$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f85c31-8739-3af2-93d6-fb5560258728.roa File: d6f85c31-8739-3af2-93d6-fb5560258728.roa (raw, json) Hash identifier: hnA99jWV+MktVZpA8TLiHmEzHSWcYdEdvh6EFWNr09k= Subject key identifier: F4:BD:79:3B:37:CE:B0:24:32:5C:7F:EB:EA:8A:12:D9:FA:27:F4:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD671954D2FB8705C06A120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f85c31-8739-3af2-93d6-fb5560258728.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:71:95:4d:2f:b8:70:5c:06:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=a64bef4b-3df2-47c4-9cb1-4b605fce181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:ff:70:e8:db:5a:4c:34:de:c9:0e:7c:bf: a9:d3:70:6e:5d:04:33:1b:0e:bf:57:a7:94:e3:67: 59:32:b7:3a:38:93:eb:c3:97:d1:63:75:ce:24:93: 32:79:84:18:d7:84:75:c5:5d:bb:3e:60:50:fc:b5: be:fe:21:41:b1:82:8d:26:e7:0d:f6:fd:c4:79:78: 44:c2:e8:95:3a:b4:8b:60:e5:88:33:80:6b:38:f7: 96:3d:c2:8c:18:22:22:32:ab:a0:fe:b7:e6:f1:8e: 07:8b:c1:8d:c9:14:6a:56:43:79:fb:61:52:f9:42: 8a:49:2a:df:cd:15:11:74:0d:41:39:d6:b4:f6:22: e3:5c:d9:5f:9b:8a:e9:10:84:8c:93:78:cc:36:14: 0d:bf:8c:2e:0c:38:c4:ed:69:3e:da:a6:ea:7f:47: 39:5c:e0:9b:2b:f6:b9:31:01:c2:45:03:07:39:31: ba:7f:94:0d:12:a3:8e:dd:b5:f6:6d:86:0d:29:27: ed:08:fa:b8:9c:9a:61:87:0e:2e:b9:a2:d3:53:e9: 8f:7c:e6:82:ae:8e:4c:90:72:9e:64:58:7f:53:1d: 5e:00:97:66:5b:27:f0:27:3c:2c:5d:57:24:d4:e8: 12:26:00:d7:97:ae:7c:98:64:27:ca:9c:df:00:4a: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:79:3B:37:CE:B0:24:32:5C:7F:EB:EA:8A:12:D9:FA:27:F4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f85c31-8739-3af2-93d6-fb5560258728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:56:1f:d5:c0:b4:5f:4a:60:70:1f:43:99:ff:00:ea:4c:f8: a8:43:44:00:84:3d:aa:bc:3f:d6:47:47:e8:77:11:de:37:43: a7:98:6e:fa:67:07:02:d7:02:dd:6f:ed:2b:d8:4d:d1:08:27: 9b:d0:59:3a:3b:2d:3d:80:33:94:ca:a4:3e:a9:1d:f6:f8:a9: 3e:ac:67:27:b6:4a:98:cc:07:49:2e:5b:b2:51:55:6d:4e:87: 49:bd:74:41:19:70:cc:1d:45:51:e1:10:f6:4d:32:4d:6a:19: fa:b3:5e:5c:3f:fc:30:1a:ad:cb:d6:97:1d:19:c1:24:47:86: 20:7e:09:58:30:a5:56:a1:c3:8b:b7:72:ff:eb:50:76:58:91: b4:80:68:f3:d3:b0:7c:24:93:76:ec:fc:60:a2:f9:65:7e:07: 8c:cc:84:bf:08:25:9f:25:a1:99:6d:b3:cf:f5:55:13:00:6c: 2c:32:f0:3b:ed:cd:4a:7a:6a:28:f1:57:cc:0b:3f:3e:d8:29: 68:b2:46:0b:bd:36:28:ae:a8:f0:68:74:27:fd:bb:80:64:b0: 10:b3:e3:c6:8f:d4:5b:07:92:7e:ce:ac:7e:d9:5d:55:a0:7c: 20:b0:49:b1:d6:72:26:a3:6c:3c:da:e3:6c:07:72:93:8f:1a: e2:75:47:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nGVTS+4cFwGoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk YTY0YmVmNGItM2RmMi00N2M0LTljYjEtNGI2MDVmY2UxODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9r/cOjbWkw03skOfL+p03BuXQQzGw6/V6eU 42dZMrc6OJPrw5fRY3XOJJMyeYQY14R1xV27PmBQ/LW+/iFBsYKNJucN9v3EeXhE wuiVOrSLYOWIM4BrOPeWPcKMGCIiMqug/rfm8Y4Hi8GNyRRqVkN5+2FS+UKKSSrf zRURdA1BOda09iLjXNlfm4rpEISMk3jMNhQNv4wuDDjE7Wk+2qbqf0c5XOCbK/a5 MQHCRQMHOTG6f5QNEqOO3bX2bYYNKSftCPq4nJphhw4uuaLTU+mPfOaCro5MkHKe ZFh/Ux1eAJdmWyfwJzwsXVck1OgSJgDXl658mGQnypzfAErccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS9eTs3zrAkMlx/6+qKEtn6J/RLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZmODVjMzEtODczOS0z YWYyLTkzZDYtZmI1NTYwMjU4NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1WH9XAtF9KYHAfQ5n/AOpM+KhDRACEPaq8P9ZHR+h3Ed43Q6eYbvpn BwLXAt1v7SvYTdEIJ5vQWTo7LT2AM5TKpD6pHfb4qT6sZye2SpjMB0kuW7JRVW1O h0m9dEEZcMwdRVHhEPZNMk1qGfqzXlw//DAarcvWlx0ZwSRHhiB+CVgwpVahw4u3 cv/rUHZYkbSAaPPTsHwkk3bs/GCi+WV+B4zMhL8IJZ8loZlts8/1VRMAbCwy8Dvt zUp6aijxV8wLPz7YKWiyRgu9NiiuqPBodCf9u4BksBCz48aP1FsHkn7OrH7ZXVWg fCCwSbHWciajbDza42wHcpOPGuJ1R7k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:38 2025 by rpki-client