$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa File: f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (raw, json) Hash identifier: hDMr+hG9poIY8q10cxPeI/lb3Y2/IiJvqNefh1XBPHQ= Subject key identifier: 9D:FA:FD:8D:CF:20:57:4C:1E:7B:1A:11:90:38:90:28:75:A1:65:1B Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F43285849F7151023A5B2B7E14208CD60 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 262287 IP address blocks: 172.111.12.0/22 maxlen: 24 204.9.36.0/23 maxlen: 24 204.9.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:10:23:a5:b2:b7:e1:42:08:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=409386e0-988d-47e9-91c5-3d6ac6def13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:6d:9d:19:bf:ee:9a:b9:da:2a:63:97:b8: 85:92:c7:75:ea:8e:57:63:76:26:37:db:b2:96:2d: 9b:9e:5c:27:8f:c9:9f:79:06:2e:3b:a5:5b:46:24: 44:ae:bb:34:18:f5:03:99:1b:8c:9d:da:ed:94:53: ed:3b:78:95:30:86:21:bd:18:ce:75:a7:3f:ba:ae: 1d:f8:d9:6c:f9:a8:bf:13:27:91:5e:b3:6e:07:36: d7:dc:08:ef:df:27:03:b8:2e:c4:47:fd:4d:8d:35: be:f7:ab:66:e7:da:19:03:e7:ca:fe:a0:9d:67:64: d2:8a:af:62:00:76:91:3b:44:14:d3:b0:c6:1a:42: ae:aa:b1:7a:26:71:c8:3e:16:ba:f3:71:60:d3:b6: 9e:90:8e:64:44:7e:c0:53:95:fa:29:9e:58:0d:e7: d4:11:85:84:59:0a:58:47:2b:dc:b3:ac:22:bb:cb: da:14:ca:9e:08:a4:52:a5:1f:91:80:c5:07:7d:d5: e2:70:4f:b7:78:9d:b5:38:cd:d8:ce:3e:6f:9e:b7: 02:d7:1f:49:af:e6:5f:78:9d:02:e8:cf:33:40:56: 1e:d7:ce:89:fe:10:aa:ec:9c:e3:5b:cb:b1:95:a6: d3:ab:ac:9e:d5:9f:b8:70:bb:f1:76:45:37:78:0e: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FA:FD:8D:CF:20:57:4C:1E:7B:1A:11:90:38:90:28:75:A1:65:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 172.111.12.0/22 204.9.36.0-204.9.38.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6e:f6:7f:29:0f:9e:9c:9a:6b:0a:1d:fc:76:03:54:7b:ae: 4a:ed:84:2d:51:07:dc:f7:49:f4:ba:c7:86:14:63:3a:55:57: 78:98:e0:9d:e1:75:75:86:72:ea:3a:49:7c:f8:82:06:3b:8a: cf:49:ba:f4:3c:37:b1:3d:81:31:39:b3:2a:3f:66:ad:41:8b: 2e:78:58:b5:94:19:29:3f:54:85:f4:b7:d8:3c:1b:8a:40:3d: e3:91:df:d2:cb:59:4b:4c:21:8c:a0:96:51:a9:0b:57:49:84: 03:25:3e:73:dd:83:8d:35:9c:ea:aa:83:bd:cc:52:b1:ea:b7: 64:1d:e4:46:8b:66:0e:81:15:43:2f:0c:0a:89:e7:d7:c1:a8: e3:5d:31:ad:71:79:ba:83:9c:2f:5c:34:2b:0b:f5:58:a1:a4: 0a:d2:fa:aa:d0:a2:1c:82:1c:04:0a:0f:a0:c0:55:07:0a:ac: ad:97:e3:55:ef:f0:5e:38:b7:d8:5a:30:6a:e3:10:e3:24:99: 9a:a6:03:e0:44:43:65:0d:df:e3:1d:34:c7:ae:15:ce:43:2b: 43:c4:31:c9:03:0a:2e:08:a4:47:86:bc:e9:4a:66:9b:3d:b7: be:39:49:ae:41:f8:8c:a5:85:d1:78:75:b0:63:1c:97:da:12: da:8f:b8:22 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEn3FRAjpbK34UIIzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NDA5Mzg2ZTAtOTg4ZC00N2U5LTkxYzUtM2Q2YWM2ZGVmMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwBtnRm/7pq52ipjl7iFksd16o5XY3YmN9uy li2bnlwnj8mfeQYuO6VbRiRErrs0GPUDmRuMndrtlFPtO3iVMIYhvRjOdac/uq4d +Nls+ai/EyeRXrNuBzbX3Ajv3ycDuC7ER/1NjTW+96tm59oZA+fK/qCdZ2TSiq9i AHaRO0QU07DGGkKuqrF6JnHIPha683Fg07aekI5kRH7AU5X6KZ5YDefUEYWEWQpY Ryvcs6wiu8vaFMqeCKRSpR+RgMUHfdXicE+3eJ21OM3Yzj5vnrcC1x9Jr+ZfeJ0C 6M8zQFYe186J/hCq7JzjW8uxlabTq6ye1Z+4cLvxdkU3eA4q/wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFJ36/Y3PIFdMHnsaEZA4kCh1oWUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvZjVhYzU1YWMtZjgxMC0z NTQ0LTkwYjUtOGY2Nzk1YzY1Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCrG8MMAwD BALMCSQDBADMCSYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAbW72fykPnpyaawod/HYDVHuuSu2ELVEH3PdJ 9LrHhhRjOlVXeJjgneF1dYZy6jpJfPiCBjuKz0m69Dw3sT2BMTmzKj9mrUGLLnhY tZQZKT9UhfS32DwbikA945Hf0stZS0whjKCWUakLV0mEAyU+c92DjTWc6qqDvcxS seq3ZB3kRotmDoEVQy8MConn18Go410xrXF5uoOcL1w0Kwv1WKGkCtL6qtCiHIIc BAoPoMBVBwqsrZfjVe/wXji32FowauMQ4ySZmqYD4ERDZQ3f4x00x64VzkMrQ8Qx yQMKLgikR4a86Upmmz23vjlJrkH4jKWF0Xh1sGMcl9oS2o+4Ig== -----END CERTIFICATE-----Generated at Fri Jun 6 13:40:26 2025 by rpki-client