$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c83f5bdd-ff61-38ed-b19a-fed5f6cbd937.roa File: c83f5bdd-ff61-38ed-b19a-fed5f6cbd937.roa (raw, json) Hash identifier: TOJgXGmJgkdcc5NXhoaEDCwj7Va2OtPxBsGU78Wu+I8= Subject key identifier: 8D:A7:5B:A7:45:86:59:A7:61:CE:B1:92:B8:A7:02:78:FC:EA:13:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF614E1396721E44DBAF2820 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c83f5bdd-ff61-38ed-b19a-fed5f6cbd937.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4e:13:96:72:1e:44:db:af:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=e20d58ca-c7b6-4fc5-96e6-ba66f4cb5561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:82:e6:8e:ff:b3:98:12:c8:06:64:db:2b: 9d:84:dd:b5:34:51:1f:fd:56:a5:b3:dd:ca:1b:7b: 94:21:b4:4c:87:92:4e:09:da:92:37:bf:21:cb:1a: 92:9c:16:04:1e:b4:e5:15:1c:b0:88:a5:2d:94:57: 12:bd:5f:1f:1c:c6:12:f4:96:8b:53:57:e1:39:58: c5:89:db:bb:16:0c:ad:a2:fc:7f:79:fe:65:03:90: d5:0c:ae:cc:19:97:f4:4e:c6:90:91:cf:4e:f2:9e: df:4b:81:b1:b4:2a:91:a3:36:b5:23:35:af:4a:7e: 80:15:0a:04:82:d6:e0:d9:45:82:d1:27:be:f0:58: c0:ee:c8:63:07:61:5e:55:37:b9:97:73:9a:83:bc: da:f8:a4:be:79:a8:21:42:8e:17:81:e6:7e:02:8a: ac:b8:06:a6:e7:58:31:6f:39:8d:80:b0:00:51:3f: 30:cc:35:b6:b8:3e:5c:a6:64:9a:80:a4:ee:91:7a: a0:d0:d6:9c:fd:70:1c:84:c4:92:63:76:79:2f:1c: 80:07:f6:53:45:d3:55:d7:a0:a7:5b:87:24:61:d4: 84:fa:3f:4a:e0:c5:ea:05:19:b5:04:b5:61:56:f1: f9:45:a0:35:8a:36:3d:f1:40:52:26:05:45:89:a9: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:5B:A7:45:86:59:A7:61:CE:B1:92:B8:A7:02:78:FC:EA:13:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c83f5bdd-ff61-38ed-b19a-fed5f6cbd937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:39:7c:0e:94:3e:ad:50:38:06:ef:b3:08:b4:3a:e7:b8:a0: 53:d5:48:e3:89:4e:cc:99:d4:a9:ea:0b:9e:c7:50:19:7e:0e: 5a:8f:6b:09:ec:7e:de:e3:8c:3a:32:a8:87:2a:05:66:15:cb: a2:b3:49:e2:14:3c:09:88:ba:1a:1c:d5:37:9b:b4:ea:87:50: 53:97:e7:e7:2a:1d:d3:c8:d8:d0:b7:61:3d:f6:92:65:3c:01: a3:08:d0:73:af:51:9f:80:33:c1:4d:f4:fc:5c:61:03:e2:09: d5:06:29:e0:da:ba:36:00:f5:d1:60:da:f9:ef:20:58:66:a5: 9d:d0:53:bf:d6:4f:e1:fe:3d:44:e1:f7:cb:f4:93:e4:51:75: 1e:69:3e:c9:7b:e9:6a:2c:24:7f:bd:1f:ff:54:e0:dd:06:1e: 60:66:a2:7f:de:be:11:c7:fa:df:a2:c1:6f:ea:e6:9e:cf:84: 02:67:1e:4e:04:9d:8c:f3:c6:fc:29:7c:8d:0a:25:f4:f2:6b: 8d:f1:d2:13:f2:93:80:35:78:cf:27:95:38:69:b6:66:0d:40: a4:c5:d9:6b:28:f5:99:3c:80:69:b2:b6:e9:65:66:cc:98:5f: cb:88:2a:7c:03:d5:34:83:e9:2e:50:d6:40:79:e3:34:82:eb: 65:a3:49:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU4TlnIeRNuvKCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTIwZDU4Y2EtYzdiNi00ZmM1LTk2ZTYtYmE2NmY0Y2I1NTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgyC5o7/s5gSyAZk2yudhN21NFEf/Vals93K G3uUIbRMh5JOCdqSN78hyxqSnBYEHrTlFRywiKUtlFcSvV8fHMYS9JaLU1fhOVjF idu7Fgytovx/ef5lA5DVDK7MGZf0TsaQkc9O8p7fS4GxtCqRoza1IzWvSn6AFQoE gtbg2UWC0Se+8FjA7shjB2FeVTe5l3Oag7za+KS+eaghQo4XgeZ+AoqsuAam51gx bzmNgLAAUT8wzDW2uD5cpmSagKTukXqg0Nac/XAchMSSY3Z5LxyAB/ZTRdNV16Cn W4ckYdSE+j9K4MXqBRm1BLVhVvH5RaA1ijY98UBSJgVFianOLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2nW6dFhlmnYc6xkrinAnj86hNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgzZjViZGQtZmY2MS0z OGVkLWIxOWEtZmVkNWY2Y2JkOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc5fA6UPq1QOAbvswi0Oue4oFPVSOOJTsyZ1KnqC57HUBl+DlqPawns ft7jjDoyqIcqBWYVy6KzSeIUPAmIuhoc1TebtOqHUFOX5+cqHdPI2NC3YT32kmU8 AaMI0HOvUZ+AM8FN9PxcYQPiCdUGKeDaujYA9dFg2vnvIFhmpZ3QU7/WT+H+PUTh 98v0k+RRdR5pPsl76WosJH+9H/9U4N0GHmBmon/evhHH+t+iwW/q5p7PhAJnHk4E nYzzxvwpfI0KJfTya43x0hPyk4A1eM8nlThptmYNQKTF2Wso9Zk8gGmytullZsyY X8uIKnwD1TSD6S5Q1kB54zSC62WjSVE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:08 2025 by rpki-client