$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa File: 2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa (raw, json) Hash identifier: DZMcNi1yRwK0ju2rTlr3z0TdgesdZgq3IdMAswGVx68= Subject key identifier: 2D:4D:4B:27:E2:A1:F5:05:64:0D:61:D0:E3:C9:DE:87:39:E1:1E:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F4F6A8871F45F106D1729E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 36183 IP address blocks: 172.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a8:87:1f:45:f1:06:d1:72:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=68ae6e4e-c365-4252-af23-d5e7a6620939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:66:fd:04:3a:78:d7:53:b7:65:a6:33:ef: fc:5f:5e:33:ca:ee:44:ad:7d:07:08:81:10:a4:57: 46:e7:ca:b8:71:cb:50:ea:30:1a:37:20:51:25:ab: ee:71:af:90:14:68:0c:67:0f:dd:9d:94:35:54:33: 07:83:b8:b6:8e:1a:37:19:6e:fc:c3:bc:a9:25:4b: 97:25:00:ed:21:fa:af:df:57:2b:dd:60:77:1b:85: fa:d8:54:6e:d2:5e:e0:f2:48:50:72:f0:e1:58:33: 66:cd:3a:ad:de:67:2f:fa:b9:80:fb:48:43:83:a1: 7c:10:41:2f:ff:14:3c:ed:fd:3b:46:c3:55:02:26: b8:ad:75:18:d8:45:d7:85:d6:4d:17:19:30:dc:2e: ea:c0:ad:bd:1c:f7:f7:5a:e5:fa:36:cf:09:33:9d: 16:58:a5:0a:ba:ea:8f:40:b9:dd:2c:86:1c:43:ab: 76:26:5c:4b:75:13:a4:4a:22:00:99:31:b0:7b:89: e7:81:b3:9d:f3:e7:65:4c:26:77:bd:56:f6:a9:d1: 9e:ec:af:b3:3f:79:9a:f0:f7:e4:9a:0e:ad:4b:2a: ba:06:d0:57:0d:88:bf:eb:f1:39:3e:a0:7a:95:44: 34:cb:e0:1c:40:b0:54:85:40:c7:88:35:7a:4f:fc: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4D:4B:27:E2:A1:F5:05:64:0D:61:D0:E3:C9:DE:87:39:E1:1E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:60:9a:b6:ae:ea:52:50:25:d6:b9:c3:43:7b:c2:e2:25:ef: 90:7a:10:58:8b:aa:a4:c5:0a:7f:18:82:8d:ae:6d:df:83:52: cc:18:ab:85:31:36:d3:cc:3b:7b:04:a9:00:69:4a:7a:b8:d2: b0:b5:bc:3b:fa:a7:b2:31:bf:42:5b:eb:c6:86:e8:59:72:7c: 7a:a5:7c:9d:43:30:d4:85:a2:97:31:e1:d8:c7:89:31:da:9f: da:48:a8:ae:6c:42:7f:f1:94:d6:fc:65:89:88:1f:c7:67:96: 95:5b:ed:98:26:57:be:38:4f:08:1c:22:2e:fa:c2:65:7f:ca: 90:a9:82:9b:7e:18:f6:c2:ec:10:74:dd:6b:5d:c1:5f:83:59: 19:45:32:a5:65:2b:80:bf:98:4f:5f:6e:b3:2b:4e:1f:5a:0a: 42:27:0d:74:4a:ed:41:6a:e0:17:c8:ec:a3:c7:e8:66:99:03: aa:c2:f4:2c:02:16:b2:93:5b:aa:4e:ae:31:27:64:34:f4:08: 9c:89:f0:22:63:a0:36:2f:ff:f5:1f:37:bd:67:c0:d6:dd:29: 3a:f3:eb:12:cd:3a:70:c4:5a:57:b2:f0:c1:88:ec:90:dd:8e: 5b:2d:99:89:e2:f4:f5:5c:eb:ba:38:a8:7e:5d:3d:23:a7:14: ae:70:bd:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qiHH0XxBtFyngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjhhZTZlNGUtYzM2NS00MjUyLWFmMjMtZDVlN2E2NjIwOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowNm/QQ6eNdTt2WmM+/8X14zyu5ErX0HCIEQ pFdG58q4cctQ6jAaNyBRJavuca+QFGgMZw/dnZQ1VDMHg7i2jho3GW78w7ypJUuX JQDtIfqv31cr3WB3G4X62FRu0l7g8khQcvDhWDNmzTqt3mcv+rmA+0hDg6F8EEEv /xQ87f07RsNVAia4rXUY2EXXhdZNFxkw3C7qwK29HPf3WuX6Ns8JM50WWKUKuuqP QLndLIYcQ6t2JlxLdROkSiIAmTGwe4nngbOd8+dlTCZ3vVb2qdGe7K+zP3ma8Pfk mg6tSyq6BtBXDYi/6/E5PqB6lUQ0y+AcQLBUhUDHiDV6T/w66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1NSyfiofUFZA1h0OPJ3oc54R7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjcwNWE3ZDAtNjQ0My0z ZDRmLTk0Y2ItNTRmMWE1YWVlY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVgmrau6lJQJda5w0N7wuIl75B6EFiLqqTFCn8Ygo2ubd+DUswYq4Ux NtPMO3sEqQBpSnq40rC1vDv6p7Ixv0Jb68aG6FlyfHqlfJ1DMNSFopcx4djHiTHa n9pIqK5sQn/xlNb8ZYmIH8dnlpVb7ZgmV744TwgcIi76wmV/ypCpgpt+GPbC7BB0 3WtdwV+DWRlFMqVlK4C/mE9fbrMrTh9aCkInDXRK7UFq4BfI7KPH6GaZA6rC9CwC FrKTW6pOrjEnZDT0CJyJ8CJjoDYv//UfN71nwNbdKTrz6xLNOnDEWley8MGI7JDd jlstmYni9PVc67o4qH5dPSOnFK5wvf8= -----END CERTIFICATE-----Generated at Mon May 5 12:24:04 2025 by rpki-client