$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2230477-671e-38ad-980b-95b155e87ca1.roa File: c2230477-671e-38ad-980b-95b155e87ca1.roa (raw, json) Hash identifier: 8E6P8sHIpaeyIenTJaZhppICh3qQHs4Ee22tuF9YXlQ= Subject key identifier: F7:71:4E:AC:BA:21:0A:10:10:9B:61:77:32:09:5E:0C:BB:70:AB:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF617474189C26D5D493F000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2230477-671e-38ad-980b-95b155e87ca1.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:74:74:18:9c:26:d5:d4:93:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=94e84e84-28dd-43c8-808a-abc006b529fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:df:a6:b7:d5:b2:b3:6a:62:e4:38:56:00: 32:32:e6:4f:bd:00:ec:30:02:d6:a5:9b:c9:4f:1e: 2b:18:17:e6:b9:bc:97:47:b9:ed:49:c5:a4:de:54: 17:53:5e:b3:9c:18:ad:95:96:96:ea:c3:b8:a1:96: 58:95:4b:1d:33:7a:51:6e:3c:3c:8c:61:83:78:e2: b6:85:41:63:62:b6:22:b9:33:71:aa:68:17:96:1d: d3:af:5d:42:e3:ad:20:df:68:08:4e:c5:c7:65:9d: 09:84:fc:bb:9b:fd:5f:a0:8d:ad:b5:38:87:45:ac: 97:d8:d3:4c:f9:ff:fc:59:cb:05:ae:45:0b:e0:9c: 39:0c:83:7e:3c:9c:c8:eb:18:0b:5b:32:b7:0c:f1: 66:4a:13:b3:6a:33:cb:72:5b:5a:28:2e:3d:fc:36: 31:56:10:a3:51:c5:0b:28:06:3a:8a:56:f4:9b:5c: cd:af:be:96:e2:0d:49:5d:9c:7e:e1:f8:45:72:06: c6:cf:a3:76:06:91:14:e0:60:c4:3e:27:bf:29:0e: 30:5a:31:23:bf:de:c8:cd:1a:b5:ff:55:0f:8e:81: 80:02:f0:ca:03:e1:b7:be:d2:a8:d1:f3:89:c2:97: b1:af:4f:43:e5:f9:c6:fe:42:df:9c:ed:1c:6a:8f: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:71:4E:AC:BA:21:0A:10:10:9B:61:77:32:09:5E:0C:BB:70:AB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2230477-671e-38ad-980b-95b155e87ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e3:6a:e0:d1:8f:fc:51:d2:b2:f2:6e:e2:fc:a0:0a:5a:8b: f9:c5:06:07:a6:f0:ea:01:ca:e2:61:b7:60:73:38:71:95:4b: 6f:0c:c8:f7:2d:c5:7a:1c:a1:37:af:f4:25:9e:51:2e:c6:cb: 92:cc:68:4a:bc:4d:2c:51:1b:b6:d1:eb:91:93:da:9b:54:38: 8b:df:15:5e:43:1c:67:1e:b6:13:93:76:c6:d8:49:d6:94:3d: 3e:eb:03:7e:2b:60:53:c9:5d:03:c0:79:9d:60:6d:67:9b:1d: bb:4b:e2:38:59:6d:84:94:89:b8:cb:28:7f:ef:fa:dd:a6:08: 8e:26:cd:a6:e5:9a:51:a2:36:93:fe:e5:ca:23:49:f3:05:77: 68:cc:5f:b9:07:dd:f9:b4:aa:d8:c1:c6:0f:52:29:2f:25:95: 7a:b9:3d:63:f4:31:c8:5d:8e:de:f7:9a:0b:ca:68:f0:a0:1f: c7:65:6d:4d:5c:8b:c9:84:0f:9c:9f:1f:9c:d8:df:58:42:15: 0f:82:41:98:a2:87:33:9a:ed:aa:29:51:0f:ad:28:f5:86:4a: 3d:bd:24:13:cc:43:d0:ed:44:bb:b6:ec:2c:f5:ea:1a:58:a7: a3:e4:b1:c8:6d:f1:2a:2c:bc:2e:37:dc:a1:ab:f1:98:97:9b: b6:43:8b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXR0GJwm1dST8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OTRlODRlODQtMjhkZC00M2M4LTgwOGEtYWJjMDA2YjUyOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiULfprfVsrNqYuQ4VgAyMuZPvQDsMALWpZvJ Tx4rGBfmubyXR7ntScWk3lQXU16znBitlZaW6sO4oZZYlUsdM3pRbjw8jGGDeOK2 hUFjYrYiuTNxqmgXlh3Tr11C460g32gITsXHZZ0JhPy7m/1foI2ttTiHRayX2NNM +f/8WcsFrkUL4Jw5DIN+PJzI6xgLWzK3DPFmShOzajPLcltaKC49/DYxVhCjUcUL KAY6ilb0m1zNr76W4g1JXZx+4fhFcgbGz6N2BpEU4GDEPie/KQ4wWjEjv97IzRq1 /1UPjoGAAvDKA+G3vtKo0fOJwpexr09D5fnG/kLfnO0cao/RuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdxTqy6IQoQEJthdzIJXgy7cKtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIyMzA0NzctNjcxZS0z OGFkLTk4MGItOTViMTU1ZTg3Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvjauDRj/xR0rLybuL8oApai/nFBgem8OoByuJht2BzOHGVS28MyPct xXocoTev9CWeUS7Gy5LMaEq8TSxRG7bR65GT2ptUOIvfFV5DHGcethOTdsbYSdaU PT7rA34rYFPJXQPAeZ1gbWebHbtL4jhZbYSUibjLKH/v+t2mCI4mzablmlGiNpP+ 5cojSfMFd2jMX7kH3fm0qtjBxg9SKS8llXq5PWP0Mchdjt73mgvKaPCgH8dlbU1c i8mED5yfH5zY31hCFQ+CQZiihzOa7aopUQ+tKPWGSj29JBPMQ9DtRLu27Cz16hpY p6Pkscht8SosvC433KGr8ZiXm7ZDi/s= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:16 2025 by rpki-client