$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa File: 784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa (raw, json) Hash identifier: v64M0FmICfbduAwTRU+FAMn1OoAY0aLlkwCUE+5xK9I= Subject key identifier: F1:6A:36:42:63:29:0D:37:C9:6B:3E:B0:C1:2C:05:D6:2C:0A:92:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF2F58D6FC0D5DEA5EE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f2:f5:8d:6f:c0:d5:de:a5:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d469d362-8ee3-40e9-ad94-90d13a106a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:75:24:8a:b3:6c:5d:5f:33:0d:5d:18:08: a8:e9:a0:4a:69:fa:4a:33:83:01:2a:33:9a:8d:fe: 61:31:87:a5:e5:cd:43:d0:6e:bf:4f:06:9a:0a:e7: fd:1d:71:c5:b5:c9:20:ab:99:35:3a:68:e4:ae:75: a8:15:bc:f9:4f:4a:54:dd:a3:9a:53:92:2d:16:5b: 5c:3e:5f:a0:a2:ab:a9:50:bf:08:17:b6:77:f8:d2: 11:1e:72:55:74:9d:bd:0c:af:64:0c:0f:8e:8a:49: e6:66:08:32:8d:dd:d5:22:97:b0:ec:cf:68:ff:12: 8b:7f:f2:f0:b2:72:e5:80:a8:94:3a:7d:aa:09:cb: 15:7a:8c:84:9e:55:e8:c7:d7:fa:47:f3:2f:f6:cb: 32:a7:a0:39:cf:2c:c0:bf:cc:91:47:a0:b0:27:f7: 84:60:b0:7d:d9:73:d1:24:c8:b4:d1:04:0b:24:ad: 13:19:ec:54:1c:46:63:a8:40:94:8a:b2:59:f4:1b: 14:24:ce:53:19:f0:fa:0b:ee:d2:e6:5d:99:d8:d7: 59:22:85:82:f6:27:5e:9c:7e:b4:f8:c0:23:f0:4f: 77:a6:51:d7:fa:24:45:f3:8b:3a:eb:fa:5c:b8:e8: db:39:85:00:c8:1d:56:76:e6:41:2c:ef:13:e9:f3: 7f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6A:36:42:63:29:0D:37:C9:6B:3E:B0:C1:2C:05:D6:2C:0A:92:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:be:2c:22:ba:a1:a6:8f:85:22:ae:ec:43:0c:d9:42:b1:f5: 3e:24:9c:14:68:3a:96:d6:6a:c8:18:70:82:d2:b4:e9:5b:a9: 4c:3d:89:3c:59:79:b2:11:64:d7:c2:08:b2:ca:ac:ae:35:d3: 77:50:91:0f:0c:e0:bf:e5:20:5b:36:f9:a2:cb:5b:f3:39:a2: c1:21:44:92:c6:2e:ab:b5:25:75:b2:f0:4a:6b:c9:a1:89:72: 0a:1f:c0:8e:4b:37:0c:c5:71:2a:35:c1:d9:ae:3d:72:bb:75: 37:4d:31:0c:70:9a:b1:16:1c:d4:50:9c:ca:5a:94:43:79:ad: d9:58:a4:6c:0f:fe:c2:ee:40:ce:f9:a7:01:cc:1d:cf:3d:03: 8d:17:fb:be:27:6b:e6:eb:56:80:27:1c:6f:a2:44:86:4d:11: f4:5e:ac:00:d9:f4:30:97:8b:9b:0b:59:20:a1:93:8e:cc:b5: 60:42:dc:0b:c9:01:0c:2f:aa:3b:30:f5:75:3f:64:62:34:74: 1e:4a:e9:0b:30:ef:a6:b0:18:0c:f2:00:89:f9:0f:8b:47:d6: a6:12:a0:35:01:09:3f:46:f0:73:6d:2f:d8:57:69:b3:c3:f4: 37:a9:66:bb:b3:9d:50:7e:16:8b:28:2a:08:49:cf:71:e2:83: e1:2a:fe:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/L1jW/A1d6l7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDQ2OWQzNjItOGVlMy00MGU5LWFkOTQtOTBkMTNhMTA2YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9R1JIqzbF1fMw1dGAio6aBKafpKM4MBKjOa jf5hMYel5c1D0G6/TwaaCuf9HXHFtckgq5k1OmjkrnWoFbz5T0pU3aOaU5ItFltc Pl+goqupUL8IF7Z3+NIRHnJVdJ29DK9kDA+OiknmZggyjd3VIpew7M9o/xKLf/Lw snLlgKiUOn2qCcsVeoyEnlXox9f6R/Mv9ssyp6A5zyzAv8yRR6CwJ/eEYLB92XPR JMi00QQLJK0TGexUHEZjqECUirJZ9BsUJM5TGfD6C+7S5l2Z2NdZIoWC9idenH60 +MAj8E93plHX+iRF84s66/pcuOjbOYUAyB1WduZBLO8T6fN/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFqNkJjKQ03yWs+sMEsBdYsCpIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg0ZWNiNGQtOWE3ZS0z YTYyLTlkMjItZGRmZjA5ZjFkMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6+LCK6oaaPhSKu7EMM2UKx9T4knBRoOpbWasgYcILStOlbqUw9iTxZ ebIRZNfCCLLKrK4103dQkQ8M4L/lIFs2+aLLW/M5osEhRJLGLqu1JXWy8EpryaGJ cgofwI5LNwzFcSo1wdmuPXK7dTdNMQxwmrEWHNRQnMpalEN5rdlYpGwP/sLuQM75 pwHMHc89A40X+74na+brVoAnHG+iRIZNEfRerADZ9DCXi5sLWSChk47MtWBC3AvJ AQwvqjsw9XU/ZGI0dB5K6Qsw76awGAzyAIn5D4tH1qYSoDUBCT9G8HNtL9hXabPD 9DepZruznVB+FosoKghJz3Hig+Eq/lM= -----END CERTIFICATE-----Generated at Mon Apr 28 07:57:36 2025 by rpki-client