$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa File: ce901dff-264b-3028-91d8-c31311f305e1.roa (raw, json) Hash identifier: vQtG+6Y88QDVk+b31IDD5QO7V3wIG4OrcvmrC72UHN0= Subject key identifier: B3:B6:A7:61:EE:4A:63:A7:B8:D1:2D:E2:1F:2F:3C:0A:EA:58:6E:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584905B6A9B5E41A54D1F7E32EE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 18717 IP address blocks: 72.246.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:a9:b5:e4:1a:54:d1:f7:e3:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=8ad6ddbc-d4ae-46f7-aaa0-4c4d6e902478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:37:d2:bc:e7:c0:a0:91:a5:d4:ab:d6:92: 2d:09:79:c0:50:17:9f:75:c9:b8:ab:b9:7a:94:eb: 7d:8a:08:c1:d5:52:d6:7d:e7:68:e1:8f:33:cb:e5: f7:f3:3b:93:0d:29:ef:6d:7f:57:31:85:eb:76:0e: 0a:86:67:5b:eb:27:31:84:d0:4a:7d:aa:34:8d:26: ee:e2:51:63:b3:b3:ea:c1:21:42:fb:57:53:59:2d: 96:0e:ca:dd:12:48:e7:b5:b6:fd:03:33:e7:30:68: 43:40:36:34:30:f3:ec:0b:6f:7b:cd:ab:e5:c0:72: e5:5e:c9:22:6f:57:4f:f2:c8:1d:f6:9c:d8:49:20: 7c:29:5b:86:7f:af:b3:e1:b4:76:0e:cd:8c:55:cd: 91:2d:55:9c:c9:de:7d:65:14:b7:db:fd:eb:d6:36: bf:56:ba:6f:a5:42:9e:4a:c4:0a:e2:64:be:d9:4a: 35:96:e9:5f:bb:e5:55:e0:53:17:e4:6d:e5:58:58: 3e:82:2a:c4:b3:31:12:ec:b5:e5:b0:dc:32:96:f5: 5d:d5:0a:a0:e1:06:e3:c6:2a:f8:5a:40:0a:be:b4: ba:f2:57:e0:73:f5:41:ae:a2:10:7f:1d:91:2e:6f: 8e:53:32:5b:33:45:05:a2:a6:03:bb:94:ac:55:3c: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:A7:61:EE:4A:63:A7:B8:D1:2D:E2:1F:2F:3C:0A:EA:58:6E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cf:0d:f9:7b:20:ac:40:d0:ee:0e:e4:0a:48:5f:36:89:95: e7:27:c1:ac:44:9a:ee:a3:40:37:38:67:5b:6e:7b:e9:b1:1e: f9:78:30:f0:6e:f1:a3:24:b5:cb:fd:ff:07:7e:a4:06:87:9c: 88:a7:56:79:9e:e5:d5:20:59:d4:f8:60:7f:2b:6b:eb:eb:24: d9:ca:82:68:1a:52:b8:fa:f0:42:67:16:ae:94:1a:c7:0c:97: f8:a9:7f:da:95:0f:bc:7c:a2:39:7a:e0:51:48:5d:dc:e1:09: f6:fe:d9:05:e2:80:f8:15:e8:b8:1b:4d:18:f5:06:a9:1f:e6: a6:e9:46:68:1e:08:0a:20:00:0b:c9:cc:fe:85:4f:a9:ab:8e: 82:eb:5c:1e:69:a0:e5:84:08:b8:e5:8a:29:8f:68:64:58:bd: 44:30:92:77:b0:67:16:c4:3e:ec:84:1f:f0:3e:b2:be:b3:e1: eb:90:4e:e1:72:ac:ad:fa:31:29:68:ea:82:3b:b5:3f:dc:3a: 84:af:b7:e8:84:25:1f:2d:9f:e7:33:f6:11:0d:87:68:e5:c6: 67:2f:da:9f:6c:b6:14:0e:b1:19:a7:e3:16:79:a5:d9:84:63: d4:de:15:d0:4b:12:e7:60:70:43:f3:4e:d5:57:49:60:4d:97: 5b:0c:71:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtqm15BpU0ffjLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OGFkNmRkYmMtZDRhZS00NmY3LWFhYTAtNGM0ZDZlOTAyNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5A30rznwKCRpdSr1pItCXnAUBefdcm4q7l6 lOt9igjB1VLWfedo4Y8zy+X38zuTDSnvbX9XMYXrdg4Khmdb6ycxhNBKfao0jSbu 4lFjs7PqwSFC+1dTWS2WDsrdEkjntbb9AzPnMGhDQDY0MPPsC297zavlwHLlXski b1dP8sgd9pzYSSB8KVuGf6+z4bR2Ds2MVc2RLVWcyd59ZRS32/3r1ja/VrpvpUKe SsQK4mS+2Uo1lulfu+VV4FMX5G3lWFg+girEszES7LXlsNwylvVd1Qqg4Qbjxir4 WkAKvrS68lfgc/VBrqIQfx2RLm+OUzJbM0UFoqYDu5SsVTxuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO2p2HuSmOnuNEt4h8vPArqWG5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U5MDFkZmYtMjY0Yi0z MDI4LTkxZDgtYzMxMzExZjMwNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/PDfl7IKxA0O4O5ApIXzaJlecnwaxEmu6jQDc4Z1tue+mxHvl4MPBu 8aMktcv9/wd+pAaHnIinVnme5dUgWdT4YH8ra+vrJNnKgmgaUrj68EJnFq6UGscM l/ipf9qVD7x8ojl64FFIXdzhCfb+2QXigPgV6LgbTRj1Bqkf5qbpRmgeCAogAAvJ zP6FT6mrjoLrXB5poOWECLjliimPaGRYvUQwknewZxbEPuyEH/A+sr6z4euQTuFy rK36MSlo6oI7tT/cOoSvt+iEJR8tn+cz9hENh2jlxmcv2p9sthQOsRmn4xZ5pdmE Y9TeFdBLEudgcEPzTtVXSWBNl1sMcW4= -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:43 2025 by rpki-client