$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4be0100-3333-3352-85fa-30db65557312.roa File: c4be0100-3333-3352-85fa-30db65557312.roa (raw, json) Hash identifier: 6NEJ1kop6LVAW9kJVJlrH2s4VK8QZ2iJNHP6LQ+muIU= Subject key identifier: 29:FC:96:C6:14:07:9F:2E:67:A6:B8:AF:6F:3E:D6:CB:7C:F9:70:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490E16CF6C52459BA9DB3BB300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4be0100-3333-3352-85fa-30db65557312.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 173.222.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cf:6c:52:45:9b:a9:db:3b:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=76bb1eda-cd77-4a0e-8f97-7c31c57dada9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:29:ee:e3:32:b2:76:e7:a1:4a:3b:bf:5d: 96:61:37:7b:14:ee:7e:2a:21:0c:67:8a:3a:af:09: 34:ef:10:17:ea:0a:a0:9c:99:91:84:d0:26:88:0c: a9:5a:14:71:ee:74:77:86:84:7f:de:1a:7a:09:2b: 7e:02:5d:c3:74:15:ef:81:3f:af:59:b1:49:8a:32: 0a:da:ac:77:fc:21:00:6d:53:d9:83:01:36:47:ad: 94:f8:8e:fb:f3:52:ae:42:37:f3:c5:34:0c:37:7d: 2d:27:1d:29:bc:50:ae:06:3a:91:f4:f1:75:16:e6: ae:92:2c:d4:db:e3:fe:9d:81:f8:1a:88:16:55:89: e5:8d:ec:4f:19:c5:b9:40:3b:8b:ad:6c:7a:f7:a0: d3:72:fd:3c:0a:d0:d2:56:09:f8:52:d5:34:c8:f1: 84:cc:ed:52:72:91:06:b1:54:2c:8c:e5:8c:8a:6c: 1b:94:10:35:87:c8:68:cf:95:76:b8:59:bc:80:8e: c5:32:98:c0:7e:a5:e4:5e:cd:4c:dd:4d:bc:d6:d4: 44:08:e4:5f:42:30:82:96:21:3e:5c:f9:26:d3:45: 8c:83:d8:99:4d:ff:0a:ce:4a:13:e1:f2:4f:9d:a2: a0:a2:de:fc:ec:28:22:e4:5e:c1:df:c7:3e:04:33: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FC:96:C6:14:07:9F:2E:67:A6:B8:AF:6F:3E:D6:CB:7C:F9:70:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4be0100-3333-3352-85fa-30db65557312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7b:96:50:40:51:49:b4:8f:2f:7f:3c:d8:d0:07:2f:55:a3: d3:4d:1f:a7:52:5b:cc:53:df:a4:de:6f:2f:36:31:23:d6:81: 89:b1:e4:e4:5b:95:1d:14:61:cb:c5:7c:02:e4:d1:db:45:d7: a4:c4:0c:e6:d2:ff:8c:62:68:43:18:e9:d7:0c:92:09:6f:41: 3b:26:14:66:6b:56:80:8a:1e:d3:30:e0:34:03:5f:b5:cb:9d: 1c:d7:43:75:c0:35:06:0b:0c:7a:73:7a:4d:89:21:5a:87:cc: d1:68:19:fc:0a:e3:fb:73:41:9e:9a:d4:44:60:17:4c:ae:40: 47:56:72:8f:e4:bd:8d:86:e2:f3:91:39:9d:ca:a8:e1:91:64: 12:fb:cf:11:df:59:44:a9:45:04:a3:b0:c4:04:73:24:f5:05: ef:05:f6:ac:9e:cf:f2:13:c4:50:7f:90:08:cd:d8:dd:94:e4: ca:64:57:fc:23:d5:1e:63:32:53:5c:0f:6a:5b:62:17:fc:13: 77:ae:94:29:86:37:22:bc:81:b8:9e:82:0a:0a:76:53:c1:ef: bc:ad:7c:43:28:6c:3d:1c:4d:0f:b3:33:c9:92:2b:08:08:5f: cf:63:b9:e8:61:77:9c:cb:e6:f6:0a:76:62:60:99:59:b3:c1: 83:81:87:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFs9sUkWbqds7swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NzZiYjFlZGEtY2Q3Ny00YTBlLThmOTctN2MzMWM1N2RhZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYAp7uMysnbnoUo7v12WYTd7FO5+KiEMZ4o6 rwk07xAX6gqgnJmRhNAmiAypWhRx7nR3hoR/3hp6CSt+Al3DdBXvgT+vWbFJijIK 2qx3/CEAbVPZgwE2R62U+I7781KuQjfzxTQMN30tJx0pvFCuBjqR9PF1FuaukizU 2+P+nYH4GogWVYnljexPGcW5QDuLrWx696DTcv08CtDSVgn4UtU0yPGEzO1ScpEG sVQsjOWMimwblBA1h8hoz5V2uFm8gI7FMpjAfqXkXs1M3U281tRECORfQjCCliE+ XPkm00WMg9iZTf8KzkoT4fJPnaKgot787Cgi5F7B38c+BDO/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn8lsYUB58uZ6a4r28+1st8+XBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRiZTAxMDAtMzMzMy0z MzUyLTg1ZmEtMzBkYjY1NTU3MzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD57llBAUUm0jy9/PNjQBy9Vo9NNH6dSW8xT36Teby82MSPWgYmx5ORb lR0UYcvFfALk0dtF16TEDObS/4xiaEMY6dcMkglvQTsmFGZrVoCKHtMw4DQDX7XL nRzXQ3XANQYLDHpzek2JIVqHzNFoGfwK4/tzQZ6a1ERgF0yuQEdWco/kvY2G4vOR OZ3KqOGRZBL7zxHfWUSpRQSjsMQEcyT1Be8F9qyez/ITxFB/kAjN2N2U5MpkV/wj 1R5jMlNcD2pbYhf8E3eulCmGNyK8gbieggoKdlPB77ytfEMobD0cTQ+zM8mSKwgI X89juehhd5zL5vYKdmJgmVmzwYOBh9g= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:22 2025 by rpki-client