$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa File: b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa (raw, json) Hash identifier: VExzik50OQ8GM4sE07AfPxX4XVa5Y3ca/WxMbAQTYTE= Subject key identifier: AC:8B:35:DD:51:F9:54:20:83:C6:7C:18:AB:52:D2:EC:43:DB:14:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA12A3764ACA065F2BEDB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.225.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2a:37:64:ac:a0:65:f2:be:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=77a19e99-b5f4-4f4b-bf1e-02c5fc2cdaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5d:3b:5c:74:37:d6:73:c8:ce:b1:b5:44:c0: 19:90:f5:7a:d2:86:cd:06:43:88:33:33:d0:d7:b1: 4e:b1:22:2f:ad:94:18:ad:46:b3:69:e8:75:a7:ba: ba:1f:3c:38:1a:e4:1b:4b:1a:95:d0:56:d3:5e:67: 21:b2:33:cf:c1:5d:e7:d2:46:54:45:c3:13:e1:af: 50:2f:c1:0b:f0:89:b4:f5:3f:4f:34:7a:65:1e:cd: c8:4c:84:4f:2d:fb:1c:a0:26:76:6a:23:20:60:6a: ea:fb:60:2b:d9:f7:20:3b:7e:b5:a0:57:1b:62:36: c1:a8:61:21:20:54:93:6c:b5:f3:b5:fd:55:90:9a: 03:8a:1f:c5:66:f7:78:d7:ce:62:1e:74:f4:36:ff: 4e:13:aa:26:63:85:c1:02:38:8d:96:df:2b:df:2f: 34:a6:11:fe:85:03:ac:78:a6:1d:96:d7:e8:0b:75: a8:c6:94:58:e7:3f:6f:94:18:61:2d:03:17:62:5e: b2:b0:0a:f0:8c:de:3c:82:de:79:2b:57:85:f5:56: 8c:30:52:1e:fe:9b:b9:cc:0a:8c:f8:63:07:49:2a: b3:9d:8f:2d:d2:bb:34:9b:d3:05:ea:2a:b3:e8:64: 55:a2:66:2a:d8:2c:42:3d:6c:f9:69:99:59:eb:20: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:35:DD:51:F9:54:20:83:C6:7C:18:AB:52:D2:EC:43:DB:14:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9eeef5a-e40e-3aa0-95f6-52f3abea6999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:13:c0:d4:34:bc:84:18:8b:b8:b9:78:6f:34:4a:24:fc:00: 54:1e:6e:56:a5:38:73:4b:e3:06:9c:11:5c:f1:84:90:46:0f: 0a:b8:d0:54:bd:1f:15:b4:f1:97:d9:70:d3:57:bc:7f:d1:bd: e1:21:67:19:82:ba:e5:90:67:b8:15:1c:57:18:e0:cc:73:91: 77:62:56:1b:23:ee:74:46:08:e7:cb:a4:f3:6f:a7:28:c5:ec: 20:22:8d:46:70:57:00:26:64:c3:89:6c:78:6c:18:db:07:8c: 2a:0f:a6:51:c8:54:c9:42:d9:19:91:97:64:9a:12:9a:9c:e3: 1e:2a:13:a6:2d:64:f1:67:e4:14:99:10:a2:9a:c0:f2:73:3d: c5:cf:54:ac:c5:9b:05:89:cc:d7:04:e1:86:ff:42:65:75:86: bf:7f:96:d7:48:19:8b:0a:80:f8:26:ba:70:52:e9:aa:ac:37: 81:03:a5:5b:f5:30:b3:33:f0:74:52:6e:c4:5b:7a:f2:37:e6: c6:8d:b0:f9:2a:6d:5a:fc:4d:b6:33:8a:a9:07:83:58:f7:45: bd:a1:46:9a:da:3d:40:13:8b:be:a5:8b:f1:dd:bf:5d:80:7f: eb:89:76:fc:9e:71:f4:08:09:2c:3f:ec:05:f6:4c:50:ce:c0: da:d3:ee:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSo3ZKygZfK+2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NzdhMTllOTktYjVmNC00ZjRiLWJmMWUtMDJjNWZjMmNkYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV07XHQ31nPIzrG1RMAZkPV60obNBkOIMzPQ 17FOsSIvrZQYrUazaeh1p7q6Hzw4GuQbSxqV0FbTXmchsjPPwV3n0kZURcMT4a9Q L8EL8Im09T9PNHplHs3ITIRPLfscoCZ2aiMgYGrq+2Ar2fcgO361oFcbYjbBqGEh IFSTbLXztf1VkJoDih/FZvd4185iHnT0Nv9OE6omY4XBAjiNlt8r3y80phH+hQOs eKYdltfoC3WoxpRY5z9vlBhhLQMXYl6ysArwjN48gt55K1eF9VaMMFIe/pu5zAqM +GMHSSqznY8t0rs0m9MF6iqz6GRVomYq2CxCPWz5aZlZ6yDtZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyLNd1R+VQgg8Z8GKtS0uxD2xRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjllZWVmNWEtZTQwZS0z YWEwLTk1ZjYtNTJmM2FiZWE2OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkTwNQ0vIQYi7i5eG80SiT8AFQeblalOHNL4wacEVzxhJBGDwq40FS9 HxW08ZfZcNNXvH/RveEhZxmCuuWQZ7gVHFcY4MxzkXdiVhsj7nRGCOfLpPNvpyjF 7CAijUZwVwAmZMOJbHhsGNsHjCoPplHIVMlC2RmRl2SaEpqc4x4qE6YtZPFn5BSZ EKKawPJzPcXPVKzFmwWJzNcE4Yb/QmV1hr9/ltdIGYsKgPgmunBS6aqsN4EDpVv1 MLMz8HRSbsRbevI35saNsPkqbVr8TbYziqkHg1j3Rb2hRpraPUATi76li/Hdv12A f+uJdvyecfQICSw/7AX2TFDOwNrT7o8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:12:59 2025 by rpki-client