$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c10c0-7295-3f23-a4b6-1b392dfff720.roa File: 313c10c0-7295-3f23-a4b6-1b392dfff720.roa (raw, json) Hash identifier: gY22IbK7Vyyt3nSWRD4FHCMGXJhaVKWwSlTq4vznznY= Subject key identifier: 63:16:F0:4E:02:19:97:7D:F8:30:9C:C5:3C:6E:13:4B:C7:3D:B2:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F4F81F80C198254E7130C180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c10c0-7295-3f23-a4b6-1b392dfff720.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.224.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:1f:80:c1:98:25:4e:71:30:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7abcc425-0d54-4aa2-a8b9-7b6d953b9c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:a7:c4:54:be:09:24:19:9b:4a:39:66:28: 32:00:5b:81:67:15:6c:a4:5a:81:1d:81:f8:b8:4a: a2:c5:b8:78:c2:95:f3:6d:64:f7:df:bb:63:3c:aa: 82:d8:90:16:48:de:e6:b6:4a:11:3a:e5:08:cd:e2: 00:f3:6e:bb:84:24:f7:86:de:20:44:7e:b4:af:8c: 84:1c:ee:73:19:54:76:7f:b5:db:1c:9a:87:3a:eb: 0a:c9:6b:6a:f3:a3:46:d5:3f:89:56:cc:80:2e:dd: d6:2e:70:dd:90:99:db:d5:96:29:4c:df:63:7f:d4: e5:81:d3:23:8a:14:c3:fd:f3:ed:8b:71:e5:f6:6f: 6b:60:08:83:af:9c:b7:62:58:8c:5a:e6:c2:cb:ad: 7b:0b:bd:51:a7:72:a3:b3:ad:5a:0b:c3:e8:84:73: 6d:5f:e3:72:1d:eb:25:3a:e4:b1:40:a6:da:11:06: 66:ad:43:20:c0:64:cd:cc:21:24:17:8f:81:8f:61: 6f:f7:18:43:4f:5a:26:be:53:81:5b:48:be:04:99: 46:fc:65:36:f1:b5:26:d3:0e:18:87:27:c5:9a:84: 60:44:de:d3:d2:7d:dc:45:d1:06:7f:25:4d:06:ef: 01:52:df:5a:b9:b8:c8:d6:b8:42:07:26:e5:73:b4: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:16:F0:4E:02:19:97:7D:F8:30:9C:C5:3C:6E:13:4B:C7:3D:B2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c10c0-7295-3f23-a4b6-1b392dfff720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:aa:32:5b:9c:d4:63:06:a6:03:70:28:00:0d:a3:1f:6d:ad: 56:6a:2d:5b:e3:97:ac:17:9f:ef:be:97:cd:09:96:f3:30:80: 96:30:8d:a7:c4:07:1b:93:64:ac:c9:b6:6d:6d:87:4f:58:a9: 11:d7:e7:0b:c0:41:60:bd:25:31:5c:4e:95:15:2f:b6:11:59: b8:8a:88:33:27:51:15:48:09:a0:22:5e:b6:0e:16:b0:fd:68: a9:31:af:f6:de:a8:da:c5:58:3d:95:4e:9d:99:40:88:2d:15: 3c:29:8a:21:27:4e:12:22:50:80:b8:2f:52:87:7c:9c:18:4c: 88:62:bd:b7:a4:6c:ed:56:50:1c:01:ef:e0:82:99:ca:be:fe: 5b:bd:fa:dd:9e:d5:18:d0:de:15:bc:fb:82:ef:5e:b6:27:22: e8:01:31:65:36:72:b4:48:4d:02:37:dd:1d:13:5b:46:21:79: ee:15:65:7f:5e:3f:e2:0e:24:47:29:4b:22:45:da:5b:3e:14: cd:5a:ae:d6:ee:a2:84:3b:10:6d:2d:93:25:19:de:09:76:30: 23:c2:9c:c0:74:74:29:8f:d1:1b:4b:38:89:18:15:b7:16:c9: c7:d5:77:c4:e6:2b:80:aa:00:ff:75:63:e9:44:4b:76:67:11: ad:90:a9:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+B+AwZglTnEwwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk N2FiY2M0MjUtMGQ1NC00YWEyLWE4YjktN2I2ZDk1M2I5YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsunxFS+CSQZm0o5ZigyAFuBZxVspFqBHYH4 uEqixbh4wpXzbWT337tjPKqC2JAWSN7mtkoROuUIzeIA8267hCT3ht4gRH60r4yE HO5zGVR2f7XbHJqHOusKyWtq86NG1T+JVsyALt3WLnDdkJnb1ZYpTN9jf9TlgdMj ihTD/fPti3Hl9m9rYAiDr5y3YliMWubCy617C71Rp3Kjs61aC8PohHNtX+NyHesl OuSxQKbaEQZmrUMgwGTNzCEkF4+Bj2Fv9xhDT1omvlOBW0i+BJlG/GU28bUm0w4Y hyfFmoRgRN7T0n3cRdEGfyVNBu8BUt9aubjI1rhCByblc7QuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMW8E4CGZd9+DCcxTxuE0vHPbJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEzYzEwYzAtNzI5NS0z ZjIzLWE0YjYtMWIzOTJkZmZmNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqqMluc1GMGpgNwKAANox9trVZqLVvjl6wXn+++l80JlvMwgJYwjafE BxuTZKzJtm1th09YqRHX5wvAQWC9JTFcTpUVL7YRWbiKiDMnURVICaAiXrYOFrD9 aKkxr/beqNrFWD2VTp2ZQIgtFTwpiiEnThIiUIC4L1KHfJwYTIhivbekbO1WUBwB 7+CCmcq+/lu9+t2e1RjQ3hW8+4LvXrYnIugBMWU2crRITQI33R0TW0Yhee4VZX9e P+IOJEcpSyJF2ls+FM1artbuooQ7EG0tkyUZ3gl2MCPCnMB0dCmP0RtLOIkYFbcW ycfVd8TmK4CqAP91Y+lES3ZnEa2QqUI= -----END CERTIFICATE-----Generated at Sun Apr 27 06:32:47 2025 by rpki-client