$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30143748-7ffc-3def-9c7b-2eed49513669.roa File: 30143748-7ffc-3def-9c7b-2eed49513669.roa (raw, json) Hash identifier: 0H0uKYQkg9Sj03pJu+eMFkLBOBWTS+KVvEZ6P1Xe8HA= Subject key identifier: 2D:A2:A1:36:F5:FB:FC:79:C7:CE:CE:99:BB:51:8F:E4:F2:71:CC:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F35238C062D9C4AAD0D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30143748-7ffc-3def-9c7b-2eed49513669.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 36183 IP address blocks: 172.224.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:35:23:8c:06:2d:9c:4a:ad:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=a06d9774-7118-43ac-8a93-b4d25f8f321c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:3c:10:a6:8e:84:0d:b7:24:43:e2:29:f5: df:9c:e5:5c:47:f1:ad:f3:ba:34:42:d2:e0:11:39: 62:a3:bc:4a:67:d0:e0:75:53:33:b0:ff:57:42:fe: c3:f4:69:ba:ca:ec:b1:b2:c2:f0:6d:1f:21:31:22: de:a0:a6:46:5b:2b:50:20:9c:e6:55:60:e6:73:d5: 2e:f2:5f:20:7a:2c:26:7b:be:95:8d:78:0b:6b:77: 93:ae:00:49:9f:1e:4c:af:f7:10:68:3a:5e:45:de: 00:af:b7:b7:ed:39:85:88:47:dc:69:51:52:e0:91: 31:f2:7b:ca:6d:92:fd:dd:28:19:98:cf:b2:e6:c9: c8:a3:0b:b9:c6:80:31:1f:55:c9:96:81:53:cd:7a: 87:a7:ff:c8:f8:1a:64:7c:e4:67:6f:89:e7:ed:e6: 8e:a6:ba:bf:21:73:fc:2a:86:e3:b7:bc:55:2f:17: 11:53:62:7c:b4:53:eb:51:99:3e:13:0c:02:35:ab: 27:52:1e:fb:98:f5:b1:01:15:85:c2:e7:99:99:5e: 38:2a:a5:60:7f:ad:91:ea:3c:a8:23:b7:f1:b5:44: 1e:66:b6:13:4a:e5:85:9d:be:32:fb:87:e5:bb:32: 9b:e4:64:ee:fc:64:83:df:6c:52:61:4a:67:37:ef: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:A1:36:F5:FB:FC:79:C7:CE:CE:99:BB:51:8F:E4:F2:71:CC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30143748-7ffc-3def-9c7b-2eed49513669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:74:3e:2a:d1:72:91:63:86:38:5c:6d:f5:ba:e0:bf:96:e7: 3f:14:1a:05:c1:e8:ba:2b:da:1e:4d:59:db:ca:26:dc:1f:27: 45:4e:6e:de:a0:cd:f1:a4:6a:21:b2:80:93:71:b9:5a:84:af: 71:e7:f0:e2:bc:f5:57:aa:fc:85:83:b3:b3:38:d9:c1:94:fa: 11:1b:55:92:b2:ac:35:62:b2:1b:9d:e6:ec:8e:87:26:8b:ae: aa:88:9e:56:e3:c7:82:45:9c:5f:12:e2:97:ee:a7:05:6b:ca: 74:8f:11:ea:40:e3:84:b3:94:c4:81:5a:f7:22:26:64:26:37: 7c:c7:ee:dc:06:c8:c2:bf:f8:8b:0c:16:06:a3:5f:d4:87:34: 4a:8b:68:0a:15:46:bd:f6:1c:1d:23:52:c0:3a:7c:a1:a2:9e: c1:dd:88:92:17:3c:25:93:c1:ac:0e:1d:a4:de:3e:ea:3a:b8: d5:95:12:9c:60:c2:0d:07:28:92:ff:51:8e:f2:5a:da:3d:86: 89:a6:28:47:c3:c7:12:83:20:c7:db:bb:49:a9:f3:af:5b:f1: 09:72:5f:d0:ed:33:d6:4e:91:fa:36:6d:c3:9b:c1:99:a1:7c: 45:5c:18:50:91:db:d9:10:07:f1:9c:04:04:0d:78:54:31:66: da:07:34:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbzUjjAYtnEqtDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YTA2ZDk3NzQtNzExOC00M2FjLThhOTMtYjRkMjVmOGYzMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwQ8EKaOhA23JEPiKfXfnOVcR/Gt87o0QtLg ETlio7xKZ9DgdVMzsP9XQv7D9Gm6yuyxssLwbR8hMSLeoKZGWytQIJzmVWDmc9Uu 8l8geiwme76VjXgLa3eTrgBJnx5Mr/cQaDpeRd4Ar7e37TmFiEfcaVFS4JEx8nvK bZL93SgZmM+y5snIowu5xoAxH1XJloFTzXqHp//I+BpkfORnb4nn7eaOprq/IXP8 Kobjt7xVLxcRU2J8tFPrUZk+EwwCNasnUh77mPWxARWFwueZmV44KqVgf62R6jyo I7fxtUQeZrYTSuWFnb4y+4fluzKb5GTu/GSD32xSYUpnN+8FdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2ioTb1+/x5x87OmbtRj+Tyccx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzAxNDM3NDgtN2ZmYy0z ZGVmLTljN2ItMmVlZDQ5NTEzNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx0PirRcpFjhjhcbfW64L+W5z8UGgXB6Lor2h5NWdvKJtwfJ0VObt6g zfGkaiGygJNxuVqEr3Hn8OK89Veq/IWDs7M42cGU+hEbVZKyrDVishud5uyOhyaL rqqInlbjx4JFnF8S4pfupwVrynSPEepA44SzlMSBWvciJmQmN3zH7twGyMK/+IsM FgajX9SHNEqLaAoVRr32HB0jUsA6fKGinsHdiJIXPCWTwawOHaTePuo6uNWVEpxg wg0HKJL/UY7yWto9hommKEfDxxKDIMfbu0mp869b8QlyX9DtM9ZOkfo2bcObwZmh fEVcGFCR29kQB/GcBAQNeFQxZtoHNFU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:33 2025 by rpki-client