$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0408aff6-2f6d-3c10-ab42-bb37a522dc45.roa File: 0408aff6-2f6d-3c10-ab42-bb37a522dc45.roa (raw, json) Hash identifier: 81TDglUNfyuvJbuv9wIGzHtS3tyxRYYKWiUsx1bWaj8= Subject key identifier: 31:2E:78:0D:53:67:FD:94:3F:62:CE:07:4F:15:41:96:14:4A:57:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F7152FDE7AF9F6B72A54BF68 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0408aff6-2f6d-3c10-ab42-bb37a522dc45.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 36183 IP address blocks: 172.224.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2f:de:7a:f9:f6:b7:2a:54:bf:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=3bd1d9e6-5c97-4c9d-b611-39f5d25c922e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:7c:36:23:60:81:ff:7b:8e:7d:6d:80:a7: 48:66:e4:7b:f6:5d:e2:b3:60:ed:a2:22:04:54:a6: 22:d3:1c:91:76:4f:a5:25:6a:c3:9c:1c:98:42:1e: af:18:68:3f:d0:e7:df:73:20:5c:7d:1d:12:c2:d1: db:9b:0c:17:6b:dd:77:e1:da:4a:cf:12:e4:4f:51: 62:5d:c8:bc:a8:de:60:f2:e8:57:b5:41:92:6c:b2: 0c:59:b6:9b:44:dc:49:e7:c5:2c:ec:0f:78:8a:d4: 2e:5e:ae:ea:4e:84:71:66:35:a6:ae:f3:39:4a:ee: 1a:0e:6d:96:42:c3:21:68:cb:0a:62:34:09:06:9e: 00:ab:df:ec:27:55:2c:30:b3:bc:99:6a:3d:da:a0: 50:bf:00:c9:59:1d:4f:e9:3c:0b:db:58:e9:c0:94: f7:3c:52:7c:c7:3c:1a:5b:42:35:5d:68:72:92:57: 67:7f:e2:ff:20:20:b6:49:ec:b3:c5:87:f9:22:b0: 0f:1c:ad:7e:05:42:7f:4f:9f:76:3c:cd:11:ac:b4: 50:f3:d4:6b:71:4c:ab:41:cd:b3:46:03:08:12:ca: 90:f0:57:77:b4:e7:5d:7a:b7:41:64:ad:06:87:ac: e6:ce:cb:f5:4d:48:d0:c3:a8:8a:b1:db:24:f5:3b: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:78:0D:53:67:FD:94:3F:62:CE:07:4F:15:41:96:14:4A:57:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0408aff6-2f6d-3c10-ab42-bb37a522dc45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:21:7e:a7:75:cc:4b:e1:b8:f5:69:ab:a7:c2:c0:8f:47:01: ae:ff:df:98:ac:62:b8:49:55:50:47:96:c6:f2:8f:16:77:51: 10:bb:d0:8d:de:bc:82:34:30:b0:56:be:fb:48:10:69:42:68: 62:4e:a8:00:ee:95:fc:0a:7b:a2:d3:8c:26:77:20:59:9d:5a: d6:d3:0b:f5:a1:e3:e4:29:94:3c:dc:42:d2:9a:18:4e:ae:3c: f8:47:27:1c:8b:a1:24:4b:8b:a4:19:b2:df:57:cd:68:76:80: 57:36:d0:c0:13:9a:b2:b6:e3:d1:ac:39:be:a9:ca:b4:cc:2a: 09:a0:00:b9:98:1b:8f:10:c2:03:96:7f:94:2f:85:c3:5e:eb: 03:37:ad:e7:8f:ef:46:0a:88:ad:a8:2e:63:31:66:a0:b6:09: 22:c9:74:b9:97:96:bb:dc:2a:5a:4e:41:79:7a:26:42:4e:c9: 92:bd:89:92:34:ec:a3:33:b4:d4:64:bc:c9:a7:26:ed:44:ee: 79:f1:fa:8b:1d:db:75:33:06:92:d4:1e:24:be:1f:5b:99:51: 09:6d:56:f8:1f:39:98:56:4c:64:3e:ee:fa:ae:46:96:ff:03: 27:55:3d:d3:7d:1f:68:2b:40:d6:ec:84:6e:ce:04:e8:77:1d: ed:ae:b5:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FS/eevn2typUv2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk M2JkMWQ5ZTYtNWM5Ny00YzlkLWI2MTEtMzlmNWQyNWM5MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm58NiNggf97jn1tgKdIZuR79l3is2DtoiIE VKYi0xyRdk+lJWrDnByYQh6vGGg/0OffcyBcfR0SwtHbmwwXa9134dpKzxLkT1Fi Xci8qN5g8uhXtUGSbLIMWbabRNxJ58Us7A94itQuXq7qToRxZjWmrvM5Su4aDm2W QsMhaMsKYjQJBp4Aq9/sJ1UsMLO8mWo92qBQvwDJWR1P6TwL21jpwJT3PFJ8xzwa W0I1XWhykldnf+L/ICC2SeyzxYf5IrAPHK1+BUJ/T592PM0RrLRQ89RrcUyrQc2z RgMIEsqQ8Fd3tOdderdBZK0Gh6zmzsv1TUjQw6iKsdsk9Tvw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEueA1TZ/2UP2LOB08VQZYUSlfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQwOGFmZjYtMmY2ZC0z YzEwLWFiNDItYmIzN2E1MjJkYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIshfqd1zEvhuPVpq6fCwI9HAa7/35isYrhJVVBHlsbyjxZ3URC70I3e vII0MLBWvvtIEGlCaGJOqADulfwKe6LTjCZ3IFmdWtbTC/Wh4+QplDzcQtKaGE6u PPhHJxyLoSRLi6QZst9XzWh2gFc20MATmrK249GsOb6pyrTMKgmgALmYG48QwgOW f5QvhcNe6wM3reeP70YKiK2oLmMxZqC2CSLJdLmXlrvcKlpOQXl6JkJOyZK9iZI0 7KMztNRkvMmnJu1E7nnx+osd23UzBpLUHiS+H1uZUQltVvgfOZhWTGQ+7vquRpb/ AydVPdN9H2grQNbshG7OBOh3He2utTs= -----END CERTIFICATE-----Generated at Sat Jun 7 19:16:29 2025 by rpki-client