$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa File: 4d57e82b-04de-3948-8a71-e541289a09a9.roa (raw, json) Hash identifier: xRrW9yqRGFU/TV6jLfq4XuW00H/BBW1BzCzS5W9Qx8Y= Subject key identifier: 74:31:34:BA:36:A6:7E:01:DB:1D:1B:0D:65:F8:E7:30:0C:84:17:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF617408BE58DF0C3BFDBDF4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:74:08:be:58:df:0c:3b:fd:bd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=33dc0735-615e-4989-905e-b9d8f512751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:77:b1:96:01:f5:24:a0:d0:ce:56:a1:a9: 51:3e:ec:4b:fd:47:6a:dc:c9:bf:1e:f4:de:70:83: 1d:7f:1a:dd:68:2c:a8:94:7b:ba:f2:37:5e:e8:79: b2:ab:ba:79:5f:df:a8:34:df:86:4b:7c:3f:01:68: fe:ac:5c:26:55:d5:17:4a:a9:64:60:78:10:38:3c: 84:95:e5:bf:c2:1b:84:41:6c:4b:cc:1c:f2:2e:56: e1:e2:11:c2:af:11:15:67:bf:4c:d6:b6:d9:03:d4: 08:b3:20:3c:c3:c9:52:f8:77:dd:98:09:b8:f8:f4: d7:8d:8e:c6:3c:f8:e0:7c:84:f2:b9:0d:39:3e:65: c9:d9:d8:82:f3:8a:77:bb:28:5b:f2:7d:1d:d3:c4: 92:eb:fb:4b:7c:0d:8e:07:5a:c7:cc:d6:c4:97:5a: 7a:c5:f4:38:2d:7c:5a:13:81:ff:75:f1:d4:9a:6c: 98:d5:29:27:e7:fb:e0:21:c9:cc:97:67:94:e7:f9: 55:3d:a0:14:23:66:65:c5:e5:75:56:47:ce:e2:f3: 1c:f7:31:4a:22:73:da:28:fa:cf:7d:52:5e:b2:84: ba:d0:6c:19:28:09:22:fa:46:18:f9:d9:f7:1e:5a: fb:2a:bd:4b:a8:d0:ba:96:09:15:9f:68:c6:37:c2: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:34:BA:36:A6:7E:01:DB:1D:1B:0D:65:F8:E7:30:0C:84:17:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:70:4c:22:95:1a:59:65:c7:95:d3:d4:56:f3:7c:1e:09:1a: 32:ef:c1:b8:ec:26:d0:e6:62:5c:38:50:da:6d:40:f6:6d:18: 1b:bf:2d:6e:76:5b:a6:72:b6:e8:8f:c8:01:51:ea:b9:1e:a3: 4f:07:45:6a:82:e6:a2:d7:ca:be:cf:88:85:b7:fb:b7:ad:bf: 57:e1:ab:6b:39:a0:1e:52:e1:67:da:26:42:ea:a4:97:d8:35: 2f:d1:54:bf:68:fc:29:56:98:a6:ff:94:ee:43:38:95:fc:3b: b4:a7:52:33:64:85:0a:92:87:0a:ff:fd:d9:76:6c:63:da:15: 25:66:b0:40:20:45:21:75:86:4c:77:a8:8e:6d:57:33:a1:3b: c7:99:3a:4c:fc:8c:87:f1:bb:61:fe:17:07:12:7d:79:2a:62: d4:cc:71:f1:a6:ec:99:30:6b:4b:0e:40:43:87:d9:83:6c:2f: cd:e2:b6:69:22:c9:78:b2:26:fb:21:86:05:34:ca:6b:2f:2e: 7d:bd:1c:92:30:93:37:85:2e:11:4a:32:00:ba:dc:2c:1d:ae: 04:31:10:ae:14:55:32:f2:c4:b7:6e:85:9a:f8:db:ee:17:5b: 44:5b:51:4a:03:09:96:44:f2:84:2a:5e:48:9c:8b:ae:44:af: 2f:9e:51:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXQIvljfDDv9vfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MzNkYzA3MzUtNjE1ZS00OTg5LTkwNWUtYjlkOGY1MTI3NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNt3sZYB9SSg0M5WoalRPuxL/Udq3Mm/HvTe cIMdfxrdaCyolHu68jde6Hmyq7p5X9+oNN+GS3w/AWj+rFwmVdUXSqlkYHgQODyE leW/whuEQWxLzBzyLlbh4hHCrxEVZ79M1rbZA9QIsyA8w8lS+HfdmAm4+PTXjY7G PPjgfITyuQ05PmXJ2diC84p3uyhb8n0d08SS6/tLfA2OB1rHzNbEl1p6xfQ4LXxa E4H/dfHUmmyY1Skn5/vgIcnMl2eU5/lVPaAUI2ZlxeV1VkfO4vMc9zFKInPaKPrP fVJesoS60GwZKAki+kYY+dn3Hlr7Kr1LqNC6lgkVn2jGN8JY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQxNLo2pn4B2x0bDWX45zAMhBelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQ1N2U4MmItMDRkZS0z OTQ4LThhNzEtZTU0MTI4OWEwOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRwTCKVGlllx5XT1FbzfB4JGjLvwbjsJtDmYlw4UNptQPZtGBu/LW52 W6ZytuiPyAFR6rkeo08HRWqC5qLXyr7PiIW3+7etv1fhq2s5oB5S4WfaJkLqpJfY NS/RVL9o/ClWmKb/lO5DOJX8O7SnUjNkhQqShwr//dl2bGPaFSVmsEAgRSF1hkx3 qI5tVzOhO8eZOkz8jIfxu2H+FwcSfXkqYtTMcfGm7Jkwa0sOQEOH2YNsL83itmki yXiyJvshhgU0ymsvLn29HJIwkzeFLhFKMgC63CwdrgQxEK4UVTLyxLduhZr42+4X W0RbUUoDCZZE8oQqXkici65Ery+eUSc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:26 2025 by rpki-client