$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1735af5e-fc8a-37cd-8978-7b307f6a4d97.roa File: 1735af5e-fc8a-37cd-8978-7b307f6a4d97.roa (raw, json) Hash identifier: CwoJAq9xnR6UjUCYMG8mq8ErNfaKRmc+gH8J35pV3Jc= Subject key identifier: 3C:5A:86:33:13:35:10:C2:F4:53:0D:5B:20:A4:70:CE:01:86:26:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A54F1C57071B03C6D9FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1735af5e-fc8a-37cd-8978-7b307f6a4d97.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 63949 IP address blocks: 172.236.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4f:1c:57:07:1b:03:c6:d9:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=4f7f47d8-ca7b-42a8-962e-3be4e9d8783b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:46:69:e7:08:19:9d:2e:9c:88:f6:2e:99: 81:fb:f5:69:d1:7c:5b:3f:87:4a:07:9f:0c:97:d1: f4:70:4a:b4:23:d0:73:a5:60:d3:fb:67:dc:2b:72: 94:4f:77:b4:65:a7:00:9b:2d:39:ec:53:c8:00:d2: 16:c8:43:5e:08:41:92:df:44:33:4e:68:75:90:48: 47:ec:49:6e:05:47:b3:a7:9e:88:c6:b4:b5:c1:99: e0:21:b9:e3:11:8e:81:79:57:ce:04:0b:8f:ed:1b: f3:d4:68:23:70:50:0e:67:20:02:69:38:5c:65:9e: 8e:dd:16:e1:1b:e9:b6:f1:31:b8:bc:4b:db:0e:79: 28:f3:cc:b7:2e:f9:44:22:57:80:03:d2:81:8a:ff: af:73:05:8d:66:fb:6e:d1:8c:01:ff:1b:4e:71:c2: 86:d2:e8:76:59:b9:b7:e2:dc:f5:eb:48:b4:98:85: e4:56:c1:3a:a7:18:e7:5a:40:57:12:b6:62:87:e9: 83:60:64:59:d5:96:f2:d0:a9:43:37:6d:7f:d4:97: 04:94:6a:f6:38:f7:9c:c7:d6:ca:b9:d5:12:8c:36: a6:11:18:3d:ee:75:3e:c7:1c:a1:12:f6:d8:d2:2c: 78:76:7a:00:d9:0f:49:7a:4f:e1:71:a4:74:90:4d: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5A:86:33:13:35:10:C2:F4:53:0D:5B:20:A4:70:CE:01:86:26:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1735af5e-fc8a-37cd-8978-7b307f6a4d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:53:1f:a6:7f:a0:b9:b3:fc:3c:9b:da:c1:c9:3b:4e:60:a3: 1d:23:7c:d0:9e:17:84:50:a7:be:07:93:49:36:ab:3b:9e:c3: 88:59:1a:d6:0e:99:90:6a:ba:47:2f:9a:27:be:2a:fd:c0:43: 35:c3:7b:78:e6:a6:bf:40:31:d0:86:a6:9c:88:93:4f:ab:ba: e4:73:02:51:b4:24:90:50:06:ee:87:50:d5:af:95:21:d6:70: be:6b:10:7a:53:1e:93:a7:94:48:d2:60:01:8d:e5:cb:d0:85: ae:67:fb:48:fc:50:65:6c:b8:c8:0e:ba:7c:f9:34:0c:9e:49: 27:ca:b3:92:9c:13:f9:ae:cd:a5:36:68:29:c1:8b:e1:85:52: 4a:66:24:62:e1:ec:0c:9c:a8:67:18:22:12:36:48:f2:5a:9f: 95:0f:ca:94:83:09:1c:81:17:c6:44:32:d6:f5:4d:11:53:c3: ea:63:98:37:6f:87:d5:4a:73:70:8b:3d:de:e8:ae:fe:cb:b8: 22:c4:bd:7d:41:f5:d2:46:e2:23:3a:ec:c9:18:cf:f1:18:e5: 42:11:89:06:70:d7:81:5f:18:1b:5f:56:60:d2:e5:98:58:7a: de:3f:f9:52:52:b7:e5:e5:7b:0d:e3:e8:50:f9:c2:ce:08:4c: be:a0:a0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpU8cVwcbA8bZ/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NGY3ZjQ3ZDgtY2E3Yi00MmE4LTk2MmUtM2JlNGU5ZDg3ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJlGaecIGZ0unIj2LpmB+/Vp0XxbP4dKB58M l9H0cEq0I9BzpWDT+2fcK3KUT3e0ZacAmy057FPIANIWyENeCEGS30QzTmh1kEhH 7EluBUezp56IxrS1wZngIbnjEY6BeVfOBAuP7Rvz1GgjcFAOZyACaThcZZ6O3Rbh G+m28TG4vEvbDnko88y3LvlEIleAA9KBiv+vcwWNZvtu0YwB/xtOccKG0uh2Wbm3 4tz160i0mIXkVsE6pxjnWkBXErZih+mDYGRZ1Zby0KlDN21/1JcElGr2OPecx9bK udUSjDamERg97nU+xxyhEvbY0ix4dnoA2Q9Jek/hcaR0kE0kFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxahjMTNRDC9FMNWyCkcM4BhiaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTczNWFmNWUtZmM4YS0z N2NkLTg5NzgtN2IzMDdmNmE0ZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5TH6Z/oLmz/Dyb2sHJO05gox0jfNCeF4RQp74Hk0k2qzuew4hZGtYO mZBqukcvmie+Kv3AQzXDe3jmpr9AMdCGppyIk0+ruuRzAlG0JJBQBu6HUNWvlSHW cL5rEHpTHpOnlEjSYAGN5cvQha5n+0j8UGVsuMgOunz5NAyeSSfKs5KcE/muzaU2 aCnBi+GFUkpmJGLh7AycqGcYIhI2SPJan5UPypSDCRyBF8ZEMtb1TRFTw+pjmDdv h9VKc3CLPd7orv7LuCLEvX1B9dJG4iM67MkYz/EY5UIRiQZw14FfGBtfVmDS5ZhY et4/+VJSt+Xlew3j6FD5ws4ITL6goOE= -----END CERTIFICATE-----Generated at Sun Jun 8 06:09:51 2025 by rpki-client