$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77d04699-fb8c-301a-a976-23c1eb398425.roa File: 77d04699-fb8c-301a-a976-23c1eb398425.roa (raw, json) Hash identifier: iVfd25lbAVvXjffs+jGIg4JfQZSt7htc9T6GugjjA/I= Subject key identifier: 6E:90:F3:82:47:C2:66:86:14:D5:69:29:AF:08:2D:57:6F:E9:08:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E2D21ED187F8A85027C3E780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77d04699-fb8c-301a-a976-23c1eb398425.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 36183 IP address blocks: 172.225.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:1e:d1:87:f8:a8:50:27:c3:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=dcc304be-6362-44f1-9037-6a7dfda764f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:05:94:8c:81:55:02:49:fa:52:b9:b6:02: 98:d3:a8:07:a6:b7:76:69:a9:62:9e:4b:d5:fe:dd: 45:2f:96:4b:43:d5:52:33:d2:3f:fc:e0:48:fc:af: 88:0d:c1:d4:f4:df:80:57:8c:68:ed:66:39:da:1b: 21:95:98:95:a3:0d:bd:98:f2:50:0c:db:d9:c8:3c: 99:56:8a:31:d1:ae:ad:1d:47:da:2c:8c:5c:5b:f6: 34:f6:b7:51:1f:91:8c:46:e4:89:12:53:83:4e:3c: bd:d6:71:f9:b0:d6:9a:9b:31:29:b9:4f:76:24:59: e6:4c:3e:cc:3c:c7:f1:8a:76:f4:44:ae:a4:89:8d: cc:c4:85:60:ae:7c:6e:d6:64:4e:a0:0a:77:e6:82: 33:cc:a9:a1:48:b2:ad:c9:14:f4:34:66:b4:a1:fc: 7e:c8:44:66:ec:4d:de:5b:c5:76:06:b2:15:e6:2d: 78:03:63:c1:7f:4b:16:db:4f:d8:3a:af:43:94:55: bc:61:52:7f:ce:1f:38:e9:b3:d1:a3:74:02:ff:47: 77:e0:c2:34:60:9f:b8:f9:63:18:25:bb:fe:26:30: 9d:5f:f8:6f:eb:13:1d:5d:63:91:89:d5:e0:64:82: 56:2c:a5:9b:83:99:bf:c2:bb:2d:7e:73:7d:aa:00: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:90:F3:82:47:C2:66:86:14:D5:69:29:AF:08:2D:57:6F:E9:08:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77d04699-fb8c-301a-a976-23c1eb398425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:33:a1:a9:99:88:2e:2d:ef:60:38:0d:55:c5:c5:86:5d:1f: 27:f2:c9:fe:21:1b:19:fa:dd:ba:7e:36:a2:e0:0b:aa:14:6d: ab:54:b5:e4:3f:4b:f4:8d:e3:33:ae:1e:b3:65:94:32:87:3d: 8c:87:eb:fd:15:22:a2:3d:eb:d9:10:e8:f5:22:e0:13:a4:6d: 7c:1a:aa:47:f4:ce:e4:f8:b5:e5:e0:40:da:ee:55:26:ad:5a: 73:8e:16:f0:9f:a5:b2:b4:a5:4e:8b:0d:a5:a2:ca:3e:dc:32: df:e8:43:8c:42:74:6c:65:ef:6a:5e:f0:c2:45:ae:be:6e:01: 59:3f:c6:2a:9f:1a:8d:c1:01:f4:13:f9:5f:bf:fe:ea:23:7f: 20:d9:1d:83:74:5d:4f:69:40:e1:55:48:a3:a3:1f:f8:e4:31: b4:de:16:dc:57:6c:76:f0:f0:7d:48:87:c7:98:55:07:e4:4f: bb:6a:61:79:17:51:43:90:52:97:90:d2:c8:42:d4:4f:73:eb: 41:93:90:8f:78:07:98:cb:af:6e:97:9b:de:c8:81:6e:4e:65: 53:f8:29:9d:d8:d3:a2:ba:56:39:50:36:06:64:78:1a:e6:3b: a3:fa:ac:1a:42:a4:af:e5:c2:3c:e4:73:43:d0:04:b7:44:2a: f0:17:3e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0h7Rh/ioUCfD54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZGNjMzA0YmUtNjM2Mi00NGYxLTkwMzctNmE3ZGZkYTc2NGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPQFlIyBVQJJ+lK5tgKY06gHprd2aalinkvV /t1FL5ZLQ9VSM9I//OBI/K+IDcHU9N+AV4xo7WY52hshlZiVow29mPJQDNvZyDyZ Voox0a6tHUfaLIxcW/Y09rdRH5GMRuSJElODTjy91nH5sNaamzEpuU92JFnmTD7M PMfxinb0RK6kiY3MxIVgrnxu1mROoAp35oIzzKmhSLKtyRT0NGa0ofx+yERm7E3e W8V2BrIV5i14A2PBf0sW20/YOq9DlFW8YVJ/zh846bPRo3QC/0d34MI0YJ+4+WMY Jbv+JjCdX/hv6xMdXWORidXgZIJWLKWbg5m/wrstfnN9qgCDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Q84JHwmaGFNVpKa8ILVdv6QjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzdkMDQ2OTktZmI4Yy0z MDFhLWE5NzYtMjNjMWViMzk4NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEzoamZiC4t72A4DVXFxYZdHyfyyf4hGxn63bp+NqLgC6oUbatUteQ/ S/SN4zOuHrNllDKHPYyH6/0VIqI969kQ6PUi4BOkbXwaqkf0zuT4teXgQNruVSat WnOOFvCfpbK0pU6LDaWiyj7cMt/oQ4xCdGxl72pe8MJFrr5uAVk/xiqfGo3BAfQT +V+//uojfyDZHYN0XU9pQOFVSKOjH/jkMbTeFtxXbHbw8H1Ih8eYVQfkT7tqYXkX UUOQUpeQ0shC1E9z60GTkI94B5jLr26Xm97IgW5OZVP4KZ3Y06K6VjlQNgZkeBrm O6P6rBpCpK/lwjzkc0PQBLdEKvAXPpw= -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:45 2025 by rpki-client