$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa File: f47e22f4-6e3a-3537-a1be-97f2fa802042.roa (raw, json) Hash identifier: 3CV5eCGrQWx/Kez4rnTcD+rKIZt42nrsjYzv/56Melc= Subject key identifier: 48:03:4F:21:8C:4F:F8:9A:7C:FD:AE:A5:EC:D1:BF:35:5B:67:2C:3D Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584964843F6CAB60C01A6AD81580 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 172.86.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:3f:6c:ab:60:c0:1a:6a:d8:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=3cc638bb-0f54-41f1-a802-8320e95303f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:34:9a:8e:a2:7d:5d:4f:90:51:94:0c:25: f2:82:88:d1:1a:6f:21:8f:bb:65:96:c6:4a:22:f3: 6a:b6:64:c4:ad:ab:5d:52:f3:6a:f9:18:25:24:9c: 47:d9:4b:48:dc:c8:bc:d0:17:b8:dd:c9:20:6c:63: 98:70:fa:e8:21:f3:57:67:4d:fe:04:93:69:86:18: 86:63:7e:22:d5:0b:f0:c0:ca:09:54:3c:7c:eb:17: 85:b2:dd:5f:7b:5f:d6:0c:e3:f7:73:87:21:a3:8e: 64:b6:39:ac:7e:df:ab:b8:9b:63:c1:34:99:12:f7: a3:e3:53:32:07:f6:75:af:f5:d8:aa:60:40:54:2c: 7c:2b:f6:b5:80:2c:d4:8b:27:a5:3c:fd:5b:5b:f7: 3a:dd:51:32:0a:a1:69:f5:75:54:6d:44:c0:91:a7: 24:44:2c:35:90:17:b5:65:11:6d:c9:0a:77:4d:eb: 6c:76:24:15:3d:71:6f:4e:e4:44:f1:26:df:ec:46: de:d8:5e:de:77:07:0a:99:67:7d:32:4a:8f:a6:00: 1f:81:f1:3f:61:77:bd:74:f1:97:2b:47:05:92:7c: ef:95:3c:9e:6c:eb:cb:0c:a9:45:0a:79:2f:22:eb: bf:bb:2e:8c:c1:49:00:62:dc:4f:5b:79:10:85:94: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:4F:21:8C:4F:F8:9A:7C:FD:AE:A5:EC:D1:BF:35:5B:67:2C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e0:6a:37:f0:3d:8a:32:f5:68:2a:47:25:d6:3e:f3:6a:28: f2:d1:b8:97:03:8d:b0:57:c9:cc:b1:d9:ec:dc:7a:11:d2:d4: 36:86:cb:6e:1e:5a:a0:5f:48:db:9d:d4:b0:2d:cd:17:8e:ac: f7:a3:a4:dd:8b:09:8a:d0:e6:51:07:0f:61:5c:ab:cb:52:e3: b0:05:42:82:e1:68:e8:6f:a0:90:47:e5:89:c4:2a:73:46:ab: 10:f8:ff:d5:f4:40:d0:1b:ca:76:5f:fc:1a:2d:33:bf:30:a0: e0:87:b1:6b:94:e7:82:02:c6:24:26:17:20:64:8f:c7:aa:fb: 76:f8:25:cd:a9:b3:b8:e6:09:c7:78:65:91:19:f1:a3:c0:67: 0d:c0:b1:64:7d:49:8c:ab:2d:d9:5d:89:85:7d:d0:15:0f:f5: 0c:23:da:4e:93:40:85:46:7f:85:73:4e:f8:08:64:7d:82:dd: e5:22:0c:8c:58:a5:a5:2a:2f:9e:25:d8:8f:4c:48:a2:5f:03: ff:7b:99:24:08:70:bd:f1:39:b1:69:ea:3f:fc:9a:6f:b6:04: 49:39:b4:90:69:ea:03:56:c6:9c:04:76:dd:e3:ba:e8:4e:10: 08:9a:68:12:8e:26:57:f7:47:b8:3a:aa:4d:0b:94:22:e5:9e: 55:a6:5b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhD9sq2DAGmrYFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk M2NjNjM4YmItMGY1NC00MWYxLWE4MDItODMyMGU5NTMwM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJc0mo6ifV1PkFGUDCXygojRGm8hj7tllsZK IvNqtmTEratdUvNq+RglJJxH2UtI3Mi80Be43ckgbGOYcProIfNXZ03+BJNphhiG Y34i1QvwwMoJVDx86xeFst1fe1/WDOP3c4cho45ktjmsft+ruJtjwTSZEvej41My B/Z1r/XYqmBAVCx8K/a1gCzUiyelPP1bW/c63VEyCqFp9XVUbUTAkackRCw1kBe1 ZRFtyQp3TetsdiQVPXFvTuRE8Sbf7Ebe2F7edwcKmWd9MkqPpgAfgfE/YXe9dPGX K0cFknzvlTyebOvLDKlFCnkvIuu/uy6MwUkAYtxPW3kQhZQCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgDTyGMT/iafP2upezRvzVbZyw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvZjQ3ZTIyZjQtNmUzYS0z NTM3LWExYmUtOTdmMmZhODAyMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDgajfwPYoy9WgqRyXWPvNqKPLRuJcDjbBXycyx2ezcehHS1DaGy24e WqBfSNud1LAtzReOrPejpN2LCYrQ5lEHD2Fcq8tS47AFQoLhaOhvoJBH5YnEKnNG qxD4/9X0QNAbynZf/BotM78woOCHsWuU54ICxiQmFyBkj8eq+3b4Jc2ps7jmCcd4 ZZEZ8aPAZw3AsWR9SYyrLdldiYV90BUP9Qwj2k6TQIVGf4VzTvgIZH2C3eUiDIxY paUqL54l2I9MSKJfA/97mSQIcL3xObFp6j/8mm+2BEk5tJBp6gNWxpwEdt3juuhO EAiaaBKOJlf3R7g6qk0LlCLlnlWmWzA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:31:19 2025 by rpki-client