$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa File: b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa (raw, json) Hash identifier: Bxj9hE9WnnjGrK392yBflCqhJiPrlxOFEiwsP5TLGaI= Subject key identifier: 9E:40:85:98:F9:00:3C:18:57:A8:07:0F:29:17:47:72:A3:79:9B:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BF2BDBD57CEBB3DB8C480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f2:bd:bd:57:ce:bb:3d:b8:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4e6210bc-fa39-415f-9ee7-b358df92d0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:77:dc:ee:65:24:49:a3:ea:7b:9f:b4:17: c7:9b:e9:55:52:64:f3:87:1e:ad:36:d0:65:a2:94: c2:00:64:22:be:59:37:4b:29:59:56:20:8a:43:48: 91:d3:8a:29:64:65:1c:68:a1:6c:92:5a:48:d4:27: 7d:ea:f0:e7:a4:4a:26:44:6b:0c:4a:82:20:cd:cf: 11:83:56:8d:60:fd:0f:85:09:e3:a2:d6:3c:0b:18: 8e:e8:51:8f:17:06:ab:c4:93:4c:be:41:89:1a:98: e3:3d:ec:10:c4:45:61:90:33:bc:ea:20:0b:f3:6f: 4b:46:7a:7a:ec:c4:41:5e:bf:58:37:30:4e:0e:c5: 14:93:4b:02:4b:ba:a0:86:73:87:a1:7a:99:96:82: 6d:78:00:f3:df:00:9b:cc:a5:f5:ae:05:d2:d0:84: 0f:38:21:55:85:ab:4e:f5:99:19:af:0d:ce:d9:b6: cd:56:d0:3c:66:42:57:68:8b:46:a3:78:0b:8e:b2: f7:3c:cc:ed:6a:09:c4:36:ef:1f:1b:73:58:68:c8: 7f:b2:6d:ef:bd:e8:8e:f9:a0:e0:26:64:86:10:29: 1f:53:1e:96:5d:0c:b0:9b:10:ce:bc:16:68:78:32: 4f:54:16:9f:10:2e:30:1e:20:e2:47:bd:dd:62:90: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:85:98:F9:00:3C:18:57:A8:07:0F:29:17:47:72:A3:79:9B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:30:db:b4:b0:08:19:ca:f6:a3:6f:0b:04:e5:cc:ed:19:d7: 82:66:cd:c9:9c:86:60:e5:d2:94:97:48:4f:46:d7:09:fe:6b: 4d:a0:2f:97:88:35:12:42:b2:15:1d:c6:75:7d:b3:f7:11:a9: e7:38:db:87:4c:5c:d9:fd:6b:6a:15:97:b6:2a:67:05:10:1c: 8d:4c:ef:f0:4a:71:06:98:d3:b1:71:7b:74:a9:7c:4a:62:23: cc:b6:3b:79:e7:8b:7c:e6:f0:0c:83:68:04:01:13:d8:03:77: d0:da:58:3a:42:13:95:b0:05:40:6d:ad:1d:09:fb:b5:0f:b7: a8:8d:84:c1:83:6e:e0:2f:36:1a:d3:ce:e7:4c:9d:ae:e7:4e: 8a:24:1d:76:5e:fe:93:4a:3e:e3:7d:09:f2:34:12:d9:09:ac: 3e:3b:7b:39:9d:c2:d4:20:c6:f4:07:14:19:8c:1a:95:ee:9e: c5:1d:aa:e5:da:a3:7e:da:74:d8:eb:a6:92:a2:b8:31:3d:78: c6:91:95:82:2a:0f:ce:a6:9a:06:c0:b8:95:cf:27:25:05:0d: 86:a4:46:9e:12:b1:23:91:ca:70:c7:9b:ed:c2:8d:de:23:bc: 1b:e8:52:03:0a:7c:70:a9:ec:90:4d:db:31:d7:b1:fd:c8:91: d9:38:6d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/K9vVfOuz24xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NGU2MjEwYmMtZmEzOS00MTVmLTllZTctYjM1OGRmOTJkMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB533O5lJEmj6nuftBfHm+lVUmTzhx6tNtBl opTCAGQivlk3SylZViCKQ0iR04opZGUcaKFsklpI1Cd96vDnpEomRGsMSoIgzc8R g1aNYP0PhQnjotY8CxiO6FGPFwarxJNMvkGJGpjjPewQxEVhkDO86iAL829LRnp6 7MRBXr9YNzBODsUUk0sCS7qghnOHoXqZloJteADz3wCbzKX1rgXS0IQPOCFVhatO 9ZkZrw3O2bbNVtA8ZkJXaItGo3gLjrL3PMztagnENu8fG3NYaMh/sm3vveiO+aDg JmSGECkfUx6WXQywmxDOvBZoeDJPVBafEC4wHiDiR73dYpDEVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5AhZj5ADwYV6gHDykXR3KjeZtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE0YzIzNDYtY2U4NC0z MDgyLTliZDEtZDUzYjY2YzZiMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsw27SwCBnK9qNvCwTlzO0Z14JmzcmchmDl0pSXSE9G1wn+a02gL5eI NRJCshUdxnV9s/cRqec424dMXNn9a2oVl7YqZwUQHI1M7/BKcQaY07Fxe3SpfEpi I8y2O3nni3zm8AyDaAQBE9gDd9DaWDpCE5WwBUBtrR0J+7UPt6iNhMGDbuAvNhrT zudMna7nTookHXZe/pNKPuN9CfI0EtkJrD47ezmdwtQgxvQHFBmMGpXunsUdquXa o37adNjrppKiuDE9eMaRlYIqD86mmgbAuJXPJyUFDYakRp4SsSORynDHm+3Cjd4j vBvoUgMKfHCp7JBN2zHXsf3Ikdk4be0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:02:52 2025 by rpki-client