$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa File: ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa (raw, json) Hash identifier: A2SR/CuqE5a6LUJhYiAuNKTF9edjZMSAMk46YbNOgg8= Subject key identifier: 1D:83:5A:D0:D9:D7:73:C3:54:D0:DC:FA:FB:41:19:01:91:DF:5D:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DEA1229855BAB44332DEE7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.225.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:22:98:55:ba:b4:43:32:de:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=e4f5596d-8398-4a5c-8449-5977f919ff4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:5b:43:eb:ed:1f:99:24:0f:a9:5b:cd:42: 49:79:fc:36:26:5d:3d:64:9b:31:22:c4:b5:8a:b4: 53:70:b5:fe:6e:60:90:6d:ac:85:8d:90:02:bd:05: cb:bc:82:07:07:2e:ea:4c:c3:c0:10:75:a4:51:56: d7:75:a9:91:c6:52:80:bd:bb:f2:2f:eb:49:3e:c9: f5:df:d0:d1:80:8d:52:12:2e:76:f8:8f:5d:40:e8: b4:6c:ea:96:88:31:a6:15:75:81:61:f1:e0:28:23: b5:50:23:e9:69:da:ac:ae:d3:26:4c:38:f9:f2:0d: b7:32:62:37:b3:ab:d1:ee:2c:ef:70:c1:2a:f7:6f: 3b:77:6e:ee:57:d0:82:40:28:93:bf:31:81:15:3b: f9:9c:ed:8c:b8:7e:76:d1:e8:30:f0:0a:25:bd:4e: 97:55:00:16:07:ca:24:22:6f:99:2d:26:d5:d1:d5: 6a:84:61:4e:ae:be:1d:e8:8a:94:7b:5a:3c:53:67: 71:09:55:ab:f5:fc:9b:ea:47:8e:a7:cd:83:36:24: eb:d5:6f:d0:46:29:a4:63:88:76:05:1f:9d:43:8a: 52:67:63:e9:d7:71:31:61:95:c2:1b:10:a1:56:2a: 13:62:d9:5f:e2:7e:19:45:f4:f1:09:b0:a8:3d:b9: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:83:5A:D0:D9:D7:73:C3:54:D0:DC:FA:FB:41:19:01:91:DF:5D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6ed21a-d141-3e7e-a3e8-36ccce30af89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:04:eb:f6:65:f9:6d:13:6c:ab:ac:ee:c7:ca:36:03:0c:eb: d9:98:45:51:d1:9c:0d:79:b1:5c:b8:7a:2e:05:d8:67:5e:e9: c3:6e:86:e8:90:07:1e:52:a9:39:bf:07:bc:70:f5:ca:e1:4e: 1b:d6:49:13:21:38:4d:a2:b6:c4:f9:85:a0:12:78:28:79:4c: dc:5c:aa:73:0b:b9:41:07:d1:e8:e6:1d:e2:6b:ff:67:2c:ee: a3:ef:ea:e1:f0:ba:1b:6c:6b:55:9c:59:34:e7:55:9e:bd:e1: 11:69:c5:ef:5f:59:fe:c3:7c:62:c3:b8:c9:35:68:f0:a1:b3: e0:64:e2:41:0d:e2:68:0f:55:4b:0d:2d:ca:e4:70:c3:f0:54: 79:75:a6:4b:09:7a:4e:75:64:b5:dc:04:d9:29:15:f6:64:db: a6:0a:bb:a0:d2:6b:55:0a:c8:75:f6:e9:6b:a5:1f:47:19:d6: 22:da:57:10:27:fa:e1:2b:c4:7a:4b:7e:70:1b:83:a5:00:53: 92:98:1a:d2:05:fa:30:54:04:92:6e:6f:86:ce:92:e9:6d:f8: 66:e7:b4:ea:f4:9d:50:97:f2:41:9c:df:84:bc:56:e5:c5:2a: 42:ab:cd:7e:ee:b4:61:52:b2:86:1f:85:2a:14:93:e7:13:39: f9:8b:77:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSKYVbq0QzLe58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZTRmNTU5NmQtODM5OC00YTVjLTg0NDktNTk3N2Y5MTlmZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiatbQ+vtH5kkD6lbzUJJefw2Jl09ZJsxIsS1 irRTcLX+bmCQbayFjZACvQXLvIIHBy7qTMPAEHWkUVbXdamRxlKAvbvyL+tJPsn1 39DRgI1SEi52+I9dQOi0bOqWiDGmFXWBYfHgKCO1UCPpadqsrtMmTDj58g23MmI3 s6vR7izvcMEq9287d27uV9CCQCiTvzGBFTv5nO2MuH520egw8AolvU6XVQAWB8ok Im+ZLSbV0dVqhGFOrr4d6IqUe1o8U2dxCVWr9fyb6keOp82DNiTr1W/QRimkY4h2 BR+dQ4pSZ2Pp13ExYZXCGxChVioTYtlf4n4ZRfTxCbCoPblwOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2DWtDZ13PDVNDc+vtBGQGR3106MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM2ZWQyMWEtZDE0MS0z ZTdlLWEzZTgtMzZjY2NlMzBhZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0E6/Zl+W0TbKus7sfKNgMM69mYRVHRnA15sVy4ei4F2Gde6cNuhuiQ Bx5SqTm/B7xw9crhThvWSRMhOE2itsT5haASeCh5TNxcqnMLuUEH0ejmHeJr/2cs 7qPv6uHwuhtsa1WcWTTnVZ694RFpxe9fWf7DfGLDuMk1aPChs+Bk4kEN4mgPVUsN LcrkcMPwVHl1pksJek51ZLXcBNkpFfZk26YKu6DSa1UKyHX26WulH0cZ1iLaVxAn +uErxHpLfnAbg6UAU5KYGtIF+jBUBJJub4bOkult+GbntOr0nVCX8kGc34S8VuXF KkKrzX7utGFSsoYfhSoUk+cTOfmLd0k= -----END CERTIFICATE-----Generated at Sun Apr 27 02:57:48 2025 by rpki-client