$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa File: fa0fbb5a-951e-372c-89bc-dc308489326b.roa (raw, json) Hash identifier: EPoD2vS/sdozXR+raBQ5tvKNPxlWfRP724MVOc31PF0= Subject key identifier: 44:86:26:70:F5:0A:3C:7B:97:28:D4:B4:08:E4:4A:7C:36:16:F0:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DBD67371D247A9B60953F140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 36183 IP address blocks: 172.225.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:73:71:d2:47:a9:b6:09:53:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=91f36af2-94eb-4f9c-bdd1-bd29a084fe97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:3b:97:f8:1e:3e:1d:a1:24:cf:25:d8:fe: d4:07:ee:39:bf:ab:d6:70:f6:26:1c:05:8c:0f:6f: d9:e8:11:ee:d8:6e:3a:bc:49:a7:b3:17:94:75:9b: 66:7b:bb:1d:33:65:53:1c:c5:4e:28:f1:f9:fa:93: b0:e0:10:46:44:87:0a:d2:b8:b3:5e:b9:de:e1:03: bf:0c:2e:4f:91:25:13:c5:6c:4c:91:0e:87:c9:b0: b6:01:85:64:35:52:79:ae:ad:d3:d4:d1:e2:11:cc: 3d:a0:45:66:4b:46:18:f2:f1:ee:0d:a7:fd:59:2f: 7e:57:98:56:f8:9c:ac:1f:74:8d:59:b0:8a:09:b6: 16:86:3d:7c:71:61:2e:86:30:3c:63:b2:17:6d:ad: 46:54:66:4b:1c:62:ed:a3:28:08:bf:29:ac:02:e2: 84:61:0a:3b:ae:98:91:2b:35:ba:ed:f3:a3:b9:2c: 00:af:ec:2f:41:28:5e:7f:a0:4e:50:91:66:5f:f0: b2:64:5a:35:37:57:91:a1:78:bb:2d:80:cf:4f:52: 50:e3:b8:51:61:db:f1:6b:5a:43:c7:d4:5f:4e:19: b0:73:44:fc:c0:9f:86:08:9f:37:8c:e3:d6:71:0c: 57:01:f5:8a:be:2e:bb:84:d6:b0:7b:eb:30:46:c7: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:86:26:70:F5:0A:3C:7B:97:28:D4:B4:08:E4:4A:7C:36:16:F0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:70:3c:75:a6:df:fd:d2:16:ed:0f:bf:5f:e8:e9:9e:89:f5: f9:ad:a0:0d:cb:e0:7a:0c:7e:cc:89:41:52:cc:27:bd:5b:17: fe:19:c1:1f:d4:53:28:41:0f:27:41:ed:a5:47:18:8c:ca:a4: 59:54:ad:97:82:3a:8b:b3:a8:c9:b9:41:29:92:aa:79:47:71: 00:be:f9:a4:eb:5c:25:a7:bd:eb:2c:1e:57:c2:0f:4a:2d:0b: de:ff:f4:27:6a:24:ab:00:5d:13:b3:26:1d:7c:f7:ab:b6:22: e3:d9:5f:74:40:71:ec:8b:91:38:bf:c8:6f:ff:da:36:ec:00: 22:99:f8:82:b9:5f:ce:86:a4:79:48:31:ac:d1:c6:e3:09:c2: c9:6d:78:85:5c:42:61:50:3c:30:2d:3f:ae:93:ed:d6:b5:f8: a2:8a:3f:a2:d4:99:41:f1:6c:64:44:e2:7e:80:7c:c0:ca:6b: a7:b4:64:07:55:bb:78:71:5a:cd:1b:fd:96:bc:0f:66:e4:76: 5a:3a:d6:5c:99:66:64:aa:56:5c:2c:b7:0f:ef:1d:fe:1d:42: 8b:e0:c3:ef:e1:6d:b1:c4:4c:11:cc:35:f1:50:29:a3:c5:8a: 95:bd:bd:be:14:60:16:e8:46:77:7c:cc:17:42:de:79:a3:1e: 4d:7b:64:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nNx0keptglT8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk OTFmMzZhZjItOTRlYi00ZjljLWJkZDEtYmQyOWEwODRmZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HU7l/gePh2hJM8l2P7UB+45v6vWcPYmHAWM D2/Z6BHu2G46vEmnsxeUdZtme7sdM2VTHMVOKPH5+pOw4BBGRIcK0rizXrne4QO/ DC5PkSUTxWxMkQ6HybC2AYVkNVJ5rq3T1NHiEcw9oEVmS0YY8vHuDaf9WS9+V5hW +JysH3SNWbCKCbYWhj18cWEuhjA8Y7IXba1GVGZLHGLtoygIvymsAuKEYQo7rpiR KzW67fOjuSwAr+wvQShef6BOUJFmX/CyZFo1N1eRoXi7LYDPT1JQ47hRYdvxa1pD x9RfThmwc0T8wJ+GCJ83jOPWcQxXAfWKvi67hNawe+swRsddywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESGJnD1Cjx7lyjUtAjkSnw2FvA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmEwZmJiNWEtOTUxZS0z NzJjLTg5YmMtZGMzMDg0ODkzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhwPHWm3/3SFu0Pv1/o6Z6J9fmtoA3L4HoMfsyJQVLMJ71bF/4ZwR/U UyhBDydB7aVHGIzKpFlUrZeCOouzqMm5QSmSqnlHcQC++aTrXCWnvessHlfCD0ot C97/9CdqJKsAXROzJh1896u2IuPZX3RAceyLkTi/yG//2jbsACKZ+IK5X86GpHlI MazRxuMJwslteIVcQmFQPDAtP66T7da1+KKKP6LUmUHxbGRE4n6AfMDKa6e0ZAdV u3hxWs0b/Za8D2bkdlo61lyZZmSqVlwstw/vHf4dQovgw+/hbbHETBHMNfFQKaPF ipW9vb4UYBboRnd8zBdC3nmjHk17ZBU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:03 2025 by rpki-client