$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faac51d6-ba9e-369f-91d7-2911f9117e4d.roa File: faac51d6-ba9e-369f-91d7-2911f9117e4d.roa (raw, json) Hash identifier: SrKtGxvj5YnzG2/H4QhvFBNVrpJQy1V//QY5nhEIJew= Subject key identifier: 59:D6:90:A6:84:17:B9:EF:67:31:D9:6E:B0:83:9D:6F:54:F3:1B:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF16462DDD41D474289A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faac51d6-ba9e-369f-91d7-2911f9117e4d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f1:64:62:dd:d4:1d:47:42:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=3486959c-35e3-40fe-9b92-719fac5cb7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:68:4f:ad:b6:b9:56:22:57:8c:85:a6:51: 21:76:55:68:67:44:66:ec:53:46:fe:5a:4e:53:93: 5f:c2:33:9c:cc:2e:87:cc:54:95:06:25:4a:b6:5a: 5e:26:cd:a7:b7:0f:6f:cc:bc:83:e2:15:d0:38:86: 62:33:d8:86:25:57:76:2d:f7:47:b9:7d:64:5b:6c: c9:a3:1e:06:b6:a3:c3:da:79:b7:72:2c:95:73:4f: 17:d2:ea:f0:ee:90:2b:0c:2e:73:56:71:24:32:21: ea:d2:33:ef:dd:a6:54:b4:51:96:95:f4:40:16:25: 68:d2:dd:02:e4:ce:97:5f:2e:22:2f:b9:5f:fb:3d: f0:ce:9f:86:a4:e5:ab:54:27:19:0e:45:28:3f:17: ee:c9:32:55:78:ca:5d:0f:ff:d7:90:3a:f7:d3:f0: 96:3d:4f:52:ee:9b:94:e4:f8:50:07:f6:b1:62:f2: 7b:26:aa:da:fa:7c:96:81:1f:41:d6:3c:60:28:cd: 75:29:7a:aa:1a:5e:19:a3:33:20:a7:1d:23:e7:b8: 33:96:14:6d:0d:11:f1:2f:ff:18:8b:85:e7:b0:12: ad:c0:10:ac:3c:21:15:28:69:ff:ac:52:dc:b6:c1: 46:8d:f8:94:8f:23:ac:b5:c3:c7:cd:3a:41:dd:48: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D6:90:A6:84:17:B9:EF:67:31:D9:6E:B0:83:9D:6F:54:F3:1B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faac51d6-ba9e-369f-91d7-2911f9117e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9d:49:64:00:f0:da:19:0b:b2:6e:12:ad:36:9b:cc:1b:4f: 55:79:ef:8b:66:d0:21:46:8d:d4:ba:54:ad:2a:4a:11:2c:8f: a5:eb:84:ce:f2:b7:90:04:6d:8c:c4:8a:41:2c:c4:cd:3e:87: c5:28:3b:82:b0:9e:82:b5:54:14:e7:0d:0a:d2:bc:44:46:60: 02:64:f6:80:e5:a9:ed:2e:75:44:1d:67:f0:84:68:5f:70:bc: a8:bc:1b:2b:25:bd:10:70:84:fb:48:b1:be:4d:0f:75:10:ac: 56:b7:81:0f:43:48:3b:e5:1e:c4:fc:12:72:91:0d:87:40:16: e9:f0:b1:10:eb:01:c9:5d:22:48:2b:9d:c3:01:e4:dc:8c:65: 14:5b:7a:c2:69:db:fc:26:98:47:e2:54:c6:ab:76:60:86:75: d8:c1:cf:c7:05:5c:9e:eb:a0:f8:61:14:f1:a1:4c:f1:94:95: ae:80:2f:cf:ac:2c:53:6b:ca:c4:1e:49:ea:20:44:5f:73:4e: dc:8a:20:dc:4c:f2:cc:fb:c2:88:75:bb:35:88:8c:45:a9:11: a3:56:93:cc:3d:01:f5:8c:fd:4a:fa:dd:3c:77:1e:d5:7c:36: f9:67:67:63:6d:a8:92:43:9d:39:fd:82:65:f6:8e:f0:6e:7e: 21:ca:19:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/FkYt3UHUdCiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzQ4Njk1OWMtMzVlMy00MGZlLTliOTItNzE5ZmFjNWNiN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxNoT622uVYiV4yFplEhdlVoZ0Rm7FNG/lpO U5NfwjOczC6HzFSVBiVKtlpeJs2ntw9vzLyD4hXQOIZiM9iGJVd2LfdHuX1kW2zJ ox4GtqPD2nm3ciyVc08X0urw7pArDC5zVnEkMiHq0jPv3aZUtFGWlfRAFiVo0t0C 5M6XXy4iL7lf+z3wzp+GpOWrVCcZDkUoPxfuyTJVeMpdD//XkDr30/CWPU9S7puU 5PhQB/axYvJ7Jqra+nyWgR9B1jxgKM11KXqqGl4ZozMgpx0j57gzlhRtDRHxL/8Y i4XnsBKtwBCsPCEVKGn/rFLctsFGjfiUjyOstcPHzTpB3UgNgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnWkKaEF7nvZzHZbrCDnW9U8xuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmFhYzUxZDYtYmE5ZS0z NjlmLTkxZDctMjkxMWY5MTE3ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCdSWQA8NoZC7JuEq02m8wbT1V574tm0CFGjdS6VK0qShEsj6XrhM7y t5AEbYzEikEsxM0+h8UoO4KwnoK1VBTnDQrSvERGYAJk9oDlqe0udUQdZ/CEaF9w vKi8GyslvRBwhPtIsb5ND3UQrFa3gQ9DSDvlHsT8EnKRDYdAFunwsRDrAcldIkgr ncMB5NyMZRRbesJp2/wmmEfiVMardmCGddjBz8cFXJ7roPhhFPGhTPGUla6AL8+s LFNrysQeSeogRF9zTtyKINxM8sz7woh1uzWIjEWpEaNWk8w9AfWM/Ur63Tx3HtV8 NvlnZ2NtqJJDnTn9gmX2jvBufiHKGbE= -----END CERTIFICATE-----Generated at Wed Apr 9 10:10:07 2025 by rpki-client