$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c454814f-6a48-3411-aa75-40ed6e8707ca.roa File: c454814f-6a48-3411-aa75-40ed6e8707ca.roa (raw, json) Hash identifier: 4zoA4/LJrxCfC/YkP5leA+8ht6ostefqkhQAbrzlHb0= Subject key identifier: 0F:41:3B:4B:D9:CF:0F:9A:E8:87:9C:B4:72:9E:2F:51:9E:D3:AF:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD671A47FAFAE81E7020080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c454814f-6a48-3411-aa75-40ed6e8707ca.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:71:a4:7f:af:ae:81:e7:02:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=9c684461-884c-460f-b974-4f4e43165075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:85:88:a8:26:74:7a:d6:ce:9a:43:57:4e: 3e:9d:f6:0e:16:18:e3:3c:75:c2:74:f5:e0:cf:51: f5:9f:d4:c7:82:d7:24:92:d1:1f:88:cc:d9:b5:63: 27:2b:bc:b2:29:fe:a9:19:3d:67:ac:99:61:39:5f: ad:c1:ee:93:33:83:dc:15:d7:1f:2f:6b:c7:e0:82: 13:1d:71:e6:5c:a9:30:32:81:90:91:cc:b4:e2:d8: ef:eb:19:dc:5f:27:f4:37:35:a5:ce:12:c0:29:5f: 29:33:b4:83:90:67:5c:11:9d:62:2c:3f:f9:af:44: 62:6d:44:eb:0c:d2:ab:62:86:fa:04:24:3b:96:17: eb:c7:66:24:b2:57:f9:2d:35:9e:0d:83:0c:55:63: b8:0b:1b:7d:72:7a:62:89:df:f6:d7:0b:01:6e:6b: dc:b6:f6:2c:25:2d:d6:ee:43:73:26:a5:38:11:95: 1d:5e:69:5b:44:b8:09:eb:99:ed:c9:fb:75:3a:16: ba:5a:4a:ba:41:f9:72:28:7d:ce:a7:69:77:af:6f: 6c:01:55:6b:57:1d:c4:f4:cc:67:06:67:1d:64:b8: 4d:15:15:6e:17:3e:41:5e:1c:a6:61:b7:a2:ab:18: 4d:1a:73:07:39:40:fc:95:16:34:68:98:c1:3e:d2: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:3B:4B:D9:CF:0F:9A:E8:87:9C:B4:72:9E:2F:51:9E:D3:AF:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c454814f-6a48-3411-aa75-40ed6e8707ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:dd:32:d5:31:86:a7:9e:eb:2c:8e:d0:c3:15:19:5a:ad:76: 80:36:20:a9:3a:e8:ba:5f:3d:29:0e:e6:f0:84:80:af:89:6f: b2:2b:fa:e8:24:fb:ef:6a:7e:26:3a:b9:de:d2:1f:e3:0b:e4: d5:93:bd:12:79:64:11:c2:3b:75:b4:a0:79:65:f9:f8:81:4c: c8:b5:77:96:b1:25:b6:d6:c3:54:ff:c2:de:f3:9a:63:dd:7a: 2b:99:b4:ee:7e:b0:f8:a1:c5:59:d1:5a:12:c3:b5:29:37:55: de:82:ee:78:5f:08:18:72:69:ed:7d:26:13:ad:51:4c:8f:64: 34:e2:83:06:29:71:0a:c1:44:13:74:3c:42:d6:a8:93:5c:86: 3d:9a:e7:0a:25:0f:a8:90:fe:61:96:f2:c6:5f:19:db:ee:f8: 59:a3:23:15:b1:e7:ff:74:e0:37:3a:04:31:fa:45:c7:a0:86: 72:7f:12:be:ac:68:32:23:75:7b:21:ea:c2:f1:11:5b:95:a9: 1e:14:aa:71:4d:3b:7b:1e:5c:14:85:92:bb:c4:e6:19:ba:f6: 90:57:e7:5b:ef:77:42:55:6a:a7:04:0f:6a:d1:21:50:ac:43: 35:74:e2:b5:9e:3b:72:02:1d:59:02:bb:12:4e:03:ed:06:6e: 76:d3:4e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nGkf6+ugecCAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk OWM2ODQ0NjEtODg0Yy00NjBmLWI5NzQtNGY0ZTQzMTY1MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOKFiKgmdHrWzppDV04+nfYOFhjjPHXCdPXg z1H1n9THgtckktEfiMzZtWMnK7yyKf6pGT1nrJlhOV+twe6TM4PcFdcfL2vH4IIT HXHmXKkwMoGQkcy04tjv6xncXyf0NzWlzhLAKV8pM7SDkGdcEZ1iLD/5r0RibUTr DNKrYob6BCQ7lhfrx2Ykslf5LTWeDYMMVWO4Cxt9cnpiid/21wsBbmvctvYsJS3W 7kNzJqU4EZUdXmlbRLgJ65ntyft1Oha6Wkq6QflyKH3Op2l3r29sAVVrVx3E9Mxn BmcdZLhNFRVuFz5BXhymYbeiqxhNGnMHOUD8lRY0aJjBPtKF1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9BO0vZzw+a6IectHKeL1Ge06/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ1NDgxNGYtNmE0OC0z NDExLWFhNzUtNDBlZDZlODcwN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDdMtUxhqee6yyO0MMVGVqtdoA2IKk66LpfPSkO5vCEgK+Jb7Ir+ugk ++9qfiY6ud7SH+ML5NWTvRJ5ZBHCO3W0oHll+fiBTMi1d5axJbbWw1T/wt7zmmPd eiuZtO5+sPihxVnRWhLDtSk3Vd6C7nhfCBhyae19JhOtUUyPZDTigwYpcQrBRBN0 PELWqJNchj2a5wolD6iQ/mGW8sZfGdvu+FmjIxWx5/904Dc6BDH6RceghnJ/Er6s aDIjdXsh6sLxEVuVqR4UqnFNO3seXBSFkrvE5hm69pBX51vvd0JVaqcED2rRIVCs QzV04rWeO3ICHVkCuxJOA+0GbnbTTks= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:59 2025 by rpki-client