$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa File: d6fed470-07a0-3210-99f9-cb0d4504744a.roa (raw, json) Hash identifier: ZQ7Zd6coIGjOVppoS7mPoKZ135OLa8nd/3M6UIhIwVg= Subject key identifier: 60:BB:2E:3E:A1:5C:51:5C:68:CE:5F:40:F5:42:2A:79:77:80:9E:CB Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584961B99F043E2DEA4779595180 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 40676 IP address blocks: 172.84.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9f:04:3e:2d:ea:47:79:59:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=ec71c67f-6c42-4b25-814f-a0251b9f6456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:d2:d9:90:84:89:e5:0b:d4:b8:ec:24:71: a2:f3:30:31:95:ad:25:af:c5:34:71:35:dc:16:47: ec:27:d8:21:e3:03:76:09:b3:4b:38:c4:e5:8f:27: 6e:00:83:bf:b3:41:02:a3:2f:46:12:a3:c3:e0:24: b4:f2:30:9d:46:eb:fc:ba:3e:90:88:c9:f1:23:2c: 82:2c:bb:5c:f5:85:68:06:43:69:fd:e0:eb:5e:b3: ca:24:f1:63:77:7e:17:f9:03:ea:26:35:8d:da:d3: 1b:05:08:95:2d:e8:a3:4f:97:0b:1a:1f:f0:ea:e5: d5:e5:20:3d:24:c6:99:d1:b8:7c:b9:0d:49:07:c4: a1:b6:34:38:21:d4:97:69:6b:77:3e:1b:84:93:b6: de:62:34:9b:a2:70:2a:db:45:81:0c:6f:9d:43:6c: 56:2c:15:76:c1:89:0b:d0:e1:97:ec:b4:30:a6:0d: b4:70:2c:a6:66:c6:e5:73:cf:d0:cc:58:3f:09:7a: 1c:8e:72:d4:b9:99:10:9a:18:06:b9:8f:54:fc:c0: cf:50:f6:e8:7b:0f:ec:ef:1f:19:b4:ca:fc:f1:6a: 41:f6:17:89:78:fe:27:9b:34:6f:27:43:fc:66:66: ea:da:14:fa:ca:88:3e:56:a9:24:6c:c5:c3:9b:e4: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BB:2E:3E:A1:5C:51:5C:68:CE:5F:40:F5:42:2A:79:77:80:9E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:83:83:02:df:75:e2:fe:32:df:03:bc:3b:bb:9f:b1:27:b2: 33:2a:84:16:10:b5:fe:da:4d:a4:a0:69:e4:a2:cc:18:a8:16: f1:1e:57:54:b8:a6:b3:29:ac:e3:ce:62:d2:51:4a:2b:25:d9: 8a:5a:31:89:d6:a7:b8:91:07:2d:0a:79:8f:c1:a2:d6:68:4e: d0:88:87:2c:e4:43:d0:27:0b:30:92:b6:0e:1c:db:03:da:5c: 45:b7:7d:5c:ee:08:f4:a8:68:23:5d:6b:80:19:91:62:33:3e: c5:62:4d:69:08:7c:b1:a5:2a:ce:a2:d8:57:3a:f8:be:f2:d0: 84:cd:95:a6:ab:a0:a5:21:07:7f:ac:9e:01:4d:cb:91:00:46: b7:79:86:71:58:11:ef:99:63:2c:80:80:8e:42:ae:ce:65:0e: 91:0c:d7:bf:cd:f5:1b:5d:3c:b9:2b:55:82:50:21:37:60:27: d9:12:21:5b:70:aa:c8:89:aa:5b:f7:e3:70:87:7a:99:9d:de: d9:6a:02:07:ae:26:c1:4a:32:12:93:53:4e:23:d1:12:fa:ba: 86:04:08:75:ed:79:13:2a:9f:5b:8d:e9:8e:12:83:09:0a:e1: 80:8b:d8:d7:a4:29:6b:0d:08:35:1a:81:a8:da:12:52:25:2e: 2c:7f:9e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ8EPi3qR3lZUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWM3MWM2N2YtNmM0Mi00YjI1LTgxNGYtYTAyNTFiOWY2NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhufS2ZCEieUL1LjsJHGi8zAxla0lr8U0cTXc FkfsJ9gh4wN2CbNLOMTljyduAIO/s0ECoy9GEqPD4CS08jCdRuv8uj6QiMnxIyyC LLtc9YVoBkNp/eDrXrPKJPFjd34X+QPqJjWN2tMbBQiVLeijT5cLGh/w6uXV5SA9 JMaZ0bh8uQ1JB8ShtjQ4IdSXaWt3PhuEk7beYjSbonAq20WBDG+dQ2xWLBV2wYkL 0OGX7LQwpg20cCymZsblc8/QzFg/CXocjnLUuZkQmhgGuY9U/MDPUPboew/s7x8Z tMr88WpB9heJeP4nmzRvJ0P8Zmbq2hT6yog+VqkkbMXDm+T9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC7Lj6hXFFcaM5fQPVCKnl3gJ7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvZDZmZWQ0NzAtMDdhMC0z MjEwLTk5ZjktY2IwZDQ1MDQ3NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCDgwLfdeL+Mt8DvDu7n7EnsjMqhBYQtf7aTaSgaeSizBioFvEeV1S4 prMprOPOYtJRSisl2YpaMYnWp7iRBy0KeY/BotZoTtCIhyzkQ9AnCzCStg4c2wPa XEW3fVzuCPSoaCNda4AZkWIzPsViTWkIfLGlKs6i2Fc6+L7y0ITNlaaroKUhB3+s ngFNy5EARrd5hnFYEe+ZYyyAgI5Crs5lDpEM17/N9RtdPLkrVYJQITdgJ9kSIVtw qsiJqlv343CHepmd3tlqAgeuJsFKMhKTU04j0RL6uoYECHXteRMqn1uN6Y4SgwkK 4YCL2NekKWsNCDUagajaElIlLix/nkM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:21 2025 by rpki-client