$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca5a6c5-9398-327b-b211-f731d3821588.roa File: 0ca5a6c5-9398-327b-b211-f731d3821588.roa (raw, json) Hash identifier: El2qtpVbImVnIGDaBHKIbhLSAkUqB6rIZwhFZ+3R2q0= Subject key identifier: 4D:E4:3C:23:6D:A6:06:61:8A:DD:B4:2E:29:C8:C1:39:AB:6D:36:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E91FA2E454626AA0F96D4800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca5a6c5-9398-327b-b211-f731d3821588.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 12222 IP address blocks: 72.247.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a2:e4:54:62:6a:a0:f9:6d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=ddf0cd8b-7f9d-4d33-b016-c42fb4e6805a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:c3:4a:2a:e3:52:31:19:ad:d7:7b:7a:31: 19:ac:28:7a:d0:f6:b2:fe:c9:ce:b3:8f:96:4a:db: 3f:6b:24:cd:80:09:b9:e4:39:47:0a:cc:3b:33:d1: 35:e1:c1:8d:fe:cd:14:62:cc:68:9f:40:66:60:43: 94:22:1d:28:eb:23:cf:c0:f8:63:29:14:3e:11:34: 59:dc:57:3c:a1:4e:9d:fb:23:d9:4a:30:97:8c:9a: a5:b8:84:dd:e4:f1:08:fa:f1:aa:7a:a3:ce:0c:b5: 41:b1:33:ee:cb:3c:5b:7a:d3:55:53:fe:71:21:a9: 65:0c:b6:d5:9e:50:00:33:a2:b4:04:b0:8a:65:30: bc:c7:10:d0:3b:88:57:5b:17:b3:71:6e:a1:84:8d: cd:23:e9:ca:02:b4:20:91:eb:02:eb:4f:c6:7f:80: 08:b0:1c:27:91:fb:c9:4a:7a:d5:0e:e2:74:a6:39: b5:07:7a:4b:0b:2a:f9:b5:a3:52:af:15:8f:66:4a: b8:82:e4:ec:7e:ed:f6:8d:ac:1c:98:f0:3c:d9:19: b6:4e:df:24:1d:36:d3:5e:d3:89:3a:cb:5c:7c:eb: a0:25:ce:b8:27:28:d1:d4:45:a0:88:06:07:62:e4: fd:33:76:eb:e6:a1:94:31:86:f7:ab:8e:88:9a:33: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:3C:23:6D:A6:06:61:8A:DD:B4:2E:29:C8:C1:39:AB:6D:36:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca5a6c5-9398-327b-b211-f731d3821588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7c:ff:af:97:02:92:84:9c:f3:69:d7:dd:10:82:a8:75:bf: 29:3e:b9:7b:c3:4c:88:54:e5:ff:bc:fb:f9:42:06:26:c2:1c: c9:12:f1:b9:d4:70:8e:54:40:f9:cc:6f:a7:f2:02:1c:32:50: 81:de:4c:f3:5c:13:f6:ac:ba:57:88:72:f5:e0:fe:59:81:9c: 47:6d:00:36:c9:71:e7:31:bb:a1:62:94:04:d2:3f:bb:2d:f0: e5:76:77:c0:df:86:3d:b9:9e:c5:a8:4a:ae:d6:3a:bc:6a:ec: 61:e2:82:95:d4:6b:9a:54:f5:18:4e:a6:94:2c:ff:84:0c:2e: d7:0d:97:12:75:fc:b6:65:6b:90:cd:76:d3:7b:dc:df:ca:da: 7c:2f:ca:53:24:64:90:e6:07:1c:ba:18:fd:f2:a6:30:48:b4: ab:22:15:ff:ef:ac:d9:96:2e:c0:2e:86:dc:98:b7:c2:b5:4e: 6a:1e:c5:e0:a0:00:0e:32:4b:be:b7:37:22:af:02:0a:40:7b: 42:fd:ab:34:d7:8e:30:f9:c0:30:7e:03:d8:df:83:b7:09:d1: 67:03:27:16:67:1c:c9:3f:1e:5c:36:a0:7a:17:17:f8:87:4b: 09:c3:23:33:ee:1d:00:d4:d4:af:ac:01:02:ee:59:2b:45:3c: aa:a0:c7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6LkVGJqoPltSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZGRmMGNkOGItN2Y5ZC00ZDMzLWIwMTYtYzQyZmI0ZTY4MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhXDSirjUjEZrdd7ejEZrCh60Pay/snOs4+W Sts/ayTNgAm55DlHCsw7M9E14cGN/s0UYsxon0BmYEOUIh0o6yPPwPhjKRQ+ETRZ 3Fc8oU6d+yPZSjCXjJqluITd5PEI+vGqeqPODLVBsTPuyzxbetNVU/5xIallDLbV nlAAM6K0BLCKZTC8xxDQO4hXWxezcW6hhI3NI+nKArQgkesC60/Gf4AIsBwnkfvJ SnrVDuJ0pjm1B3pLCyr5taNSrxWPZkq4guTsfu32jawcmPA82Rm2Tt8kHTbTXtOJ OstcfOugJc64JyjR1EWgiAYHYuT9M3br5qGUMYb3q46ImjMiEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3kPCNtpgZhit20LinIwTmrbTa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNhNWE2YzUtOTM5OC0z MjdiLWIyMTEtZjczMWQzODIxNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh8/6+XApKEnPNp190Qgqh1vyk+uXvDTIhU5f+8+/lCBibCHMkS8bnU cI5UQPnMb6fyAhwyUIHeTPNcE/asuleIcvXg/lmBnEdtADbJcecxu6FilATSP7st 8OV2d8Dfhj25nsWoSq7WOrxq7GHigpXUa5pU9RhOppQs/4QMLtcNlxJ1/LZla5DN dtN73N/K2nwvylMkZJDmBxy6GP3ypjBItKsiFf/vrNmWLsAuhtyYt8K1TmoexeCg AA4yS763NyKvAgpAe0L9qzTXjjD5wDB+A9jfg7cJ0WcDJxZnHMk/Hlw2oHoXF/iH SwnDIzPuHQDU1K+sAQLuWStFPKqgx1k= -----END CERTIFICATE-----Generated at Sat Jun 7 15:31:07 2025 by rpki-client