$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89a6660-5387-3435-b73b-203ac897b670.roa File: d89a6660-5387-3435-b73b-203ac897b670.roa (raw, json) Hash identifier: i0QPkmwRpiycrqNizBt/0BGUWKov6akel3R+62c3AGE= Subject key identifier: D6:E7:F3:70:0A:F7:85:2B:AA:A8:30:2F:6B:9B:A6:99:F1:97:DD:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF61755145EB1B1D5F3FBBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89a6660-5387-3435-b73b-203ac897b670.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.226.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:75:51:45:eb:1b:1d:5f:3f:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=76b72618-3def-45db-b145-8f9569dd4913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:b1:ea:89:bb:61:8e:1a:f2:2a:75:13:75: 42:cf:5e:9e:26:d1:0c:1c:e1:00:26:2a:fb:cf:17: 4b:f0:84:ed:81:f0:a3:d2:8f:a1:e3:b8:43:7d:c5: f6:91:94:dd:28:83:1d:9b:43:8f:ff:c1:0f:19:64: f8:c0:91:b6:e9:da:cf:e1:8d:10:ce:4c:63:88:f7: 02:2f:c0:5e:e7:fc:93:bd:b8:5c:41:f4:77:36:6b: f9:55:54:df:09:0c:55:bb:22:c2:5b:66:d0:ec:fa: ff:04:37:9d:d0:f1:b3:bc:11:18:85:88:67:6e:fd: da:c0:01:53:d6:c4:a6:7d:10:73:95:ce:06:fe:11: 04:e7:4b:a2:41:f0:6e:99:40:00:5f:7f:76:1a:45: 7e:7c:6e:fa:67:ad:e3:c2:da:8d:52:1e:d3:55:e9: ea:1e:7b:cf:5f:37:ed:04:e8:19:59:71:a1:ff:32: 41:1c:72:9f:d8:78:2b:56:c4:1d:98:d3:be:f9:94: e9:c4:75:c9:39:53:47:0b:c6:8a:a7:4d:52:66:e9: cb:09:16:1b:e9:f4:e4:2f:ea:d9:0a:8b:65:04:b4: 86:79:42:5a:2c:6e:44:67:12:e8:75:21:f5:55:43: 3c:87:56:95:f7:49:34:02:b9:76:61:82:b6:57:09: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E7:F3:70:0A:F7:85:2B:AA:A8:30:2F:6B:9B:A6:99:F1:97:DD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89a6660-5387-3435-b73b-203ac897b670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0f:64:c8:0b:65:13:5b:87:38:a7:69:61:9a:ee:a2:3a:90: 97:fa:85:24:01:fb:9e:d7:e7:00:83:9b:44:b1:5e:b0:e7:e8: c5:66:b2:6a:e1:c3:d3:a1:38:51:e2:bf:5a:f9:6d:f7:53:aa: 51:07:71:e7:ab:26:3c:a6:79:f4:07:2f:a1:42:ec:9a:b1:db: a8:b9:80:27:12:c9:20:f2:6f:48:a0:ac:ce:38:ab:d8:c5:02: cf:35:aa:e5:11:7c:b9:29:51:0e:c4:cf:bf:f3:f7:85:a4:2f: 15:7f:93:a2:1f:b5:97:93:57:8d:5c:b3:b6:17:16:01:6a:11: ff:95:e4:ba:9f:2f:ff:c5:8a:b8:d5:27:c4:a5:d3:ae:2e:55: 4c:6c:9d:68:5d:7e:0e:de:5a:1f:3c:c9:d2:2b:2d:40:3e:9f: b9:86:8b:2f:52:46:66:3b:b6:4a:71:87:02:88:8b:25:ec:1e: f4:bc:03:72:ec:5a:c3:9e:6f:c4:17:18:50:f9:2b:32:22:ab: b0:d0:ab:5a:1e:a0:da:12:87:e8:e3:4a:00:5c:86:0a:44:ce: 8f:ec:7a:35:ed:ae:32:e9:a2:3a:e5:2e:b5:33:5b:76:12:cc: 4b:85:79:a5:4f:79:ff:25:e8:75:86:4b:a6:7c:02:8b:8d:1d: 1a:3f:10:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXVRResbHV8/u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NzZiNzI2MTgtM2RlZi00NWRiLWIxNDUtOGY5NTY5ZGQ0OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEqx6om7YY4a8ip1E3VCz16eJtEMHOEAJir7 zxdL8ITtgfCj0o+h47hDfcX2kZTdKIMdm0OP/8EPGWT4wJG26drP4Y0QzkxjiPcC L8Be5/yTvbhcQfR3Nmv5VVTfCQxVuyLCW2bQ7Pr/BDed0PGzvBEYhYhnbv3awAFT 1sSmfRBzlc4G/hEE50uiQfBumUAAX392GkV+fG76Z63jwtqNUh7TVenqHnvPXzft BOgZWXGh/zJBHHKf2HgrVsQdmNO++ZTpxHXJOVNHC8aKp01SZunLCRYb6fTkL+rZ CotlBLSGeUJaLG5EZxLodSH1VUM8h1aV90k0Arl2YYK2Vwll+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbn83AK94UrqqgwL2ubppnxl90wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg5YTY2NjAtNTM4Ny0z NDM1LWI3M2ItMjAzYWM4OTdiNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMPZMgLZRNbhzinaWGa7qI6kJf6hSQB+57X5wCDm0SxXrDn6MVmsmrh w9OhOFHiv1r5bfdTqlEHceerJjymefQHL6FC7Jqx26i5gCcSySDyb0igrM44q9jF As81quURfLkpUQ7Ez7/z94WkLxV/k6IftZeTV41cs7YXFgFqEf+V5LqfL//FirjV J8Sl064uVUxsnWhdfg7eWh88ydIrLUA+n7mGiy9SRmY7tkpxhwKIiyXsHvS8A3Ls WsOeb8QXGFD5KzIiq7DQq1oeoNoSh+jjSgBchgpEzo/sejXtrjLpojrlLrUzW3YS zEuFeaVPef8l6HWGS6Z8AouNHRo/EEI= -----END CERTIFICATE-----Generated at Tue Apr 29 00:15:00 2025 by rpki-client