$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c541072-2e68-3523-810a-470a090b3979.roa File: 3c541072-2e68-3523-810a-470a090b3979.roa (raw, json) Hash identifier: LFti/tHUO0usew4kY1CUpzGwv+xH/Vthh5j7hg2Uems= Subject key identifier: 57:0F:35:67:7F:20:24:CF:11:C1:C9:6B:E5:1F:1B:4A:79:61:D7:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF479AED9207CDFB12A1C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c541072-2e68-3523-810a-470a090b3979.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 63949 IP address blocks: 172.232.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:79:ae:d9:20:7c:df:b1:2a:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=0af8dc6d-430f-4220-b2e6-05ce03dc41ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:61:41:cd:81:70:b4:a7:81:28:7c:bf:b3:e3: 5c:fc:ab:ff:c8:d9:32:7c:8b:a8:7b:bf:ee:cd:18: a2:e9:c2:1b:8e:56:15:b0:41:bc:48:cc:2c:88:fc: 83:4c:fd:60:da:62:fc:8c:fe:3b:09:0f:38:89:f8: db:cc:1c:0f:f6:5f:84:b7:fa:a8:e6:58:27:41:10: ed:5c:8d:e8:a1:3b:5a:ff:9e:ae:05:8f:ba:de:ea: fa:1c:61:bc:ad:49:97:9a:66:80:e6:d9:cc:85:08: be:cf:2e:97:6d:2a:1a:30:e7:57:7a:e6:2e:b4:2f: 59:59:24:fc:f3:c2:d7:ad:40:3c:a9:70:58:7b:d4: f1:81:11:58:e0:00:71:04:3f:7e:1c:b6:53:e9:8b: 14:b8:ee:f8:0b:da:a5:29:17:87:ca:d8:f8:8c:44: f4:a0:9e:48:c1:a1:5a:2d:9c:a2:0a:49:65:94:bf: 27:35:49:65:99:c2:7f:52:9f:d0:fb:75:04:2a:df: d9:9d:6e:22:2d:fa:21:5a:39:a3:f2:6b:9f:00:5c: 04:08:81:d4:d6:4c:cd:b7:b0:d5:52:62:1b:b6:47: 07:0f:50:c2:47:2d:ea:ce:00:38:c0:8b:de:ab:60: 6c:4e:f3:14:80:31:ed:22:00:7e:5a:ad:75:f5:15: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:35:67:7F:20:24:CF:11:C1:C9:6B:E5:1F:1B:4A:79:61:D7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c541072-2e68-3523-810a-470a090b3979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.232.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8d:dc:96:34:b0:63:55:d2:04:23:63:6b:f8:4f:39:7a:d6: ae:9d:af:fc:d8:ea:ba:b9:7c:67:3a:de:b1:56:30:08:80:ca: f6:12:df:ed:f3:25:8d:68:52:0f:67:c4:d6:a1:6b:12:47:60: 8b:6c:fa:e9:fc:29:60:7d:31:f7:1d:08:93:53:4d:0f:18:e2: 4a:4e:86:a5:b5:06:88:17:d9:c0:49:53:26:f8:8b:0e:a9:d5: b1:89:9e:f7:07:65:72:86:d3:4a:7c:77:71:98:cf:d9:ee:47: 14:89:d0:54:f4:89:22:c1:18:c3:75:0e:42:b4:30:65:0f:13: 90:63:c6:c9:de:46:cd:df:9a:c6:34:ff:30:49:59:02:88:4a: 45:30:52:31:18:03:0c:13:c8:02:35:75:33:eb:e7:11:fd:2f: 6e:46:6c:9f:d5:3b:dc:64:07:30:23:ea:a1:d0:aa:38:41:91: 0d:31:ff:c7:68:e1:69:e2:44:19:5c:7d:aa:e7:22:50:ab:83: 56:30:08:d1:63:fd:7e:1b:85:0a:ae:9d:b6:f1:b0:2a:bb:2f: df:9a:bf:62:1f:c2:6c:9a:ae:8d:63:41:c0:21:31:b3:1b:22: 4a:2b:9d:39:cb:67:e6:c6:93:7b:0b:4f:9b:0d:35:bf:9b:ea: b9:4f:36:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Hmu2SB837EqHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MGFmOGRjNmQtNDMwZi00MjIwLWIyZTYtMDVjZTAzZGM0MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2FBzYFwtKeBKHy/s+Nc/Kv/yNkyfIuoe7/u zRii6cIbjlYVsEG8SMwsiPyDTP1g2mL8jP47CQ84ifjbzBwP9l+Et/qo5lgnQRDt XI3ooTta/56uBY+63ur6HGG8rUmXmmaA5tnMhQi+zy6XbSoaMOdXeuYutC9ZWST8 88LXrUA8qXBYe9TxgRFY4ABxBD9+HLZT6YsUuO74C9qlKReHytj4jET0oJ5IwaFa LZyiCklllL8nNUllmcJ/Up/Q+3UEKt/ZnW4iLfohWjmj8mufAFwECIHU1kzNt7DV UmIbtkcHD1DCRy3qzgA4wIveq2BsTvMUgDHtIgB+Wq119RWALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcPNWd/ICTPEcHJa+UfG0p5YdcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M1NDEwNzItMmU2OC0z NTIzLTgxMGEtNDcwYTA5MGIzOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWN3JY0sGNV0gQjY2v4Tzl61q6dr/zY6rq5fGc63rFWMAiAyvYS3+3z JY1oUg9nxNahaxJHYIts+un8KWB9MfcdCJNTTQ8Y4kpOhqW1BogX2cBJUyb4iw6p 1bGJnvcHZXKG00p8d3GYz9nuRxSJ0FT0iSLBGMN1DkK0MGUPE5BjxsneRs3fmsY0 /zBJWQKISkUwUjEYAwwTyAI1dTPr5xH9L25GbJ/VO9xkBzAj6qHQqjhBkQ0x/8do 4WniRBlcfarnIlCrg1YwCNFj/X4bhQqunbbxsCq7L9+av2Ifwmyaro1jQcAhMbMb IkornTnLZ+bGk3sLT5sNNb+b6rlPNhA= -----END CERTIFICATE-----Generated at Sun Apr 27 03:49:46 2025 by rpki-client