$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa File: 1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa (raw, json) Hash identifier: QeXq2MeeNRy4DbusKFX8ViOHURj04u+7CZxLrLYQyXw= Subject key identifier: 1A:4D:F0:50:96:DB:C9:77:72:FC:D2:8E:AA:B2:FB:3E:EA:1E:2D:D8 Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F43285849648445CE8B2EFCC1D07B8780 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 172.86.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:45:ce:8b:2e:fc:c1:d0:7b:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=0b7e0083-6b4b-47cf-aa8b-6c3c64e35102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:6f:7b:02:f6:5e:f2:a9:36:ba:73:a2:e9: b4:44:c8:ac:87:a7:d0:17:48:d7:8b:64:b9:e2:75: 8e:3b:70:5e:77:20:1d:e7:ef:ac:d3:d6:65:66:a0: ac:ad:43:cb:4b:29:64:b6:99:d8:58:09:45:7d:9b: 1a:14:23:07:c5:19:2a:3d:fd:00:71:17:3d:19:f7: df:f4:92:5c:11:9c:e1:49:5a:cc:92:bf:25:c5:2c: 1e:29:66:87:74:53:51:0a:18:12:cb:f0:9b:8b:01: d3:aa:0f:02:b6:cf:62:95:ce:4f:41:e1:17:94:36: 13:bf:f9:ba:84:af:66:ab:40:80:88:eb:40:26:30: d7:1b:7b:1b:cd:27:50:b5:a3:2d:78:ae:af:9a:80: 93:f4:7c:0e:d4:cc:a1:d4:10:c1:9f:2d:0d:32:3f: 70:8b:56:e5:c6:c8:d4:12:91:95:f5:d2:81:13:3f: ad:7d:a5:1b:71:6b:1f:70:8c:53:18:b6:07:36:b0: 9c:93:b1:c6:86:68:fa:b7:a1:fc:cf:c4:3f:ca:21: 4d:35:af:3a:19:49:4c:3b:01:fa:f9:49:ec:dd:11: c2:a5:1b:86:6a:36:57:53:50:70:60:0a:fc:d7:5d: 96:76:f8:43:33:4c:02:f5:d8:bd:91:03:4b:81:52: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:F0:50:96:DB:C9:77:72:FC:D2:8E:AA:B2:FB:3E:EA:1E:2D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d9:53:a1:8a:a1:43:e8:6d:e4:9f:69:5a:10:91:43:98:16: d4:10:93:ec:bd:f4:fb:c0:94:36:fc:6e:3a:ee:fb:b2:1a:49: b3:7c:46:72:8d:2f:2e:14:88:93:cc:2a:6b:e8:65:b1:52:a3: e8:ac:ad:4d:47:0a:f3:1c:6d:2a:3b:02:4f:47:14:b6:a1:a6: 8d:13:9e:1c:7d:fa:be:6e:57:08:4a:43:d8:b7:2b:08:1d:7f: 11:2e:bd:94:6b:2d:41:55:fe:13:27:40:da:08:3f:c0:44:50: 0f:31:ca:cf:a4:1d:d7:b1:4a:2c:64:84:ff:f0:dd:be:e8:0d: 45:de:f3:b7:09:94:46:a6:24:17:f0:52:fe:19:1f:ae:a7:e8: 9c:17:41:5c:a7:74:86:b1:87:5e:ca:b1:13:75:56:a6:49:3b: 09:5a:0d:3a:9a:0d:9b:ea:3c:a3:d2:29:79:86:fd:8c:91:32: 74:a9:94:97:da:de:ed:30:f2:2e:dd:90:f7:af:97:fb:e7:5a: cc:ee:c3:ba:af:5d:9c:89:16:f3:98:3e:ec:98:ca:37:37:cc: 14:98:3d:05:14:d4:26:21:dd:5e:2d:0f:4a:4c:6d:54:22:ae: 64:82:48:18:3a:c0:b5:75:69:b2:15:7f:67:d2:84:e5:1c:dc: 0d:67:2b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEXOiy78wdB7h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MGI3ZTAwODMtNmI0Yi00N2NmLWFhOGItNmMzYzY0ZTM1MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuFvewL2XvKpNrpzoum0RMish6fQF0jXi2S5 4nWOO3BedyAd5++s09ZlZqCsrUPLSylktpnYWAlFfZsaFCMHxRkqPf0AcRc9Gfff 9JJcEZzhSVrMkr8lxSweKWaHdFNRChgSy/CbiwHTqg8Cts9ilc5PQeEXlDYTv/m6 hK9mq0CAiOtAJjDXG3sbzSdQtaMteK6vmoCT9HwO1Myh1BDBny0NMj9wi1blxsjU EpGV9dKBEz+tfaUbcWsfcIxTGLYHNrCck7HGhmj6t6H8z8Q/yiFNNa86GUlMOwH6 +Uns3RHCpRuGajZXU1BwYAr8112WdvhDM0wC9di9kQNLgVIMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpN8FCW28l3cvzSjqqy+z7qHi3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvMWRlN2UyMWItN2FmMy0z ZTg0LTg5ZWUtM2JjNzNkMGRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3ZU6GKoUPobeSfaVoQkUOYFtQQk+y99PvAlDb8bjru+7IaSbN8RnKN Ly4UiJPMKmvoZbFSo+isrU1HCvMcbSo7Ak9HFLahpo0Tnhx9+r5uVwhKQ9i3Kwgd fxEuvZRrLUFV/hMnQNoIP8BEUA8xys+kHdexSixkhP/w3b7oDUXe87cJlEamJBfw Uv4ZH66n6JwXQVyndIaxh17KsRN1VqZJOwlaDTqaDZvqPKPSKXmG/YyRMnSplJfa 3u0w8i7dkPevl/vnWszuw7qvXZyJFvOYPuyYyjc3zBSYPQUU1CYh3V4tD0pMbVQi rmSCSBg6wLV1abIVf2fShOUc3A1nK8c= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:28 2025 by rpki-client