$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0de5f6-acb2-3523-be5c-014176085ef9.roa File: 8b0de5f6-acb2-3523-be5c-014176085ef9.roa (raw, json) Hash identifier: v1AafOzplRD0DWE1epnvxtLmeG/fRoiP2QkxRM2TQns= Subject key identifier: 35:09:3E:FD:45:B0:4C:0F:FB:6B:C4:53:F9:3C:03:AB:51:E7:84:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584910E1850A759751032331DB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0de5f6-acb2-3523-be5c-014176085ef9.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 20940 IP address blocks: 173.222.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:85:0a:75:97:51:03:23:31:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=c2b79752-b28c-495f-a0eb-2811fe6d819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:f6:52:a0:cc:e9:24:75:cf:e5:d4:0e:90: 15:c8:3d:7e:33:82:7a:da:41:65:ee:58:cd:d3:a4: ab:33:50:06:21:65:7c:94:9e:e2:56:3a:c9:45:c9: 0b:d2:10:40:5f:2b:6b:72:c7:00:f4:20:b0:45:fd: fe:73:a4:01:fa:88:f2:24:86:a5:c9:03:6c:48:ee: 3f:7e:d6:d3:62:86:d3:4c:e3:8b:6c:66:9f:00:6d: d5:28:f6:b6:31:a7:2c:b1:c2:b5:c0:b0:48:49:16: 94:08:16:c4:b1:7a:7a:0e:8a:b7:a9:e0:f2:19:62: d2:44:a3:fb:46:29:aa:7f:41:ab:28:c0:ea:9b:df: a9:04:60:b5:40:a8:0a:21:cd:cc:c0:e4:6c:79:ac: 8f:b6:21:f4:c5:49:e5:55:9a:6a:0d:84:0b:0e:e9: 6c:17:40:c5:fc:af:dc:62:85:1d:8a:54:d1:ac:0e: 8c:f6:40:b7:b6:d8:43:7d:a2:ca:3e:e6:f0:1e:b7: 00:94:e6:40:3e:3c:9f:66:13:68:27:0d:81:78:17: 86:ca:39:4d:32:3c:6a:3f:4c:9e:7a:cd:39:93:ca: cf:d8:70:e9:3f:37:bb:c3:6d:d9:f6:96:d2:bd:6a: 10:17:6a:b1:46:ab:28:83:78:a6:32:2d:22:df:94: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:09:3E:FD:45:B0:4C:0F:FB:6B:C4:53:F9:3C:03:AB:51:E7:84:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0de5f6-acb2-3523-be5c-014176085ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:9f:ce:fa:d4:f5:4c:2c:bc:55:9a:09:89:0d:9e:29:02:bb: f4:f4:4e:e8:e6:ac:c3:4e:07:2b:15:eb:42:92:92:72:03:92: b6:3e:4a:bf:b4:00:04:48:52:6b:bb:68:cd:86:42:b5:97:ac: ab:dc:f4:3c:09:ff:15:60:d7:ed:04:41:2b:ad:fe:fa:e1:f1: 84:20:2e:d8:60:14:35:1a:55:e8:c5:da:10:3b:0f:36:ad:47: 2a:67:58:ca:f8:ed:fe:34:2a:09:e1:4c:09:0a:f6:c0:dc:f4: 0b:6a:92:52:93:60:e2:27:9b:1d:61:24:1e:94:0f:79:c9:50: 13:1b:bb:1f:e4:69:07:3d:5c:6a:cb:e0:86:d3:3d:39:6c:0c: 95:6a:82:1f:4c:69:8f:73:f0:d5:83:10:5e:c7:43:b0:d4:26: a6:42:89:d8:84:e9:7c:9c:5e:06:33:57:30:fc:24:5a:ee:74: f2:10:4c:dd:2f:0c:e7:85:51:ba:98:b3:19:1b:ec:c9:a1:5f: 7b:d5:59:f1:f7:46:0c:9a:e7:52:fd:d5:a9:45:2d:57:74:c3: a1:64:b9:c8:7d:08:de:11:c0:27:04:fb:9b:d7:39:c5:32:06: 62:14:fa:b3:61:d7:f3:a8:bb:2b:18:7d:1a:e3:54:b5:7a:a3: 0b:f3:1f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4YUKdZdRAyMx24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk YzJiNzk3NTItYjI4Yy00OTVmLWEwZWItMjgxMWZlNmQ4MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCT2UqDM6SR1z+XUDpAVyD1+M4J62kFl7ljN 06SrM1AGIWV8lJ7iVjrJRckL0hBAXytrcscA9CCwRf3+c6QB+ojyJIalyQNsSO4/ ftbTYobTTOOLbGafAG3VKPa2MacsscK1wLBISRaUCBbEsXp6Doq3qeDyGWLSRKP7 Rimqf0GrKMDqm9+pBGC1QKgKIc3MwORseayPtiH0xUnlVZpqDYQLDulsF0DF/K/c YoUdilTRrA6M9kC3tthDfaLKPubwHrcAlOZAPjyfZhNoJw2BeBeGyjlNMjxqP0ye es05k8rP2HDpPze7w23Z9pbSvWoQF2qxRqsog3imMi0i35RnIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUJPv1FsEwP+2vEU/k8A6tR54S0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIwZGU1ZjYtYWNiMi0z NTIzLWJlNWMtMDE0MTc2MDg1ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWfzvrU9UwsvFWaCYkNnikCu/T0TujmrMNOBysV60KSknIDkrY+Sr+0 AARIUmu7aM2GQrWXrKvc9DwJ/xVg1+0EQSut/vrh8YQgLthgFDUaVejF2hA7Dzat RypnWMr47f40KgnhTAkK9sDc9AtqklKTYOInmx1hJB6UD3nJUBMbux/kaQc9XGrL 4IbTPTlsDJVqgh9MaY9z8NWDEF7HQ7DUJqZCidiE6XycXgYzVzD8JFrudPIQTN0v DOeFUbqYsxkb7MmhX3vVWfH3Rgya51L91alFLVd0w6Fkuch9CN4RwCcE+5vXOcUy BmIU+rNh1/OouysYfRrjVLV6owvzHwA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:55 2025 by rpki-client