$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa File: 5f552b7e-d0da-3542-8e30-9e187384c23c.roa (raw, json) Hash identifier: yD5wMXthj1vQ+B8WV2E/XObZ+k8ccA5Bfqz0wuwSrYM= Subject key identifier: E5:71:E3:C0:DB:25:73:98:21:15:77:08:A9:D5:16:06:23:A7:2E:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BEF2CCE8125CF57830C20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ef:2c:ce:81:25:cf:57:83:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=f544920c-c42d-42ff-9605-78dfac5bf9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:87:9d:59:54:56:f3:78:bd:14:71:00:ec: fb:4a:18:e6:e5:0e:22:a5:66:09:59:03:a4:df:3e: b5:c4:4c:94:69:48:9c:b8:26:8c:15:e4:8d:bb:67: c4:7c:42:2f:c4:f2:7d:10:1a:eb:30:55:22:38:97: 60:46:14:f3:2d:b3:46:2a:ea:98:12:c9:25:62:cc: 45:36:85:ba:b7:9c:08:66:ef:94:1a:4f:6b:9d:2a: 4a:11:58:3b:e4:31:e4:52:d1:e0:b1:12:b2:bf:6e: 91:07:19:65:51:c1:8f:5d:45:45:da:7c:d6:56:90: 51:4c:82:cc:88:5d:a1:e7:48:0a:de:e3:8b:69:fd: 9f:b3:12:b8:c7:fc:bc:33:76:8b:4e:71:27:c7:68: 2b:41:e1:29:a3:de:13:90:85:28:e5:de:96:c9:02: d9:88:ef:93:c8:00:d3:b8:88:11:4f:d9:94:f9:3f: f4:04:b1:59:5a:78:e3:8c:04:63:28:69:7d:67:24: ed:1e:02:bc:37:f7:8e:aa:8e:cd:1d:aa:c5:51:a8: 7f:a5:d7:66:86:8a:9b:86:2a:5c:35:1b:1f:85:e5: e9:4c:e0:6b:2c:6e:2e:fe:6b:67:cb:03:15:06:9c: 9e:17:9c:df:12:b3:9f:8e:f0:6b:a9:66:bb:9c:c7: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:E3:C0:DB:25:73:98:21:15:77:08:A9:D5:16:06:23:A7:2E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f0:7d:dd:3a:9b:77:bb:5c:fc:d8:01:4f:4c:81:07:8c:ae: 4e:c1:ef:f4:9b:50:b3:75:f9:8e:1b:85:48:72:88:f0:ac:0e: ca:5f:61:2f:3a:c2:93:7e:d9:e2:ff:7c:f1:a7:d2:b1:8a:a3: 83:8b:76:e5:96:e8:ea:eb:dd:10:74:53:cb:08:9d:37:bc:7a: ff:df:b2:98:56:e2:17:bb:25:b5:56:5c:44:c6:d2:5d:5f:06: 8b:f6:45:bc:9e:e8:03:eb:43:f6:3b:a0:95:db:d3:d3:c2:61: bd:45:83:b3:4e:b3:3e:f9:d8:5b:42:9e:bb:f5:d7:85:5a:e2: 02:7f:de:6b:e8:0e:2c:84:26:a7:b7:56:8b:42:32:16:40:a8: 17:16:c2:88:37:dd:4d:59:98:76:b8:26:e5:6d:65:14:ad:29: 5a:07:35:ac:66:d0:82:c6:46:ae:8b:ea:30:a9:fd:26:ef:1b: 31:74:a4:f4:97:69:bb:91:b3:e4:e4:41:a0:d5:be:ae:de:4a: 8a:50:43:18:a6:26:bc:2e:8f:ae:0a:0d:30:e6:cd:92:0e:f7: 56:2d:fc:8b:91:84:6f:30:3d:26:7f:8c:9e:e1:71:62:3b:e4: a9:de:7f:30:6f:70:46:76:e4:87:97:58:91:21:17:9a:34:ff: 7c:05:db:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+8szoElz1eDDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZjU0NDkyMGMtYzQyZC00MmZmLTk2MDUtNzhkZmFjNWJmOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTuHnVlUVvN4vRRxAOz7Shjm5Q4ipWYJWQOk 3z61xEyUaUicuCaMFeSNu2fEfEIvxPJ9EBrrMFUiOJdgRhTzLbNGKuqYEsklYsxF NoW6t5wIZu+UGk9rnSpKEVg75DHkUtHgsRKyv26RBxllUcGPXUVF2nzWVpBRTILM iF2h50gK3uOLaf2fsxK4x/y8M3aLTnEnx2grQeEpo94TkIUo5d6WyQLZiO+TyADT uIgRT9mU+T/0BLFZWnjjjARjKGl9ZyTtHgK8N/eOqo7NHarFUah/pddmhoqbhipc NRsfheXpTOBrLG4u/mtnywMVBpyeF5zfErOfjvBrqWa7nMfaEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVx48DbJXOYIRV3CKnVFgYjpy4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY1NTJiN2UtZDBkYS0z NTQyLThlMzAtOWUxODczODRjMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/wfd06m3e7XPzYAU9MgQeMrk7B7/SbULN1+Y4bhUhyiPCsDspfYS86 wpN+2eL/fPGn0rGKo4OLduWW6Orr3RB0U8sInTe8ev/fsphW4he7JbVWXETG0l1f Bov2Rbye6APrQ/Y7oJXb09PCYb1Fg7NOsz752FtCnrv114Va4gJ/3mvoDiyEJqe3 VotCMhZAqBcWwog33U1ZmHa4JuVtZRStKVoHNaxm0ILGRq6L6jCp/SbvGzF0pPSX abuRs+TkQaDVvq7eSopQQximJrwuj64KDTDmzZIO91Yt/IuRhG8wPSZ/jJ7hcWI7 5KnefzBvcEZ25IeXWJEhF5o0/3wF2yY= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:15 2025 by rpki-client