$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa File: d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa (raw, json) Hash identifier: 2XaP9PTuAJdgCG3L2Pn6uxVJzgnD9ozhWlPDq21zWRM= Subject key identifier: AA:14:7D:97:43:36:92:E8:2D:2F:F3:CB:B3:3F:09:4F:83:6B:05:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490E16D2D0C276132B6AA71290 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 173.222.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:d2:d0:c2:76:13:2b:6a:a7:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=0b2df94f-5682-43f1-b566-2c53da54e3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:31:fa:4c:24:67:eb:eb:c5:e8:ac:f9:1c: 09:f6:b2:cd:f5:2a:8e:86:36:dc:20:43:4d:3c:df: f5:72:49:44:fa:f6:f5:9e:ac:1b:68:5d:e6:a4:b5: e5:24:55:c0:62:8c:0d:0f:62:3c:5c:bb:8a:31:0d: aa:80:8a:78:05:22:a9:cc:69:82:6f:5c:25:0e:8b: ad:93:b0:f9:8e:f3:46:2f:72:2f:11:c9:de:25:ce: aa:f7:51:e5:1a:48:f2:8e:27:fb:63:c7:dd:f7:9f: 09:6b:1f:61:91:a6:e0:36:28:79:53:f2:9d:d2:91: 5a:c5:dc:af:b5:41:ca:4a:44:4f:bc:bf:fa:d6:eb: 03:60:53:46:a9:4f:91:01:0c:37:ed:b7:1d:a5:a4: f6:4f:7e:42:d9:23:0e:87:95:c0:76:25:a1:36:99: 36:1e:e9:d1:1b:a6:19:46:98:97:30:33:de:c2:c3: fa:0d:e0:d4:c9:e8:da:9e:a5:cf:6f:52:68:21:72: 8a:fa:8c:5a:c5:6a:fc:16:24:0d:60:4a:1f:8c:0e: 0c:46:e0:a7:09:de:83:bf:a1:f6:fd:79:1d:93:69: 1c:3d:8f:fe:80:0c:87:29:c8:30:b0:1b:f4:9c:26: ea:3b:5b:58:69:6e:03:6a:b4:e8:36:f5:17:e2:17: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:14:7D:97:43:36:92:E8:2D:2F:F3:CB:B3:3F:09:4F:83:6B:05:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e3:03:e3:35:a4:7c:ef:a9:a6:a8:7c:0c:28:fa:c7:0a:b9: 36:47:8c:d8:c7:26:56:fa:1c:d0:48:28:3f:77:44:63:8f:e8: 29:ec:e0:10:b2:72:9f:3b:f4:f7:61:9c:47:36:ee:db:9b:a6: cf:03:4f:70:1c:bc:2d:da:99:8d:2b:d0:a7:0c:a7:fc:9d:3e: 74:8d:fc:a5:8f:e2:f8:d7:a5:e5:0b:38:f8:0c:7a:b2:39:2e: 90:cf:43:67:58:60:d2:10:ae:8a:f2:6c:89:a3:71:2e:bf:f1: 66:7a:41:dd:db:e8:74:99:3d:c4:fa:8d:80:5d:b8:00:8f:b5: 7d:fd:c8:5d:dd:66:12:ba:cd:22:cd:ab:bf:74:34:84:b5:ff: f7:b9:df:6b:3c:07:09:16:00:ca:6a:ad:e8:87:56:a0:e1:5a: 7e:8a:6a:46:dd:ce:f9:69:db:51:e7:16:a0:dc:68:52:83:39: f9:90:e3:6f:7b:66:6d:84:98:3d:a2:50:44:61:c5:f5:0e:f2: 23:ab:38:90:ca:cf:32:45:5e:06:01:e1:9a:d8:d0:95:e6:32: ff:8c:1a:55:b1:1f:1d:a8:43:c6:56:6d:84:7f:08:b9:f9:08: 54:a3:0f:e1:82:fc:e2:23:e1:db:17:cc:92:46:62:a8:24:ca: 46:07:1f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFtLQwnYTK2qnEpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MGIyZGY5NGYtNTY4Mi00M2YxLWI1NjYtMmM1M2RhNTRlM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDwx+kwkZ+vrxeis+RwJ9rLN9SqOhjbcIENN PN/1cklE+vb1nqwbaF3mpLXlJFXAYowND2I8XLuKMQ2qgIp4BSKpzGmCb1wlDout k7D5jvNGL3IvEcneJc6q91HlGkjyjif7Y8fd958Jax9hkabgNih5U/Kd0pFaxdyv tUHKSkRPvL/61usDYFNGqU+RAQw37bcdpaT2T35C2SMOh5XAdiWhNpk2HunRG6YZ RpiXMDPewsP6DeDUyejanqXPb1JoIXKK+oxaxWr8FiQNYEofjA4MRuCnCd6Dv6H2 /Xkdk2kcPY/+gAyHKcgwsBv0nCbqO1tYaW4DarToNvUX4hcCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoUfZdDNpLoLS/zy7M/CU+DawWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJlY2IxOGYtMzBlMC0z MmYxLWJjZmItNjY0YTQyMjBlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7jA+M1pHzvqaaofAwo+scKuTZHjNjHJlb6HNBIKD93RGOP6Cns4BCy cp879PdhnEc27tubps8DT3AcvC3amY0r0KcMp/ydPnSN/KWP4vjXpeULOPgMerI5 LpDPQ2dYYNIQrorybImjcS6/8WZ6Qd3b6HSZPcT6jYBduACPtX39yF3dZhK6zSLN q790NIS1//e532s8BwkWAMpqreiHVqDhWn6Kakbdzvlp21HnFqDcaFKDOfmQ4297 Zm2EmD2iUERhxfUO8iOrOJDKzzJFXgYB4ZrY0JXmMv+MGlWxHx2oQ8ZWbYR/CLn5 CFSjD+GC/OIj4dsXzJJGYqgkykYHH7I= -----END CERTIFICATE-----Generated at Wed May 7 01:22:12 2025 by rpki-client