$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d35051a7-b217-3bfd-ba4d-93ad013b19a6.roa File: d35051a7-b217-3bfd-ba4d-93ad013b19a6.roa (raw, json) Hash identifier: JOtLjg8bP4Qsc2WPN/bdMN1RqCYAdTU4L/oBYX9Fasg= Subject key identifier: 7E:DD:B1:6E:98:E5:89:64:23:72:07:BC:11:35:1B:16:E0:0D:12:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF616CDDC771800D0D6ECC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d35051a7-b217-3bfd-ba4d-93ad013b19a6.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6c:dd:c7:71:80:0d:0d:6e:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=21817002-25e9-4c76-857d-a6866d056ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:b3:ab:6e:85:4a:23:7d:75:50:d8:9d:3a: 04:6b:16:e2:1d:d2:d3:31:be:71:28:ea:26:e2:d9: 8d:df:44:03:13:e3:9a:15:d1:e2:bc:ee:f5:54:1e: 8f:e1:90:88:cb:f4:91:87:cd:26:dd:81:97:60:0d: e9:20:f8:56:07:bc:22:17:8c:60:b3:da:81:51:7d: 92:8c:e1:3d:14:69:51:61:1f:de:e5:41:92:b4:d1: 75:6b:26:3c:f4:9a:68:57:bb:30:79:8e:b4:2e:5b: ba:51:fb:79:ea:e4:de:7d:69:30:bc:a6:15:15:23: 1d:51:10:a5:71:f6:66:55:4b:90:13:22:65:4d:d7: ab:dd:50:f3:e6:ec:b9:01:49:c7:99:d1:cf:fc:9a: f2:5d:02:15:52:a1:b9:d1:9d:4c:8b:7b:5e:74:ef: 45:18:93:1c:72:17:df:2c:1f:05:7f:5d:e3:29:27: 64:22:ef:84:1b:d9:6b:53:98:b5:f0:df:91:ec:bc: de:09:27:50:22:ef:bd:72:df:86:29:3a:fa:cd:ff: d7:6c:e2:e1:3e:48:76:60:0b:9f:c8:c4:6d:9f:4c: 6c:d5:1c:44:5d:76:fd:ae:55:98:82:7e:1b:4e:76: 36:50:67:2f:d1:32:13:cf:7c:0c:ad:b9:1f:69:bd: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DD:B1:6E:98:E5:89:64:23:72:07:BC:11:35:1B:16:E0:0D:12:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d35051a7-b217-3bfd-ba4d-93ad013b19a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f3:9d:2f:44:fe:c7:ab:ac:fc:5e:20:76:79:9c:b2:0b:e4: ee:f9:50:4c:9a:6d:39:cc:03:41:b0:28:65:6e:1a:2a:07:ca: 17:dd:f0:4d:93:9b:35:8c:23:be:4d:30:fe:49:db:98:97:98: 01:c0:d9:2a:f1:a3:3b:c2:a8:f5:82:ce:e6:3a:62:9a:6f:0b: 27:49:0f:1a:a3:b7:4e:1e:54:70:6f:d1:62:d1:6d:f6:29:35: 35:08:12:b4:1f:8f:a2:46:f0:6f:6b:19:c2:cb:d3:16:b4:1a: 15:e3:d2:2a:fb:25:42:fe:47:63:23:00:1c:af:9d:7f:98:85: 5d:96:37:4b:92:c0:74:8c:ff:82:0d:68:b0:90:6d:84:e1:b5: 8a:92:43:b7:2d:f2:38:9d:91:6a:b2:aa:4a:c5:fd:5d:f4:8c: 35:bf:18:03:50:32:00:ad:2a:47:cb:83:59:61:85:85:a1:7c: 93:5c:14:ee:d0:c7:c5:41:58:65:55:31:df:78:e1:ac:32:53: 63:54:01:fe:4f:cd:44:b1:81:e8:8a:4a:7b:c0:ee:1f:00:f0: e1:52:cb:fc:5d:8a:fb:a0:72:52:7d:3b:d6:33:b5:f6:61:3d: 0d:a2:3b:2a:72:99:40:51:1c:76:c2:7c:4f:17:83:da:fd:58: f3:65:f6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWzdx3GADQ1uzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjE4MTcwMDItMjVlOS00Yzc2LTg1N2QtYTY4NjZkMDU2ZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXqzq26FSiN9dVDYnToEaxbiHdLTMb5xKOom 4tmN30QDE+OaFdHivO71VB6P4ZCIy/SRh80m3YGXYA3pIPhWB7wiF4xgs9qBUX2S jOE9FGlRYR/e5UGStNF1ayY89JpoV7sweY60Llu6Uft56uTefWkwvKYVFSMdURCl cfZmVUuQEyJlTder3VDz5uy5AUnHmdHP/JryXQIVUqG50Z1Mi3tedO9FGJMcchff LB8Ff13jKSdkIu+EG9lrU5i18N+R7LzeCSdQIu+9ct+GKTr6zf/XbOLhPkh2YAuf yMRtn0xs1RxEXXb9rlWYgn4bTnY2UGcv0TITz3wMrbkfab1kuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7dsW6Y5YlkI3IHvBE1GxbgDRIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDM1MDUxYTctYjIxNy0z YmZkLWJhNGQtOTNhZDAxM2IxOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnznS9E/serrPxeIHZ5nLIL5O75UEyabTnMA0GwKGVuGioHyhfd8E2T mzWMI75NMP5J25iXmAHA2SrxozvCqPWCzuY6YppvCydJDxqjt04eVHBv0WLRbfYp NTUIErQfj6JG8G9rGcLL0xa0GhXj0ir7JUL+R2MjAByvnX+YhV2WN0uSwHSM/4IN aLCQbYThtYqSQ7ct8jidkWqyqkrF/V30jDW/GANQMgCtKkfLg1lhhYWhfJNcFO7Q x8VBWGVVMd944awyU2NUAf5PzUSxgeiKSnvA7h8A8OFSy/xdivugclJ9O9YztfZh PQ2iOypymUBRHHbCfE8Xg9r9WPNl9mg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:20 2025 by rpki-client