1i3Szm9NHQgHwS7EEg6QIT+brn9r4OGNa4+7qL56 69A4/tIQEKwbFm+yIx6ja+Dj1+8Ri7zUVaUP3pbn5u/z8Fej+NEbygrZgDN4CHmH wFXp4gotTRRAOlmZ/cl8sWAtq6fMghY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:21 2025 by rpki-client