$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/b37b34ae-b73f-3ff3-af36-ab15516a4e38.roa File: b37b34ae-b73f-3ff3-af36-ab15516a4e38.roa (raw, json) Hash identifier: 57P9OVMPyatZ09/ku578hsjfYyJP0ReXDrK90WMFfgY= Subject key identifier: C3:36:52:1D:12:0E:5B:BD:B8:C4:49:CB:BC:F1:90:31:15:CD:36:C0 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584A066FE6A07CC8E1D2B7A2D200 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/b37b34ae-b73f-3ff3-af36-ab15516a4e38.roa Signing time: Fri 30 May 2025 13:01:03 +0000 ROA not before: Fri 30 May 2025 13:01:03 +0000 ROA not after: Thu 28 Aug 2025 13:01:03 +0000 asID: 150436 IP address blocks: 71.18.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6f:e6:a0:7c:c8:e1:d2:b7:a2:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: May 30 13:01:03 2025 GMT Not After : Aug 28 13:01:03 2025 GMT Subject: CN=cc552cd7-5011-496c-8814-3f980bd49f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:ff:f7:bd:98:7e:e0:60:d2:a4:15:f9:ba: 6f:e0:d8:83:db:f6:5a:57:4e:78:50:2a:08:26:c7: a6:bd:25:63:9b:2a:0e:59:e8:da:98:16:7f:43:89: a5:20:f2:69:3d:4a:df:af:36:dc:30:96:7a:bd:6a: b3:84:68:5c:fb:0e:e7:0a:fe:81:37:b8:bf:5d:30: 79:0c:f2:3a:1d:5c:4c:03:8e:4f:01:d5:e3:92:3c: 3d:6a:6d:b4:3b:4e:b0:a4:ec:3f:17:03:bc:47:84: 13:7a:82:81:3b:62:03:e5:c3:b3:b7:24:90:2b:71: 90:36:8a:ec:91:c5:72:55:75:cf:49:df:3c:2b:1d: 7c:e5:1f:ff:83:06:c8:d7:15:f4:b3:df:64:fb:f6: 0d:f1:26:99:39:30:fc:37:a1:a7:88:cc:5c:4a:68: d4:13:ed:af:15:b4:1e:8f:88:45:10:71:fc:a6:fa: 63:5f:00:84:bc:34:d8:1a:47:49:13:dc:0d:a8:44: 75:ca:9e:ec:66:8f:b6:f2:7c:f7:59:16:f5:27:ed: 03:af:e9:84:44:cc:39:fd:89:da:2b:0c:3f:01:0f: a7:4c:4c:81:a5:ff:5f:87:f6:f8:33:fb:96:e9:29: c2:76:9a:16:58:3d:46:a5:7a:14:d2:a7:4d:56:bc: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:52:1D:12:0E:5B:BD:B8:C4:49:CB:BC:F1:90:31:15:CD:36:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/b37b34ae-b73f-3ff3-af36-ab15516a4e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f4:a1:a0:af:5d:73:56:9c:ef:03:14:24:60:4c:20:cc:b5: 04:15:d6:16:eb:0c:99:bb:94:65:ba:89:c0:c0:b9:38:4d:53: b6:0f:65:af:06:e9:20:0f:36:8b:1b:6e:ad:07:d1:f6:26:f8: aa:56:21:35:3a:33:63:5f:d5:6d:bc:a0:fc:43:6d:e8:de:cf: e4:0d:09:62:83:70:d1:bb:25:e8:20:1e:1f:40:a3:0a:c5:7b: ee:1f:06:94:86:a7:8b:c3:39:4e:54:9e:7b:cb:8a:5a:42:5f: 08:f1:63:f4:d5:de:bb:35:02:41:03:97:b8:91:09:89:05:f3: fe:0d:73:a2:bf:12:a7:01:af:f0:bf:df:22:76:27:ae:27:44: 10:ac:c2:58:d4:b6:11:7a:a4:05:d9:10:11:fe:ff:4a:77:b2: fc:47:be:a9:89:d7:f2:17:6a:c7:06:a7:78:4a:c0:86:f4:0f: 26:74:d0:70:45:d5:1e:31:3a:90:52:9d:06:9f:54:4e:d7:d2: 45:4e:68:44:76:50:ef:25:b2:e6:fc:e3:a7:40:ca:0c:2b:cf: a8:35:1f:9e:5b:34:c5:b8:5b:79:23:1e:16:b9:75:7e:68:14: 64:be:8a:cf:0e:0c:30:42:0b:40:7d:2a:2d:54:85:d3:27:88: 2b:ad:e7:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGb+agfMjh0rei0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDUzMDEzMDEwM1oXDTI1MDgyODEzMDEwM1owLzEtMCsGA1UEAxMk Y2M1NTJjZDctNTAxMS00OTZjLTg4MTQtM2Y5ODBiZDQ5ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl3/972YfuBg0qQV+bpv4NiD2/ZaV054UCoI JsemvSVjmyoOWejamBZ/Q4mlIPJpPUrfrzbcMJZ6vWqzhGhc+w7nCv6BN7i/XTB5 DPI6HVxMA45PAdXjkjw9am20O06wpOw/FwO8R4QTeoKBO2ID5cOztySQK3GQNors kcVyVXXPSd88Kx185R//gwbI1xX0s99k+/YN8SaZOTD8N6GniMxcSmjUE+2vFbQe j4hFEHH8pvpjXwCEvDTYGkdJE9wNqER1yp7sZo+28nz3WRb1J+0Dr+mERMw5/Yna Kww/AQ+nTEyBpf9fh/b4M/uW6SnCdpoWWD1GpXoU0qdNVrwHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM2Uh0SDlu9uMRJy7zxkDEVzTbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYjM3YjM0YWUtYjczZi0z ZmYzLWFmMzYtYWIxNTUxNmE0ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL0oaCvXXNWnO8DFCRgTCDMtQQV1hbrDJm7lGW6icDAuThNU7YPZa8G 6SAPNosbbq0H0fYm+KpWITU6M2Nf1W28oPxDbejez+QNCWKDcNG7JeggHh9AowrF e+4fBpSGp4vDOU5UnnvLilpCXwjxY/TV3rs1AkEDl7iRCYkF8/4Nc6K/EqcBr/C/ 3yJ2J64nRBCswljUthF6pAXZEBH+/0p3svxHvqmJ1/IXascGp3hKwIb0DyZ00HBF 1R4xOpBSnQafVE7X0kVOaER2UO8lsub846dAygwrz6g1H55bNMW4W3kjHha5dX5o FGS+is8ODDBCC0B9Ki1UhdMniCut57g= -----END CERTIFICATE-----Generated at Sat Jun 7 13:57:19 2025 by rpki-client