$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa File: ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa (raw, json) Hash identifier: dxjZdLHW+HCsqBARLHXVmQGU/BzxUArtd3GcrdPngMo= Subject key identifier: 12:89:61:CD:76:90:1E:70:68:72:21:A1:B7:9F:BF:D9:A8:45:AE:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362A61C602B36630B05200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.224.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2a:61:c6:02:b3:66:30:b0:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=84ec84f9-e4f1-4104-b79f-de0aeb988ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:ec:18:b9:2d:ce:29:81:a4:00:96:a6:ed: 0f:06:e6:6d:eb:fc:e3:62:41:64:7b:d0:44:e1:ad: 5c:89:d6:a7:09:7f:b4:38:cb:95:63:3c:f7:d8:f9: f5:4e:20:5c:ae:ce:af:6f:07:b7:89:f5:2e:79:ff: f3:60:be:e4:f0:6f:b9:ad:97:f1:26:6e:da:a6:42: 3b:90:36:48:b6:50:98:5a:48:92:99:58:3a:fe:33: 96:9f:92:2e:ca:dc:30:85:2f:43:69:58:36:4b:6c: 92:da:ef:dc:ca:f5:2d:ed:83:0d:13:73:11:05:b3: 77:fd:6a:97:37:dc:7e:73:7b:75:36:73:88:65:bf: 63:78:b1:54:c4:3e:df:26:11:f1:53:93:6f:16:c7: b8:a4:e0:9d:95:c6:9a:d2:e4:da:bb:28:41:db:04: 78:29:a3:34:d9:88:7f:78:b4:03:c5:12:66:ae:fd: 12:19:f5:74:f2:01:ce:4e:f7:e2:ca:5b:67:1d:af: 30:41:58:5f:0d:f5:f0:21:50:d8:6c:e7:30:f3:3b: dd:5d:51:5d:23:60:f2:9a:90:d4:e0:b6:70:ad:74: c9:44:6b:1f:11:c3:08:10:8d:2a:d5:9c:c8:a3:2c: ab:4d:e6:2c:f2:9a:1a:85:6a:32:c0:7a:28:30:e4: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:61:CD:76:90:1E:70:68:72:21:A1:B7:9F:BF:D9:A8:45:AE:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef8c9806-70b6-3a18-a6bc-913e3e7de05f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a0:1f:af:52:6f:7f:59:ca:c0:59:c4:5b:7c:c0:de:51:4d: db:93:18:0b:d8:ec:23:f9:27:cc:f0:da:71:b5:a4:ee:1f:2c: 45:4f:33:89:16:95:a2:bc:20:a2:c8:db:dc:f5:67:73:0e:ea: a7:ba:8c:bd:e2:72:29:a5:71:92:33:07:01:f2:db:f1:ac:84: 7d:ca:c4:1d:59:80:4f:9f:07:69:8e:43:c7:6b:a9:59:1f:42: 5f:78:ea:bf:6e:45:e5:00:77:9b:2c:27:de:e5:91:5b:4b:d9: 60:08:0f:e3:63:5b:6e:bd:8c:e6:3d:56:91:69:6e:e9:4d:85: 5c:1e:53:96:af:03:d9:72:a5:0a:3b:d5:9e:1d:88:d4:0e:c7: e8:9f:16:4c:13:36:ca:82:7d:ce:13:63:85:88:08:2b:35:31: 77:fe:2e:04:11:d4:ae:87:fc:06:f6:93:00:fb:20:02:0b:4e: c3:47:94:22:92:3a:53:1f:51:82:a7:01:9a:60:b8:c5:90:a7: 4c:94:57:7d:aa:5c:03:90:e4:d9:80:f1:7c:eb:24:29:3f:4d: 22:d8:2e:c1:c1:6e:77:70:89:7d:a8:95:cc:0e:74:51:87:90: a9:d8:bd:c1:9f:1b:f7:a3:69:f0:cc:c4:be:10:93:08:17:d8: cc:11:6a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNiphxgKzZjCwUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ODRlYzg0ZjktZTRmMS00MTA0LWI3OWYtZGUwYWViOTg4YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNnsGLktzimBpACWpu0PBuZt6/zjYkFke9BE 4a1cidanCX+0OMuVYzz32Pn1TiBcrs6vbwe3ifUuef/zYL7k8G+5rZfxJm7apkI7 kDZItlCYWkiSmVg6/jOWn5IuytwwhS9DaVg2S2yS2u/cyvUt7YMNE3MRBbN3/WqX N9x+c3t1NnOIZb9jeLFUxD7fJhHxU5NvFse4pOCdlcaa0uTauyhB2wR4KaM02Yh/ eLQDxRJmrv0SGfV08gHOTvfiyltnHa8wQVhfDfXwIVDYbOcw8zvdXVFdI2DympDU 4LZwrXTJRGsfEcMIEI0q1ZzIoyyrTeYs8poahWoywHooMORdSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKJYc12kB5waHIhobefv9moRa4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWY4Yzk4MDYtNzBiNi0z YTE4LWE2YmMtOTEzZTNlN2RlMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESgH69Sb39ZysBZxFt8wN5RTduTGAvY7CP5J8zw2nG1pO4fLEVPM4kW laK8IKLI29z1Z3MO6qe6jL3icimlcZIzBwHy2/GshH3KxB1ZgE+fB2mOQ8drqVkf Ql946r9uReUAd5ssJ97lkVtL2WAID+NjW269jOY9VpFpbulNhVweU5avA9lypQo7 1Z4diNQOx+ifFkwTNsqCfc4TY4WICCs1MXf+LgQR1K6H/Ab2kwD7IAILTsNHlCKS OlMfUYKnAZpguMWQp0yUV32qXAOQ5NmA8XzrJCk/TSLYLsHBbndwiX2olcwOdFGH kKnYvcGfG/ejafDMxL4QkwgX2MwRass= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:14 2025 by rpki-client