$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa File: 524df8c9-153b-3562-b90e-97cf8df41341.roa (raw, json) Hash identifier: +7JXCZSaYTUY1VNlNzG29Da4OLZNswOQD+L+/oV21T8= Subject key identifier: CD:49:F4:54:B8:0F:48:2A:AA:10:AF:E2:95:EF:3E:6D:84:87:BB:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA1224823DCD1AFE6857980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.225.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:22:48:23:dc:d1:af:e6:85:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=6085e6c4-be17-4bf8-b733-a5fac42502a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:d4:dc:d4:49:4d:89:fa:bd:da:16:c9:e7: a7:79:42:e9:14:27:15:41:b6:c1:57:26:fd:01:a4: f7:c8:cd:7f:74:94:b3:75:63:25:80:78:28:e0:b5: 92:cb:0c:5c:93:26:7e:4d:13:d8:be:3d:3f:95:95: de:ea:bd:5c:52:0b:ea:06:ee:2d:02:ce:a1:f7:36: d1:bf:54:4c:98:fe:9e:db:12:77:12:48:8f:96:d5: 3b:fb:c0:6c:72:3d:40:cc:c5:e4:a5:af:6a:d8:f6: ca:ab:a3:28:30:57:03:c8:6d:bd:d1:25:3a:20:0d: 30:72:74:99:d6:7c:01:b9:05:b5:95:6b:25:68:4a: 6c:6d:88:85:3e:ac:97:9f:19:b0:b9:9a:ac:46:be: 5c:cb:d8:e8:97:58:4c:78:32:6e:be:c3:48:0a:09: 2e:97:87:bb:47:73:45:70:25:24:15:7f:2b:bb:88: 77:21:4e:50:13:1f:66:34:69:da:36:47:83:b1:32: 39:5f:1a:da:92:70:5a:5b:81:f4:a5:27:32:95:58: 3d:49:4f:9a:15:b8:2e:fd:8b:cb:62:bf:bf:fb:f8: 9e:e2:de:01:1a:58:2c:33:1c:b2:80:5a:9c:2b:3d: a7:5e:f1:37:ad:dc:71:f0:c5:16:5f:32:eb:f7:1f: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:F4:54:B8:0F:48:2A:AA:10:AF:E2:95:EF:3E:6D:84:87:BB:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8d:d5:ea:05:d4:70:30:9e:19:78:c2:ed:7c:d4:8e:f9:f8: 2e:eb:72:1a:8c:a9:ac:8b:72:15:ab:54:88:be:4d:25:d9:31: d6:01:4f:83:b2:cd:3c:75:29:af:bc:25:e7:f1:68:40:df:22: 0d:7a:c9:52:ac:b0:1d:de:a2:22:63:f0:26:0d:ae:5d:86:25: 8b:a4:13:42:75:50:93:f9:ad:ab:3b:5c:d9:e8:d8:4a:fc:a4: f2:07:4e:07:35:e6:ec:d3:71:c8:d3:07:45:58:1f:6d:c2:67: 10:aa:84:9a:dd:16:61:78:c8:cb:8e:07:94:19:91:20:68:ab: b0:fc:b6:04:c4:d9:e6:42:64:cb:fc:d5:9c:4a:dc:f5:98:9f: 20:8d:2b:a4:0f:c5:94:d4:ca:c7:fd:6f:01:9f:09:0a:8d:80: 88:7c:e7:4f:69:c2:66:34:21:38:a7:1e:68:64:0a:cb:85:05: 76:a1:75:da:f2:a4:59:7a:e0:15:34:e7:7e:24:f9:4a:72:54: 6d:99:6c:8a:0d:50:f1:5e:ed:77:83:fd:c7:b8:6c:ad:a9:b3: 75:ba:86:26:bd:5c:82:cd:b9:ee:ad:0f:f4:c7:60:38:14:4f: 8c:01:8f:e5:b9:4d:01:89:11:38:f7:ca:8f:e8:79:31:db:8f: 8a:ca:ab:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSJII9zRr+aFeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NjA4NWU2YzQtYmUxNy00YmY4LWI3MzMtYTVmYWM0MjUwMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxnU3NRJTYn6vdoWyeeneULpFCcVQbbBVyb9 AaT3yM1/dJSzdWMlgHgo4LWSywxckyZ+TRPYvj0/lZXe6r1cUgvqBu4tAs6h9zbR v1RMmP6e2xJ3EkiPltU7+8Bscj1AzMXkpa9q2PbKq6MoMFcDyG290SU6IA0wcnSZ 1nwBuQW1lWslaEpsbYiFPqyXnxmwuZqsRr5cy9jol1hMeDJuvsNICgkul4e7R3NF cCUkFX8ru4h3IU5QEx9mNGnaNkeDsTI5XxraknBaW4H0pScylVg9SU+aFbgu/YvL Yr+/+/ie4t4BGlgsMxyygFqcKz2nXvE3rdxx8MUWXzLr9x92WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1J9FS4D0gqqhCv4pXvPm2Eh7u4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTI0ZGY4YzktMTUzYi0z NTYyLWI5MGUtOTdjZjhkZjQxMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGN1eoF1HAwnhl4wu181I75+C7rchqMqayLchWrVIi+TSXZMdYBT4Oy zTx1Ka+8JefxaEDfIg16yVKssB3eoiJj8CYNrl2GJYukE0J1UJP5ras7XNno2Er8 pPIHTgc15uzTccjTB0VYH23CZxCqhJrdFmF4yMuOB5QZkSBoq7D8tgTE2eZCZMv8 1ZxK3PWYnyCNK6QPxZTUysf9bwGfCQqNgIh8509pwmY0ITinHmhkCsuFBXahddry pFl64BU0534k+UpyVG2ZbIoNUPFe7XeD/ce4bK2ps3W6hia9XILNue6tD/THYDgU T4wBj+W5TQGJETj3yo/oeTHbj4rKq9U= -----END CERTIFICATE-----Generated at Sun Apr 27 05:45:27 2025 by rpki-client