$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa File: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (raw, json) Hash identifier: aRRreCSeGZr0ri2KO98tcDmx5S1CTAr7kIjp6+YgBM8= Subject key identifier: F3:3B:91:A6:6C:25:95:91:1F:8A:F3:AD:79:42:57:08:D8:57:6A:30 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F432858495ABEE47671DEFE8A0946D680 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 8018 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e4:76:71:de:fe:8a:09:46:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ffe9d7ac-f7dc-4832-a004-2407352f174e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:88:03:ee:42:d6:66:38:23:06:28:27:59: bd:43:37:fb:43:cd:96:8b:25:1c:c9:6f:8d:22:af: 84:f9:ac:1f:23:05:f2:37:c3:46:34:cb:ff:f2:6d: ed:82:dc:17:d5:08:71:d4:1d:00:e6:6d:db:86:d2: 30:f4:3a:0f:6b:5a:3e:04:08:79:01:37:e3:ee:9b: be:e8:eb:b0:ed:1f:34:8b:cf:f6:14:c1:bc:05:5c: b1:29:c0:47:8f:1b:b8:8a:d1:c0:c0:28:94:35:60: 44:66:a6:0f:be:b3:85:ec:8c:90:a9:b9:78:63:83: e6:80:a3:74:b4:14:b5:6e:e6:af:53:fe:ff:e0:e0: 91:6e:21:8d:e1:7a:ee:93:e1:72:0d:df:d9:6a:91: 97:79:aa:01:36:76:3a:69:f7:73:ed:7d:b9:25:d4: ca:5e:6c:3c:93:3b:50:5f:f7:1e:78:b6:80:a1:f7: 89:17:f5:81:d4:f9:30:16:23:a1:fa:7d:e4:c6:fb: a6:cc:5b:d9:7b:00:a5:a7:7c:a3:db:d1:77:ee:4e: 84:30:01:76:25:c1:e0:8e:6f:2c:dc:5f:28:14:a9: f3:4a:22:0e:10:14:0c:ae:d8:a2:75:00:23:e4:fd: d8:2b:c0:d1:80:54:87:36:54:7c:b9:89:ac:c3:68: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3B:91:A6:6C:25:95:91:1F:8A:F3:AD:79:42:57:08:D8:57:6A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c6:b0:fe:ce:4a:89:ca:09:4a:2d:7e:dc:b3:e7:8a:ae:1f: 0d:8d:42:b2:93:5e:2f:8c:65:3c:eb:e4:d5:40:18:4a:46:31: c6:44:bb:c1:5b:6c:6b:10:e4:b9:da:e7:e2:6e:28:9b:d3:81: fb:e0:56:5f:6d:76:03:37:de:84:2a:59:2d:4b:5b:f4:d4:c7: 73:1f:00:48:5b:eb:c4:91:cb:c0:e1:62:ac:04:7e:99:69:37: 92:f0:b5:ab:63:55:a2:60:bc:d3:82:69:65:c1:45:7d:73:c6: aa:0e:aa:ac:1b:2d:6e:80:72:2a:b0:77:21:d3:76:fe:bf:2b: f5:f0:cd:8e:d6:f3:55:07:03:58:13:4b:23:f1:4a:92:3b:fe: 12:18:67:67:b9:31:5f:79:84:26:0b:d7:d6:c9:f3:0f:f1:3a: 40:bc:28:84:e0:12:4d:74:ba:9d:85:0b:4f:ca:ba:de:11:33: 25:e8:52:16:4c:b8:87:51:55:43:98:ff:9a:e4:4b:53:b5:be: 7a:ed:2e:aa:e5:63:d2:7c:9a:30:48:2a:70:90:7c:43:58:23: 0d:50:0c:a8:af:30:d9:d2:11:2b:52:c6:00:84:07:9a:5c:b1: 6c:59:44:33:f8:1c:bb:77:8f:ac:00:c2:dd:d6:e3:77:b6:7a: 57:e5:80:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuR2cd7+iglG1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZmZlOWQ3YWMtZjdkYy00ODMyLWEwMDQtMjQwNzM1MmYxNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/mIA+5C1mY4IwYoJ1m9Qzf7Q82WiyUcyW+N Iq+E+awfIwXyN8NGNMv/8m3tgtwX1Qhx1B0A5m3bhtIw9DoPa1o+BAh5ATfj7pu+ 6Ouw7R80i8/2FMG8BVyxKcBHjxu4itHAwCiUNWBEZqYPvrOF7IyQqbl4Y4PmgKN0 tBS1buavU/7/4OCRbiGN4Xruk+FyDd/ZapGXeaoBNnY6afdz7X25JdTKXmw8kztQ X/ceeLaAofeJF/WB1PkwFiOh+n3kxvumzFvZewClp3yj29F37k6EMAF2JcHgjm8s 3F8oFKnzSiIOEBQMrtiidQAj5P3YK8DRgFSHNlR8uYmsw2iRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM7kaZsJZWRH4rzrXlCVwjYV2owMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvYjlhZGFiYzItZmMwOC0z OWQ0LWFhY2EtNTg0YWFlZjc3YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzGsP7OSonKCUotftyz54quHw2NQrKTXi+MZTzr5NVAGEpGMcZEu8Fb bGsQ5Lna5+JuKJvTgfvgVl9tdgM33oQqWS1LW/TUx3MfAEhb68SRy8DhYqwEfplp N5LwtatjVaJgvNOCaWXBRX1zxqoOqqwbLW6AciqwdyHTdv6/K/XwzY7W81UHA1gT SyPxSpI7/hIYZ2e5MV95hCYL19bJ8w/xOkC8KITgEk10up2FC0/Kut4RMyXoUhZM uIdRVUOY/5rkS1O1vnrtLqrlY9J8mjBIKnCQfENYIw1QDKivMNnSEStSxgCEB5pc sWxZRDP4HLt3j6wAwt3W43e2elflgPA= -----END CERTIFICATE-----Generated at Mon Apr 28 08:27:59 2025 by rpki-client