$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4908fe9-4750-3057-9ec8-2a78db88e84d.roa File: e4908fe9-4750-3057-9ec8-2a78db88e84d.roa (raw, json) Hash identifier: jG9fPJ4A28i+noXg4FdpWDFEHW9GkswrsMtTajYCMEU= Subject key identifier: 82:04:45:B3:92:38:7C:F2:3D:04:5A:71:62:6D:95:98:A7:8A:4A:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD67250E46C99E98EDBA480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4908fe9-4750-3057-9ec8-2a78db88e84d.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:72:50:e4:6c:99:e9:8e:db:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=9f5b4e62-04de-4518-8190-f194868e977a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:ce:18:81:61:4b:0b:c8:49:35:53:5c:0f: 04:64:d3:5a:9e:fc:b8:ca:61:bf:db:61:b6:5d:03: e2:c0:0c:90:c7:c3:01:fd:e7:0d:ce:b6:ec:92:53: 04:6e:2d:03:3a:f1:e0:06:3d:14:34:6e:8f:aa:d9: c8:b3:73:61:bb:97:42:ef:74:05:9d:60:dc:74:99: 94:de:a7:ea:61:76:93:3d:46:3f:6a:ac:f5:ed:f6: 27:8e:d1:b1:e6:a1:a8:4a:fe:f0:43:7e:c6:d4:1c: 40:7b:c0:01:10:93:5f:62:d8:4d:9b:95:39:03:6d: 65:c6:da:81:4a:c2:c4:89:92:55:2c:4c:04:a4:37: 1d:59:8c:9d:9c:15:b0:01:3f:34:7e:f7:fb:d1:b0: 49:54:17:2a:af:4f:a8:54:52:c6:ea:5a:32:c9:db: 07:61:b7:67:99:06:37:85:2f:e2:99:cf:cf:c4:22: 47:a1:ac:29:bc:0f:aa:52:14:ce:f9:37:0f:13:0c: 3c:cf:67:69:4f:a1:94:7d:73:7e:92:f5:a0:3b:2a: 3e:37:33:d4:3f:da:91:91:c2:a9:ec:e7:c2:cb:ce: 2d:ec:80:80:35:d5:0b:08:74:55:21:15:9c:33:7c: 99:b5:f5:7f:11:5b:04:63:7e:74:41:10:b4:77:31: a4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:04:45:B3:92:38:7C:F2:3D:04:5A:71:62:6D:95:98:A7:8A:4A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4908fe9-4750-3057-9ec8-2a78db88e84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4c:35:60:6e:0b:94:58:96:2b:05:9a:8b:ef:34:fb:a5:07: d3:9c:cb:8e:47:cd:8e:cf:33:71:1b:e5:13:6e:4f:ba:c1:ad: 6a:af:9c:80:d5:fe:ed:f1:a0:74:89:b2:3c:d9:f5:93:ca:df: 94:e9:b0:f0:8e:43:b5:e9:b5:5a:b6:86:b6:a7:82:9b:ff:40: 66:ee:8a:58:87:c2:6c:56:14:b6:e1:3c:de:c7:e4:73:cd:ef: f2:38:68:5b:08:ea:3f:78:0e:94:de:d7:00:e3:49:3c:4c:00: e5:3f:78:80:f2:43:e9:3a:f1:3a:a3:6c:07:a4:1f:24:bd:1c: d1:81:f6:ed:3c:2e:4c:59:45:ad:8b:09:0d:99:c8:96:96:7e: dd:b5:fa:9f:ab:c8:2b:08:72:8b:78:71:39:6e:40:71:b2:cb: 21:e7:1e:1b:c0:e2:24:6f:f0:d0:55:9a:2b:bc:0e:15:17:9e: ea:93:57:77:66:80:3a:b5:a5:9e:6f:8a:df:9f:54:45:5d:48: 13:eb:09:71:11:f9:1f:aa:13:f4:a1:ca:84:b1:a2:4f:64:45: a1:b8:37:bd:6f:47:71:24:c7:6a:29:5e:24:43:d9:f1:0e:1f: c1:34:b9:57:63:6f:3a:e3:76:b3:a8:fd:dc:c2:30:cd:fb:0e: c2:f0:fc:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nJQ5GyZ6Y7bpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk OWY1YjRlNjItMDRkZS00NTE4LTgxOTAtZjE5NDg2OGU5NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZzOGIFhSwvISTVTXA8EZNNanvy4ymG/22G2 XQPiwAyQx8MB/ecNzrbsklMEbi0DOvHgBj0UNG6PqtnIs3Nhu5dC73QFnWDcdJmU 3qfqYXaTPUY/aqz17fYnjtGx5qGoSv7wQ37G1BxAe8ABEJNfYthNm5U5A21lxtqB SsLEiZJVLEwEpDcdWYydnBWwAT80fvf70bBJVBcqr0+oVFLG6loyydsHYbdnmQY3 hS/imc/PxCJHoawpvA+qUhTO+TcPEww8z2dpT6GUfXN+kvWgOyo+NzPUP9qRkcKp 7OfCy84t7ICANdULCHRVIRWcM3yZtfV/EVsEY350QRC0dzGkXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIERbOSOHzyPQRacWJtlZinikrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ5MDhmZTktNDc1MC0z MDU3LTllYzgtMmE3OGRiODhlODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdMNWBuC5RYlisFmovvNPulB9Ocy45HzY7PM3Eb5RNuT7rBrWqvnIDV /u3xoHSJsjzZ9ZPK35TpsPCOQ7XptVq2hrangpv/QGbuiliHwmxWFLbhPN7H5HPN 7/I4aFsI6j94DpTe1wDjSTxMAOU/eIDyQ+k68TqjbAekHyS9HNGB9u08LkxZRa2L CQ2ZyJaWft21+p+ryCsIcot4cTluQHGyyyHnHhvA4iRv8NBVmiu8DhUXnuqTV3dm gDq1pZ5vit+fVEVdSBPrCXER+R+qE/ShyoSxok9kRaG4N71vR3Ekx2opXiRD2fEO H8E0uVdjbzrjdrOo/dzCMM37DsLw/Mo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:44 2025 by rpki-client