$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c391c69c-01db-3c19-a394-007ea2b9973e.roa File: c391c69c-01db-3c19-a394-007ea2b9973e.roa (raw, json) Hash identifier: g1jXZcNg2r/b2zuDPsdanmPe/dNxfTRLYPXw1T+Qmx8= Subject key identifier: C7:DB:AA:07:77:38:97:5E:63:ED:FD:5A:07:4E:22:60:1F:4E:46:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849287E5BAD1085997B019CFD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c391c69c-01db-3c19-a394-007ea2b9973e.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 31984 IP address blocks: 173.222.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5b:ad:10:85:99:7b:01:9c:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=056d3444-4164-4db0-a4be-1b4ccfb3851d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:1a:f5:25:05:96:08:6b:6f:48:b2:4c:07: 85:85:53:7d:6c:0b:b1:2a:2d:ea:6d:cc:1e:61:e9: 9b:c2:a0:42:b1:76:fe:61:e0:fe:59:9a:1f:c9:b2: 21:b7:99:48:cb:4a:bf:ac:c4:17:9c:c2:a3:25:3a: 7d:6e:24:98:e1:04:60:32:98:79:5a:91:9c:5d:f7: 87:c7:a2:86:bd:4f:e7:44:b6:e1:76:52:82:1a:77: d3:9c:26:87:e3:9d:e4:c6:0e:c9:90:d8:9f:4c:34: d3:c2:3f:a3:b2:14:20:28:dd:0b:e1:10:7a:30:7b: 44:c7:37:eb:cc:3c:98:50:e1:27:20:71:2c:f1:78: 74:84:88:bd:b7:b0:ba:ae:5e:50:83:c6:00:bb:fd: 25:d9:63:47:b5:8a:66:12:54:b9:bd:98:ee:b1:e9: de:07:66:55:07:f1:fe:8e:f8:d3:7b:7f:60:f3:ad: 00:24:43:27:3f:2a:7b:af:1b:53:8e:6d:b2:7c:35: 84:6a:02:0b:b1:08:15:61:e7:78:14:21:85:b3:bc: e2:6a:cd:89:79:19:70:e7:c3:07:76:31:f7:16:0b: 80:2e:bc:a6:4f:09:c7:74:9c:ec:65:df:97:af:da: 33:23:75:8c:1b:2c:26:b3:e2:c2:92:cd:c7:82:61: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:AA:07:77:38:97:5E:63:ED:FD:5A:07:4E:22:60:1F:4E:46:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c391c69c-01db-3c19-a394-007ea2b9973e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c0:f7:78:9d:79:44:40:9e:b3:51:ae:f8:30:7b:85:fb:2c: f0:98:08:86:55:57:27:65:b7:eb:04:09:63:ad:d8:e0:96:6c: 48:40:fd:da:aa:99:7b:c1:5a:7c:3d:dd:06:e4:12:c6:45:ae: 00:46:e1:90:17:52:49:6a:e0:02:0a:d9:44:fd:71:e7:f3:a0: ab:ef:df:1f:fe:ec:24:78:ad:dd:51:9a:36:37:6d:c4:6b:c5: ae:25:72:b4:e0:02:18:69:3b:d5:c4:61:67:62:a4:83:5e:ea: 69:9e:d3:f0:bf:8b:a9:e8:93:9b:95:15:2d:cb:e3:a8:87:cc: 94:e3:ed:53:92:a7:ae:65:37:28:99:0c:e0:d6:9a:51:98:b2: d0:0a:d2:79:2b:c6:80:93:e3:d6:6a:47:24:50:e7:6b:94:32: bd:cf:9b:5b:1a:e5:34:ca:54:d9:11:7f:10:54:8b:b6:15:87: 1c:86:6a:1a:04:95:4d:49:bf:8d:a4:7b:0b:f9:d4:e7:bf:ea: fc:b4:92:75:d2:80:9e:a0:c0:5b:91:e8:c8:d3:61:05:60:63: e1:8c:56:5f:a9:c6:71:6d:fa:4d:99:35:d6:11:0d:49:48:80: 6a:e2:e4:13:56:bc:22:ac:dd:10:62:82:f6:7d:b6:b9:76:4b: 11:8b:9d:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflutEIWZewGc/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDU2ZDM0NDQtNDE2NC00ZGIwLWE0YmUtMWI0Y2NmYjM4NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniUa9SUFlghrb0iyTAeFhVN9bAuxKi3qbcwe YembwqBCsXb+YeD+WZofybIht5lIy0q/rMQXnMKjJTp9biSY4QRgMph5WpGcXfeH x6KGvU/nRLbhdlKCGnfTnCaH453kxg7JkNifTDTTwj+jshQgKN0L4RB6MHtExzfr zDyYUOEnIHEs8Xh0hIi9t7C6rl5Qg8YAu/0l2WNHtYpmElS5vZjuseneB2ZVB/H+ jvjTe39g860AJEMnPyp7rxtTjm2yfDWEagILsQgVYed4FCGFs7zias2JeRlw58MH djH3FguALrymTwnHdJzsZd+Xr9ozI3WMGywms+LCks3HgmH2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfbqgd3OJdeY+39WgdOImAfTkYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzM5MWM2OWMtMDFkYi0z YzE5LWEzOTQtMDA3ZWEyYjk5NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrd7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjA93ideURAnrNRrvgwe4X7LPCYCIZVVydlt+sECWOt2OCWbEhA/dqq mXvBWnw93QbkEsZFrgBG4ZAXUklq4AIK2UT9cefzoKvv3x/+7CR4rd1RmjY3bcRr xa4lcrTgAhhpO9XEYWdipINe6mme0/C/i6nok5uVFS3L46iHzJTj7VOSp65lNyiZ DODWmlGYstAK0nkrxoCT49ZqRyRQ52uUMr3Pm1sa5TTKVNkRfxBUi7YVhxyGahoE lU1Jv42kewv51Oe/6vy0knXSgJ6gwFuR6MjTYQVgY+GMVl+pxnFt+k2ZNdYRDUlI gGri5BNWvCKs3RBigvZ9trl2SxGLnUg= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:07 2025 by rpki-client