$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa File: 3929a969-6b96-389e-aeac-0034a05d30fd.roa (raw, json) Hash identifier: Bcc4oRlqts9BWljsp0rm+tSvve5R1mUamLEYQD5EQkc= Subject key identifier: B7:86:79:5F:BD:37:27:B9:8D:98:B9:B4:CE:65:66:AE:63:73:B9:F0 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F43285848E16BC523363BAB24DB1AEB00 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 55410 IP address blocks: 172.84.180.0/24 maxlen: 24 172.84.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:c5:23:36:3b:ab:24:db:1a:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=ce9fcf57-0e3b-45b4-a4f9-b034ed0a4ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:e5:67:4f:58:df:02:49:42:83:0c:15:54: 18:a5:ea:d4:24:72:2f:45:df:89:a4:2d:9c:12:5c: 80:bc:fd:89:f0:1f:58:aa:45:78:cb:68:ac:65:03: b5:73:95:6a:9b:f9:26:15:b7:b9:87:17:f3:a9:1d: b6:f8:2f:53:18:55:2a:bd:e2:a4:79:e9:61:4a:21: df:e8:c2:c8:48:4c:60:27:07:c0:96:37:3d:25:8d: 6a:dc:d3:24:07:6c:82:50:da:59:6b:f1:3c:30:f1: 83:4b:40:72:cd:a1:11:01:4c:51:67:67:a9:c5:06: 06:15:95:44:d4:82:e0:8b:fd:48:6e:39:e9:e1:36: 6c:1c:b9:bd:f3:35:7b:40:01:04:27:08:e9:04:ae: f7:58:e1:17:d9:40:e3:cd:ed:53:3f:4a:56:54:84: bf:c6:0a:f3:cc:bf:4c:11:87:cc:41:2f:6c:f1:da: ba:47:4b:01:ef:5d:da:c3:a7:5c:56:7e:e6:ff:91: 8c:8d:59:32:e2:87:0e:fc:69:59:11:c4:13:76:a9: 58:3a:bf:3d:ad:58:8e:9f:a2:3d:b9:70:33:01:b1: 36:1c:a2:78:29:87:11:80:11:10:4b:1a:3d:ae:ec: e8:b1:4a:69:26:f1:32:c1:3f:09:38:0e:32:78:cb: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:86:79:5F:BD:37:27:B9:8D:98:B9:B4:CE:65:66:AE:63:73:B9:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.180.0/24 172.84.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:35:6f:d4:06:c0:85:df:ce:83:a4:81:79:87:2b:a5:54:7d: 9b:75:a5:00:49:74:f4:b8:48:60:13:13:5f:c8:4f:68:8e:49: 47:00:ef:41:02:21:a2:36:ba:2b:06:a9:96:fa:bd:60:a2:55: c2:cb:10:e6:29:51:00:ca:32:66:a0:c2:de:93:10:db:d5:db: 67:03:52:9d:14:ca:ae:3f:c1:66:fa:51:b6:69:d0:85:80:21: cb:d7:7a:56:cc:54:56:b0:fc:74:24:45:27:f3:37:51:0b:d4: fb:e6:ea:70:1e:7b:ab:80:4f:45:89:da:18:62:f8:9b:5a:c9: 82:5d:5f:95:92:2b:ab:ce:ba:de:50:b9:4c:b3:3a:de:c5:9f: 16:17:03:4f:9f:65:89:8c:5c:23:d3:c0:12:39:e4:f3:f9:8c: ca:13:ad:48:b4:62:69:ef:f6:51:b3:c1:48:74:4d:4e:a7:b3: 98:49:a2:33:8f:65:0b:48:24:db:0d:b4:e4:4c:c8:c0:ef:35: c3:b6:80:f6:10:b2:65:fc:82:46:57:fe:e6:16:3a:3e:f7:93: c5:17:ab:37:40:07:eb:dd:8a:50:d7:36:f3:6b:8c:bb:69:e5: f8:3f:57:ab:51:3d:bd:e0:bf:cf:9b:64:83:cc:68:a5:0b:a8: d9:b8:b6:e7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjha8UjNjurJNsa6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2U5ZmNmNTctMGUzYi00NWI0LWE0ZjktYjAzNGVkMGE0ZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJPlZ09Y3wJJQoMMFVQYperUJHIvRd+JpC2c ElyAvP2J8B9YqkV4y2isZQO1c5Vqm/kmFbe5hxfzqR22+C9TGFUqveKkeelhSiHf 6MLISExgJwfAljc9JY1q3NMkB2yCUNpZa/E8MPGDS0ByzaERAUxRZ2epxQYGFZVE 1ILgi/1Ibjnp4TZsHLm98zV7QAEEJwjpBK73WOEX2UDjze1TP0pWVIS/xgrzzL9M EYfMQS9s8dq6R0sB713aw6dcVn7m/5GMjVky4ocO/GlZEcQTdqlYOr89rViOn6I9 uXAzAbE2HKJ4KYcRgBEQSxo9ruzosUppJvEywT8JOA4yeMtkFQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLeGeV+9Nye5jZi5tM5lZq5jc7nwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvMzkyOWE5NjktNmI5Ni0z ODllLWFlYWMtMDAzNGEwNWQzMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFS0AwQA rFS+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACw1b9QGwIXfzoOkgXmHK6VUfZt1pQBJdPS4SGATE1/IT2iO SUcA70ECIaI2uisGqZb6vWCiVcLLEOYpUQDKMmagwt6TENvV22cDUp0Uyq4/wWb6 UbZp0IWAIcvXelbMVFaw/HQkRSfzN1EL1Pvm6nAee6uAT0WJ2hhi+JtayYJdX5WS K6vOut5QuUyzOt7FnxYXA0+fZYmMXCPTwBI55PP5jMoTrUi0Ymnv9lGzwUh0TU6n s5hJojOPZQtIJNsNtORMyMDvNcO2gPYQsmX8gkZX/uYWOj73k8UXqzdAB+vdilDX NvNrjLtp5fg/V6tRPb3gv8+bZIPMaKULqNm4tuc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:34 2025 by rpki-client