$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa File: 0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa (raw, json) Hash identifier: drCzfCTs9f5Gu2bU1QKGtCl9PpLc6PDy7c/dw5VW4ug= Subject key identifier: 30:B6:5E:7C:10:E1:90:E3:9E:23:8C:AE:54:E2:ED:32:25:7A:63:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D4312C305BFCAA056EF23780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.224.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:2c:30:5b:fc:aa:05:6e:f2:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9320b8d6-2fb3-4886-a038-9e0e515df0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:6f:36:0d:93:25:14:98:5f:48:2d:54:45: 34:2b:e3:9a:03:65:ff:68:2a:f2:fa:ce:3b:01:67: ef:26:4f:f9:11:18:22:cd:6c:4b:47:5b:94:4c:b6: 5f:2f:73:50:00:fd:23:b8:5c:d5:24:ac:b7:78:12: 96:30:ed:e9:b5:10:51:ee:8f:d8:09:ad:33:b2:d9: a9:ea:5d:88:58:bf:1b:16:b2:ec:3f:24:55:49:c3: 5d:4e:4b:46:1c:45:f5:0f:1d:7b:88:73:b8:4e:f1: 1d:f4:2e:aa:ef:1f:7a:6a:16:0f:49:24:d4:c1:37: 75:0f:52:e9:d5:86:05:7b:c7:52:51:0c:4e:ce:de: 58:21:1d:39:b6:19:b0:ce:87:44:c8:b3:08:e2:37: a5:58:61:b0:1a:63:74:1c:43:1b:2e:e8:9b:62:8e: 72:ad:24:07:16:07:b3:b1:75:4c:c0:de:9a:97:74: 0d:64:db:53:0a:07:03:35:ef:eb:df:88:73:0d:23: 1c:a7:52:c0:c3:89:19:3c:69:f9:33:24:44:61:cb: 4f:ce:a5:18:6e:72:c9:d2:99:b4:13:f9:96:32:9d: d9:f1:87:98:2c:c9:0c:99:82:70:7b:53:b4:85:d5: e4:4b:2e:c3:8b:8a:d6:1a:53:14:68:f3:a1:9f:dc: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B6:5E:7C:10:E1:90:E3:9E:23:8C:AE:54:E2:ED:32:25:7A:63:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ac:10:ba:81:c5:4f:6d:f4:3a:42:f0:fe:49:35:ba:9e:ec: e6:c0:d5:c0:be:c2:06:fb:d7:3f:2b:3e:fb:f1:6a:f7:e0:34: 88:8a:9d:62:2b:c7:81:cb:b7:5b:b3:cd:00:40:7c:c1:f4:15: fe:d1:37:4a:a1:d3:a5:a6:b9:ba:37:9c:83:bc:62:00:be:e5: a9:2c:ed:6f:04:10:a7:c9:92:25:ff:6f:b3:66:b9:58:de:05: a6:cb:9d:70:f1:01:f3:7b:de:29:f2:fb:02:dd:98:b9:32:e2: a8:ce:04:fa:ae:5f:6f:e5:2d:ed:f5:c3:35:f9:28:63:98:52: 85:38:2b:b3:16:1c:c9:da:0e:91:a0:6c:7e:8a:38:18:51:73: 07:79:cb:70:03:8c:41:18:0a:b6:09:15:92:27:e4:45:a3:6e: c9:04:de:6f:19:b1:eb:a6:f4:f4:da:9c:fa:a6:ac:f1:df:69: be:d2:80:88:34:ab:76:9d:2a:79:e3:6c:ab:d2:a4:d2:6b:86: cb:d8:cf:2c:88:30:0d:67:b7:7d:c2:3a:b3:31:75:68:c0:c1: 24:9e:42:29:92:ed:f0:86:a8:1c:40:3a:2e:4f:6b:8c:4c:9f: 79:12:87:30:0c:7a:15:91:cf:f6:a6:4d:f8:71:b0:ce:ef:22: 7e:ff:aa:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSwwW/yqBW7yN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTMyMGI4ZDYtMmZiMy00ODg2LWEwMzgtOWUwZTUxNWRmMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWZvNg2TJRSYX0gtVEU0K+OaA2X/aCry+s47 AWfvJk/5ERgizWxLR1uUTLZfL3NQAP0juFzVJKy3eBKWMO3ptRBR7o/YCa0zstmp 6l2IWL8bFrLsPyRVScNdTktGHEX1Dx17iHO4TvEd9C6q7x96ahYPSSTUwTd1D1Lp 1YYFe8dSUQxOzt5YIR05thmwzodEyLMI4jelWGGwGmN0HEMbLuibYo5yrSQHFgez sXVMwN6al3QNZNtTCgcDNe/r34hzDSMcp1LAw4kZPGn5MyREYctPzqUYbnLJ0pm0 E/mWMp3Z8YeYLMkMmYJwe1O0hdXkSy7Di4rWGlMUaPOhn9xMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC2XnwQ4ZDjniOMrlTi7TIlemM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGI2MWY5OGYtNjFkYi0z ZjBlLWFhMjItMzQ1OWU5ZjQ5Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADesELqBxU9t9DpC8P5JNbqe7ObA1cC+wgb71z8rPvvxavfgNIiKnWIr x4HLt1uzzQBAfMH0Ff7RN0qh06Wmubo3nIO8YgC+5aks7W8EEKfJkiX/b7NmuVje BabLnXDxAfN73iny+wLdmLky4qjOBPquX2/lLe31wzX5KGOYUoU4K7MWHMnaDpGg bH6KOBhRcwd5y3ADjEEYCrYJFZIn5EWjbskE3m8Zseum9PTanPqmrPHfab7SgIg0 q3adKnnjbKvSpNJrhsvYzyyIMA1nt33COrMxdWjAwSSeQimS7fCGqBxAOi5Pa4xM n3kShzAMehWRz/amTfhxsM7vIn7/qno= -----END CERTIFICATE-----Generated at Sat Jun 7 18:40:05 2025 by rpki-client