$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa File: da88b2bd-e381-3804-af7d-337f02bc71e1.roa (raw, json) Hash identifier: G5gzsdDihfJuianjWItfh1AVGofpQHlGkSs2SEk9yFk= Subject key identifier: 8B:E0:89:65:0B:1D:96:B3:B2:0D:9D:C5:25:26:32:DF:60:A6:31:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EF61496C9E0EB8CC8CB57A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36183 IP address blocks: 172.225.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:49:6c:9e:0e:b8:cc:8c:b5:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=40883f2e-6b29-4fb3-9216-6a7bb8f2ff0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:23:d0:3b:d1:79:97:30:af:0e:c0:8c:54: e7:f8:03:51:70:bd:65:d0:84:96:72:f2:bc:39:36: 25:70:1d:23:c8:05:f0:68:1a:f6:50:bb:ce:d0:67: 56:9a:e9:9b:b6:a5:88:ea:c2:6e:95:ea:64:00:f2: 0b:48:cc:71:76:49:89:bc:a1:0d:70:6a:81:bc:e2: e2:67:71:70:e7:02:55:3e:a9:fd:c0:e7:5b:1a:b1: 01:ee:ac:ba:98:15:2f:79:da:9b:bf:38:32:0e:a4: 29:52:5f:35:57:07:45:e6:87:09:77:f2:cf:4c:37: 8e:04:ce:52:a9:ff:b6:37:5d:e1:ff:b1:73:54:76: 0a:7f:3c:42:5f:eb:3b:31:36:5e:e7:94:f3:34:78: 57:08:6c:d3:29:8c:e8:46:49:78:af:12:b5:11:cd: 9a:67:20:b9:1c:8c:2b:51:0a:d4:2c:08:a9:88:05: 4c:40:e2:21:1d:b7:ef:a1:71:dc:6b:e2:0d:f1:53: 48:bf:f0:96:7f:85:5a:a7:2e:34:88:b9:67:f0:7a: 62:f8:08:fa:c3:75:e0:a0:cb:24:e1:06:64:34:ee: cc:52:96:d8:3d:0e:3b:f5:2a:25:fd:9b:ce:35:3a: 51:68:f4:90:1e:be:fe:f0:b1:f9:17:dd:66:b1:b0: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:89:65:0B:1D:96:B3:B2:0D:9D:C5:25:26:32:DF:60:A6:31:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b4:fd:52:1d:dc:a6:ad:20:15:5b:eb:4d:5f:3b:7e:57:b4: 9a:44:d4:84:83:86:68:81:9e:34:26:05:b1:d6:09:47:4a:64: 9e:89:70:a5:5b:3b:4b:3a:07:04:3c:58:cf:59:79:98:73:41: 10:07:d0:f4:9d:e4:e5:0b:89:05:50:38:1c:e5:11:76:21:0c: 21:22:79:6c:55:5b:43:58:6a:91:14:22:84:77:c5:97:7d:68: ff:ff:00:da:09:83:ab:37:5f:98:fe:f3:ee:f0:7e:83:cd:79: 21:3c:f8:3b:6f:21:c1:9e:4b:ae:00:7a:bb:d6:c8:ec:e6:a0: ce:e3:ba:a8:74:f7:17:d4:23:4c:f9:31:62:25:51:25:e2:dd: f3:c3:2e:8f:ab:b8:2e:02:b4:7d:c3:27:79:94:b3:73:f0:92: a7:53:9f:a5:80:89:8c:86:e8:b5:24:62:0d:6b:56:7e:90:f7: cb:d4:4c:09:03:d7:43:25:99:e2:a9:52:d0:b3:66:ba:fe:1e: 96:c5:71:91:51:94:26:bb:69:8a:de:de:a1:12:65:2e:71:30: db:ae:92:56:2f:d7:9b:49:9e:c6:95:ce:eb:7d:3c:bc:6d:5e: a4:e3:e8:05:03:23:73:36:79:0f:3a:8a:e6:f5:a4:20:d5:3b: 21:e1:38:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUlsng64zIy1egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDA4ODNmMmUtNmIyOS00ZmIzLTkyMTYtNmE3YmI4ZjJmZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc4j0DvReZcwrw7AjFTn+ANRcL1l0ISWcvK8 OTYlcB0jyAXwaBr2ULvO0GdWmumbtqWI6sJulepkAPILSMxxdkmJvKENcGqBvOLi Z3Fw5wJVPqn9wOdbGrEB7qy6mBUvedqbvzgyDqQpUl81VwdF5ocJd/LPTDeOBM5S qf+2N13h/7FzVHYKfzxCX+s7MTZe55TzNHhXCGzTKYzoRkl4rxK1Ec2aZyC5HIwr UQrULAipiAVMQOIhHbfvoXHca+IN8VNIv/CWf4Vapy40iLln8Hpi+Aj6w3XgoMsk 4QZkNO7MUpbYPQ479Sol/ZvONTpRaPSQHr7+8LH5F91msbBG8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvgiWULHZazsg2dxSUmMt9gpjGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4OGIyYmQtZTM4MS0z ODA0LWFmN2QtMzM3ZjAyYmM3MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm0/VId3KatIBVb601fO35XtJpE1ISDhmiBnjQmBbHWCUdKZJ6JcKVb O0s6BwQ8WM9ZeZhzQRAH0PSd5OULiQVQOBzlEXYhDCEieWxVW0NYapEUIoR3xZd9 aP//ANoJg6s3X5j+8+7wfoPNeSE8+DtvIcGeS64AervWyOzmoM7juqh09xfUI0z5 MWIlUSXi3fPDLo+ruC4CtH3DJ3mUs3PwkqdTn6WAiYyG6LUkYg1rVn6Q98vUTAkD 10MlmeKpUtCzZrr+HpbFcZFRlCa7aYre3qESZS5xMNuuklYv15tJnsaVzut9PLxt XqTj6AUDI3M2eQ86iub1pCDVOyHhODE= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:07 2025 by rpki-client