$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b09ef27c-e99f-37e1-b1ef-94a95129010b.roa File: b09ef27c-e99f-37e1-b1ef-94a95129010b.roa (raw, json) Hash identifier: lpEVv6oU74ak5NOdcFF7Hrf1uhKJqsWptryES+a9s08= Subject key identifier: D9:D3:D5:94:E8:2D:7C:4D:A8:6D:C9:8C:7E:A6:07:46:C6:CC:C8:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614E4C8D2A8356E8300280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b09ef27c-e99f-37e1-b1ef-94a95129010b.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4e:4c:8d:2a:83:56:e8:30:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=79064832-3856-40ae-b95f-d4885cf427d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:53:a4:ec:47:83:86:7b:81:e8:a4:cd:35: fe:83:12:90:60:13:6f:d9:9c:44:be:f5:9e:7d:ea: 26:c5:d7:08:11:b8:26:bd:77:82:bf:0d:4b:c3:4d: 34:4d:eb:94:85:d1:5b:2d:c7:ee:d2:14:a2:7f:bc: a9:21:ce:03:27:91:3c:41:c7:5a:5c:e5:1d:cc:70: 50:18:13:a3:5b:43:04:91:29:89:cd:d2:e8:08:67: f7:aa:99:c6:3f:d9:62:92:c5:4c:5d:f0:9b:5a:cd: 52:01:5d:ef:c0:78:6d:0a:31:b2:68:4f:3d:84:0f: eb:4f:73:b8:6e:03:db:a5:dc:ae:20:6c:8f:ab:87: 57:6a:12:fa:9d:a6:82:14:56:59:4c:59:b9:4f:52: 6d:a8:ce:60:b6:08:b6:10:7c:e8:75:b6:5c:93:5b: 68:9b:ef:8a:f3:4c:bb:68:b7:21:a3:66:31:f3:59: 32:2f:62:e8:b8:a3:5b:2e:96:de:29:1c:57:a5:1b: ff:4a:20:21:92:67:d3:57:5f:89:53:d8:30:83:d9: 85:78:69:44:79:29:7c:c4:15:28:9a:35:13:18:ee: 4e:c3:09:85:9e:8a:f3:3f:b6:97:5e:8d:da:1c:eb: 0f:a6:db:b0:87:44:c9:65:2a:0b:04:ff:7f:7c:d9: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D3:D5:94:E8:2D:7C:4D:A8:6D:C9:8C:7E:A6:07:46:C6:CC:C8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b09ef27c-e99f-37e1-b1ef-94a95129010b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4d:c7:15:43:c0:dd:76:2d:28:a1:fc:31:fc:59:43:05:20: 09:84:5e:59:a1:d1:24:02:f5:6f:ef:ea:46:c2:90:ba:c8:fe: 8f:f6:e1:91:1c:48:41:75:d3:a6:1f:d3:d8:ec:c5:56:32:c5: 52:0f:b6:5d:4e:4d:49:5d:b4:22:26:fe:40:12:e9:28:9f:b8: 70:01:4f:84:8a:c5:02:44:14:f1:7e:96:9d:5b:79:c3:76:49: 19:b0:2f:fc:d7:33:6c:a9:f2:6f:e7:0b:37:5c:f7:91:c3:dd: 69:42:96:c3:c1:1f:bf:73:67:fc:3a:b2:78:ed:ef:18:19:c0: 05:e3:ea:b9:8d:51:90:b1:9c:eb:0b:a4:95:0c:78:cb:7f:42: 77:14:8d:a7:99:05:80:c7:a3:42:86:37:71:f6:e2:1c:9f:64: a0:1c:d1:86:7c:2c:61:b7:f5:01:12:65:2d:ea:aa:52:2c:2f: a5:03:59:f4:8b:da:83:57:f1:13:1b:1e:4b:e1:f1:ce:3a:72: 63:1a:03:89:e1:cf:c3:ef:37:ce:76:67:e4:0f:19:01:13:e0: 92:58:8b:62:f0:0b:4d:66:76:10:5a:75:6d:cb:d6:e3:99:94: 18:c8:a4:60:18:a6:53:59:27:54:f7:10:29:01:57:43:20:0a: 8c:af:e3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU5MjSqDVugwAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NzkwNjQ4MzItMzg1Ni00MGFlLWI5NWYtZDQ4ODVjZjQyN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozRTpOxHg4Z7geikzTX+gxKQYBNv2ZxEvvWe feomxdcIEbgmvXeCvw1Lw000TeuUhdFbLcfu0hSif7ypIc4DJ5E8QcdaXOUdzHBQ GBOjW0MEkSmJzdLoCGf3qpnGP9liksVMXfCbWs1SAV3vwHhtCjGyaE89hA/rT3O4 bgPbpdyuIGyPq4dXahL6naaCFFZZTFm5T1JtqM5gtgi2EHzodbZck1tom++K80y7 aLcho2Yx81kyL2LouKNbLpbeKRxXpRv/SiAhkmfTV1+JU9gwg9mFeGlEeSl8xBUo mjUTGO5OwwmFnorzP7aXXo3aHOsPptuwh0TJZSoLBP9/fNmZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnT1ZToLXxNqG3JjH6mB0bGzMhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjA5ZWYyN2MtZTk5Zi0z N2UxLWIxZWYtOTRhOTUxMjkwMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdNxxVDwN12LSih/DH8WUMFIAmEXlmh0SQC9W/v6kbCkLrI/o/24ZEc SEF106Yf09jsxVYyxVIPtl1OTUldtCIm/kAS6SifuHABT4SKxQJEFPF+lp1becN2 SRmwL/zXM2yp8m/nCzdc95HD3WlClsPBH79zZ/w6snjt7xgZwAXj6rmNUZCxnOsL pJUMeMt/QncUjaeZBYDHo0KGN3H24hyfZKAc0YZ8LGG39QESZS3qqlIsL6UDWfSL 2oNX8RMbHkvh8c46cmMaA4nhz8PvN852Z+QPGQET4JJYi2LwC01mdhBadW3L1uOZ lBjIpGAYplNZJ1T3ECkBV0MgCoyv48Q= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:04 2025 by rpki-client