$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f3b6e-e8e1-3a71-92e7-96437d391457.roa File: f53f3b6e-e8e1-3a71-92e7-96437d391457.roa (raw, json) Hash identifier: La1/go5Mfx2QWua+7IqLXTjjyfDG0LAyce2kBTct+14= Subject key identifier: 05:14:DD:66:A2:E1:E4:B9:A9:6F:E7:27:E0:8B:3C:1C:8A:98:C4:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD674231B2A5865807BA180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f3b6e-e8e1-3a71-92e7-96437d391457.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:74:23:1b:2a:58:65:80:7b:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=800dcefb-96d2-46b5-b5fd-b1072efd45d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:db:b6:b9:ea:96:42:21:e8:8c:5f:23:81: e3:01:57:d7:04:d4:70:e0:63:5d:7e:20:39:33:1d: 61:22:8f:32:0b:94:0f:44:9e:fb:39:ed:b1:87:c4: b4:9f:fe:09:4b:58:08:3f:10:ea:1b:51:28:41:d9: 27:7a:87:cf:44:51:6f:d5:dd:0e:61:06:48:56:1e: a0:5c:ce:e5:c3:d6:1f:3e:99:09:7f:be:22:c8:86: 68:8a:19:8c:9d:ad:d9:59:a6:69:07:35:a7:b6:5f: 6e:a3:e6:43:ad:64:57:2f:dc:ec:52:99:29:ba:c4: 1f:c4:3b:96:0e:fc:38:a1:ea:19:84:6f:2c:79:63: 65:83:a7:f7:18:01:a0:35:cf:d7:99:83:cc:a7:3c: db:10:f5:60:d2:b9:29:6f:21:fb:a7:14:f0:e0:50: 6d:90:e7:87:14:c0:d2:77:ad:5d:b8:2c:48:41:28: ec:6d:3e:5c:bf:9b:33:e3:1c:c4:f9:94:b8:6b:82: 5d:3d:a0:78:d8:e1:6f:1d:2d:98:07:b6:4b:bd:c8: 27:3e:4d:d5:94:f2:76:73:aa:79:91:4d:70:23:71: 4a:b2:b8:62:3e:80:da:6d:66:e9:b7:dc:36:42:3e: 9c:46:e4:17:ca:29:f5:aa:ed:c3:9c:da:a7:a1:19: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:DD:66:A2:E1:E4:B9:A9:6F:E7:27:E0:8B:3C:1C:8A:98:C4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f3b6e-e8e1-3a71-92e7-96437d391457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4e:09:cc:13:94:05:96:db:8c:05:be:85:d8:8c:ac:b8:3a: 4a:23:1a:cc:1a:2e:c6:91:0c:34:59:d3:fc:f5:5e:6d:8a:fe: a7:3d:3e:0b:e8:34:d2:23:ea:78:a0:e4:77:1e:4c:8c:80:c2: 9b:26:c2:91:32:95:e0:00:dc:6b:b9:2a:79:b5:0b:4c:d5:3b: 9b:1e:fb:69:87:57:bf:c3:05:5b:00:99:a3:0e:47:7c:86:5a: c7:47:9d:34:b1:61:c5:98:08:95:d7:2c:0d:32:f5:8b:b2:4a: e9:5a:ce:4d:42:7d:f0:52:fd:2b:6f:04:00:cd:5d:12:6a:ed: bd:3c:c9:af:13:c2:bc:a9:bd:b7:3b:6f:d9:0d:bc:37:b1:ef: 1b:a3:1a:3d:09:42:03:0e:29:ab:ce:a7:7f:9f:08:2c:4f:e4: 67:ab:60:9b:bb:aa:12:11:48:e8:e4:62:e3:d4:dd:ec:87:d8: 47:6f:78:82:eb:da:9e:21:25:d9:15:e2:a1:99:bc:f6:1e:8a: 57:0c:3b:cc:20:e5:fe:a2:ae:f0:b3:8d:d3:1a:7d:24:35:06: 94:ff:d4:0a:b6:d4:9b:e8:90:79:dd:a5:23:35:2c:2b:dc:79: 94:5c:6a:14:da:05:8f:dd:2a:a5:9f:e1:7a:dc:d4:00:9c:8e: db:19:60:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nQjGypYZYB7oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk ODAwZGNlZmItOTZkMi00NmI1LWI1ZmQtYjEwNzJlZmQ0NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ3btrnqlkIh6IxfI4HjAVfXBNRw4GNdfiA5 Mx1hIo8yC5QPRJ77Oe2xh8S0n/4JS1gIPxDqG1EoQdkneofPRFFv1d0OYQZIVh6g XM7lw9YfPpkJf74iyIZoihmMna3ZWaZpBzWntl9uo+ZDrWRXL9zsUpkpusQfxDuW Dvw4oeoZhG8seWNlg6f3GAGgNc/XmYPMpzzbEPVg0rkpbyH7pxTw4FBtkOeHFMDS d61duCxIQSjsbT5cv5sz4xzE+ZS4a4JdPaB42OFvHS2YB7ZLvcgnPk3VlPJ2c6p5 kU1wI3FKsrhiPoDabWbpt9w2Qj6cRuQXyin1qu3DnNqnoRka+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUU3Wai4eS5qW/nJ+CLPByKmMSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjUzZjNiNmUtZThlMS0z YTcxLTkyZTctOTY0MzdkMzkxNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJOCcwTlAWW24wFvoXYjKy4OkojGswaLsaRDDRZ0/z1Xm2K/qc9Pgvo NNIj6nig5HceTIyAwpsmwpEyleAA3Gu5Knm1C0zVO5se+2mHV7/DBVsAmaMOR3yG WsdHnTSxYcWYCJXXLA0y9YuySulazk1CffBS/StvBADNXRJq7b08ya8Twrypvbc7 b9kNvDex7xujGj0JQgMOKavOp3+fCCxP5GerYJu7qhIRSOjkYuPU3eyH2EdveILr 2p4hJdkV4qGZvPYeilcMO8wg5f6irvCzjdMafSQ1BpT/1Aq21JvokHndpSM1LCvc eZRcahTaBY/dKqWf4Xrc1ACcjtsZYAk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:47 2025 by rpki-client