$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa File: b520fbe5-cd59-3561-89ef-ae42073c89f8.roa (raw, json) Hash identifier: Rz4rIlFXffa+pKFs2hXl1Bkb9RyVv/rgKxZoG26e2DY= Subject key identifier: B8:74:31:95:43:D0:A3:69:BE:16:66:B4:46:72:D8:08:AA:3A:A0:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E16BF2964EEE3957C47CB640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:f2:96:4e:ee:39:57:c4:7c:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=e2481ef0-b112-4420-a6d6-20d698e38349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:91:fb:75:01:2a:e5:20:91:f3:0c:c6:e2: bb:ae:97:e6:14:d0:aa:71:d0:69:ac:d7:8c:5f:52: ee:90:00:8b:53:c3:da:08:c6:ba:db:6d:74:82:ec: 04:7e:af:41:c5:2a:74:e9:09:3a:86:8a:f9:9d:86: 6d:1b:24:ec:c0:40:c6:5d:f1:49:8e:77:42:da:21: 09:e0:3f:86:e2:6d:f1:92:ff:3d:9d:e2:84:b0:56: 7a:8a:a4:49:1e:24:c7:ef:b3:54:83:60:df:04:1b: 4c:05:da:cc:d2:4a:39:64:6b:da:aa:33:26:af:cb: 6d:b7:eb:0c:26:0c:45:fa:7c:23:d3:0b:ab:eb:4b: 1b:f2:9c:9e:e5:ed:96:93:15:24:a5:b7:71:f5:04: fd:fc:c6:52:ce:22:bf:df:84:0a:3b:a2:d7:fe:d0: 42:f7:10:50:56:3d:60:37:4d:b7:e8:d4:32:96:05: 44:2f:3d:47:78:4d:95:5f:e7:69:9a:27:47:0e:03: a6:ab:05:fa:e3:f6:5d:6d:0e:37:ed:f9:ed:00:03: 6e:6b:28:8d:c8:ed:97:ba:b6:27:0e:ce:a6:13:c4: 9e:f5:98:91:e5:36:d3:c3:c8:9e:63:b6:d5:00:c4: 87:08:d0:b6:57:8c:e9:1e:19:c7:87:81:44:e2:7d: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:74:31:95:43:D0:A3:69:BE:16:66:B4:46:72:D8:08:AA:3A:A0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:68:59:e5:45:b8:6d:7e:a6:47:d6:3a:06:9f:25:2e:f5:23: 0e:e8:a9:b4:4d:53:ea:5d:2f:34:be:2a:fc:3b:d4:d4:c2:8e: d7:22:48:84:e1:bf:49:99:f5:a1:b0:f7:65:c2:47:d7:8d:f4: e7:d1:6b:66:68:9f:a1:c8:24:47:69:d9:db:a3:59:33:ae:79: 2e:42:60:d0:72:96:84:a3:5a:1b:40:3d:23:80:0d:d2:5b:3b: dc:54:19:18:96:f3:fb:97:db:41:03:3a:0f:f5:1c:f1:69:e1: 34:84:cf:46:e4:cf:2c:98:2c:2c:04:bb:96:26:9e:de:86:e7: ff:f7:50:c1:b1:73:4d:f5:36:b8:53:74:6f:2f:5b:ba:ea:01: fd:74:21:96:91:0a:20:d5:46:6c:f4:b2:d1:a7:c4:60:1d:87: 3c:b9:a6:85:62:0f:7b:84:ca:7d:3e:a7:3c:e8:c4:09:0a:cd: 1b:d8:0f:03:34:fa:a1:ca:10:e6:0b:29:a7:c6:31:55:d6:42: 9d:49:ba:82:3e:e6:8d:be:19:7c:d6:5a:0a:05:de:fd:63:9f: 41:8b:f5:3e:64:44:00:77:dc:62:a9:86:e8:e8:8c:a5:e9:34: 33:23:c9:84:98:5f:3f:a7:d4:fa:1a:e1:b7:08:ad:fe:48:e1: b1:c2:03:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/KWTu45V8R8tkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI0ODFlZjAtYjExMi00NDIwLWE2ZDYtMjBkNjk4ZTM4MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBaR+3UBKuUgkfMMxuK7rpfmFNCqcdBprNeM X1LukACLU8PaCMa62210guwEfq9BxSp06Qk6hor5nYZtGyTswEDGXfFJjndC2iEJ 4D+G4m3xkv89neKEsFZ6iqRJHiTH77NUg2DfBBtMBdrM0ko5ZGvaqjMmr8ttt+sM JgxF+nwj0wur60sb8pye5e2WkxUkpbdx9QT9/MZSziK/34QKO6LX/tBC9xBQVj1g N0236NQylgVELz1HeE2VX+dpmidHDgOmqwX64/ZdbQ437fntAANuayiNyO2XurYn Ds6mE8Se9ZiR5TbTw8ieY7bVAMSHCNC2V4zpHhnHh4FE4n2XWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh0MZVD0KNpvhZmtEZy2AiqOqACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjUyMGZiZTUtY2Q1OS0z NTYxLTg5ZWYtYWU0MjA3M2M4OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRoWeVFuG1+pkfWOgafJS71Iw7oqbRNU+pdLzS+Kvw71NTCjtciSITh v0mZ9aGw92XCR9eN9OfRa2Zon6HIJEdp2dujWTOueS5CYNByloSjWhtAPSOADdJb O9xUGRiW8/uX20EDOg/1HPFp4TSEz0bkzyyYLCwEu5Ymnt6G5//3UMGxc031NrhT dG8vW7rqAf10IZaRCiDVRmz0stGnxGAdhzy5poViD3uEyn0+pzzoxAkKzRvYDwM0 +qHKEOYLKafGMVXWQp1JuoI+5o2+GXzWWgoF3v1jn0GL9T5kRAB33GKphujojKXp NDMjyYSYXz+n1Poa4bcIrf5I4bHCA1I= -----END CERTIFICATE-----Generated at Sat Apr 26 22:19:32 2025 by rpki-client