$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe59863d-babb-3e11-abbc-601b32cc3f56.roa File: fe59863d-babb-3e11-abbc-601b32cc3f56.roa (raw, json) Hash identifier: sdSDxxQTK0F3+9BAxT892eCEjVUbfrCTkCptg9CSuBM= Subject key identifier: 56:F4:46:7C:E2:A8:AD:8E:3B:87:1D:FE:A9:82:C3:71:42:B4:0E:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F65BEE68929CC1B3E1080780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe59863d-babb-3e11-abbc-601b32cc3f56.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 36183 IP address blocks: 172.224.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ee:68:92:9c:c1:b3:e1:08:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=8d43f06f-fcc5-4ffb-9184-06bc6cc5c8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:a2:36:6a:79:04:ed:10:ca:22:4d:8b:9a: 6c:cb:5c:3d:41:20:f8:46:eb:74:b9:c1:94:48:d0: fd:0f:8e:d9:64:29:9a:7c:b3:f4:7c:e5:d8:1d:6a: 64:a6:e7:b2:5e:51:11:26:51:c4:21:d8:12:1d:15: d2:d7:c1:d2:ee:52:14:df:af:11:b9:6e:b7:cb:bf: 65:fe:c0:dc:b1:df:d0:e9:89:e1:65:0f:c4:d9:44: b5:a7:c6:d2:3c:8f:b1:2a:4c:d5:b5:3e:1f:b5:d3: fd:d0:b6:f4:1d:3e:7f:dc:f4:a8:54:42:ae:7d:7b: a4:3d:6c:20:b5:71:d6:f7:d7:76:32:d8:f4:1e:03: f1:40:1b:80:c0:97:73:70:f6:99:7c:e0:8c:31:ba: dc:a2:ac:bd:45:83:ab:dd:22:ba:59:83:49:23:ce: ea:3a:4e:84:af:68:34:bf:13:68:80:4a:47:f6:6b: 74:00:68:e8:15:a8:74:18:08:92:48:40:ed:7e:1b: 3f:5b:06:77:4d:a9:8e:cd:9f:15:f7:db:1e:c4:7a: 05:31:ed:7e:1d:ec:94:3c:0c:76:78:f5:4f:bb:15: 71:48:b4:77:17:f7:29:11:f5:0d:dd:c0:56:42:df: ae:fc:01:59:02:87:92:b3:6c:cf:1a:ea:ef:e6:89: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:46:7C:E2:A8:AD:8E:3B:87:1D:FE:A9:82:C3:71:42:B4:0E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe59863d-babb-3e11-abbc-601b32cc3f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:38:7b:75:6f:ea:1f:c4:86:fb:3a:81:9b:09:c2:44:53:30: 61:67:5e:17:64:0e:a8:05:9f:5b:cb:c2:06:68:02:a3:0a:b8: 2f:b2:3a:94:72:0e:b1:4b:dc:d7:7b:5c:29:7a:c9:a6:1f:c9: a4:73:eb:15:fb:7a:26:0e:b9:70:4f:00:d7:8c:ca:21:97:d3: cd:f4:0e:8a:6b:87:6f:8e:dc:61:e6:ac:56:63:17:07:d1:3a: 94:c2:04:4a:5e:3e:45:c2:46:bb:59:f0:68:d0:87:07:7b:ee: 6d:4e:b6:43:8a:4f:8c:0a:27:2b:30:82:ea:f1:24:ce:22:7d: 02:02:ed:40:ae:76:62:52:a9:34:bd:72:14:c9:b7:59:2a:51: 0a:58:ab:3e:52:01:c6:cc:be:b6:0d:26:c1:87:69:88:33:b0: f5:5d:de:7a:30:90:cb:82:59:4b:a7:72:2d:e6:55:b6:53:d0: 79:a9:71:2e:1e:66:14:b9:b8:a5:4e:34:63:c4:dc:51:39:4b: 82:61:21:30:e1:6e:99:ad:93:ea:3a:5c:ec:d1:ad:a7:53:f7: 8e:30:14:5b:e2:ba:4e:5f:02:c5:ba:a7:4c:f0:72:6b:d9:4c: f5:50:c3:52:04:1a:77:1f:98:8e:a3:cb:6e:ba:3b:29:fb:3d: 82:96:36:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+5okpzBs+EIB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OGQ0M2YwNmYtZmNjNS00ZmZiLTkxODQtMDZiYzZjYzVjOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z2iNmp5BO0QyiJNi5psy1w9QSD4Rut0ucGU SND9D47ZZCmafLP0fOXYHWpkpueyXlERJlHEIdgSHRXS18HS7lIU368RuW63y79l /sDcsd/Q6YnhZQ/E2US1p8bSPI+xKkzVtT4ftdP90Lb0HT5/3PSoVEKufXukPWwg tXHW99d2Mtj0HgPxQBuAwJdzcPaZfOCMMbrcoqy9RYOr3SK6WYNJI87qOk6Er2g0 vxNogEpH9mt0AGjoFah0GAiSSEDtfhs/WwZ3TamOzZ8V99sexHoFMe1+HeyUPAx2 ePVPuxVxSLR3F/cpEfUN3cBWQt+u/AFZAoeSs2zPGurv5okK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb0RnziqK2OO4cd/qmCw3FCtA6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmU1OTg2M2QtYmFiYi0z ZTExLWFiYmMtNjAxYjMyY2MzZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ4e3Vv6h/Ehvs6gZsJwkRTMGFnXhdkDqgFn1vLwgZoAqMKuC+yOpRy DrFL3Nd7XCl6yaYfyaRz6xX7eiYOuXBPANeMyiGX0830Doprh2+O3GHmrFZjFwfR OpTCBEpePkXCRrtZ8GjQhwd77m1OtkOKT4wKJyswgurxJM4ifQIC7UCudmJSqTS9 chTJt1kqUQpYqz5SAcbMvrYNJsGHaYgzsPVd3nowkMuCWUunci3mVbZT0HmpcS4e ZhS5uKVONGPE3FE5S4JhITDhbpmtk+o6XOzRradT944wFFviuk5fAsW6p0zwcmvZ TPVQw1IEGncfmI6jy266Oyn7PYKWNg0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:10 2025 by rpki-client