$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa File: 1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa (raw, json) Hash identifier: gdueOJsCkgEeeTNOGdIeASVuBpIqoSgsyX7W5MkfCxc= Subject key identifier: DB:07:0C:D5:38:2A:1E:88:DC:6A:DA:7C:6B:A2:99:D9:4E:A9:BE:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A7FBBC55DEB884CA87300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.235.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7f:bb:c5:5d:eb:88:4c:a8:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=837e0797-67de-4ffb-b873-6c63a5ef8f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:23:27:61:c9:42:9c:59:35:4e:ff:fa:61: 05:c7:f4:b4:8d:c5:9d:f9:e1:f3:c2:42:e0:af:3a: ec:0c:bf:ca:ab:c8:ab:14:54:62:e5:04:35:22:40: 76:c4:c5:1d:03:19:17:5a:06:d2:77:ac:13:4c:8b: c8:45:91:a2:93:bb:10:1e:fd:f7:5a:05:a5:39:38: ea:93:10:32:3c:90:d7:6e:c9:a4:21:49:a7:c7:79: 77:e0:4f:0d:33:a0:0b:88:fe:33:d0:09:55:2e:ec: db:16:93:0a:e5:88:c1:90:ca:29:5d:80:ac:08:52: 08:39:46:10:a2:c3:57:f5:f2:75:57:27:7e:6e:cf: 59:c6:1b:ef:7f:f5:05:58:9e:b4:8b:b8:9d:74:bf: f7:92:e5:41:2f:01:c6:46:08:1f:ad:24:b8:22:74: 9f:4a:40:82:d6:64:f7:6c:35:83:b4:97:a7:d0:b6: d1:a2:ec:5a:84:68:21:a7:60:45:37:5d:e6:e1:fb: 98:3f:5a:be:cf:ce:36:b3:bb:bc:10:5f:01:df:2e: 37:ec:39:94:2a:e2:90:e7:9e:36:08:7d:e2:2e:fa: f1:e9:b2:23:9a:25:50:29:2f:e8:da:65:fe:7a:07: d9:a7:17:31:9f:a0:02:bc:c5:04:51:3b:80:47:06: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:07:0C:D5:38:2A:1E:88:DC:6A:DA:7C:6B:A2:99:D9:4E:A9:BE:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4a:f6:f2:d6:7f:19:48:f6:e5:39:0f:b2:57:dd:11:88:58: 29:d0:4a:5d:5d:4e:07:05:8a:0e:e2:a5:cd:ba:75:3e:b8:ae: 38:fd:f6:dd:54:4f:e6:c3:6e:36:fe:90:ee:ee:1c:f6:e1:f3: 65:a4:e2:dc:0f:95:0b:72:01:54:97:ae:c7:83:db:b6:e6:8a: 12:76:3a:86:44:9c:6b:32:a9:bd:7b:52:ed:55:9f:85:2c:d5: ea:a4:0a:88:ee:44:bd:ee:eb:2e:a2:8f:6d:fb:d8:08:3f:b3: 77:fd:ac:d5:49:df:9f:9e:80:c9:e7:89:ba:50:81:d9:5a:3f: e3:92:db:65:fc:32:1d:43:29:64:35:28:2d:ab:bc:d9:9b:cc: 6e:a9:d1:f9:e2:40:cb:f6:58:4f:49:81:a5:39:1d:2c:59:38: 52:30:55:01:0a:eb:a4:f3:3f:80:33:96:3d:c7:5a:59:61:88: 90:59:cc:aa:a0:06:55:22:19:bb:f8:5d:c8:7c:e1:19:f1:e0: 7f:fd:9f:fa:57:46:40:39:bb:9b:d5:4b:f7:e4:05:d4:1a:d5: 08:6a:30:a9:a8:78:03:ea:3b:b9:78:f0:c8:a7:d1:81:4c:74: 42:78:a2:5c:94:ec:db:11:75:52:76:a2:d9:5c:7e:e8:14:cf: 0b:29:2a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn+7xV3riEyocwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ODM3ZTA3OTctNjdkZS00ZmZiLWI4NzMtNmM2M2E1ZWY4ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdMjJ2HJQpxZNU7/+mEFx/S0jcWd+eHzwkLg rzrsDL/Kq8irFFRi5QQ1IkB2xMUdAxkXWgbSd6wTTIvIRZGik7sQHv33WgWlOTjq kxAyPJDXbsmkIUmnx3l34E8NM6ALiP4z0AlVLuzbFpMK5YjBkMopXYCsCFIIOUYQ osNX9fJ1Vyd+bs9Zxhvvf/UFWJ60i7iddL/3kuVBLwHGRggfrSS4InSfSkCC1mT3 bDWDtJen0LbRouxahGghp2BFN13m4fuYP1q+z842s7u8EF8B3y437DmUKuKQ5542 CH3iLvrx6bIjmiVQKS/o2mX+egfZpxcxn6ACvMUEUTuARwYohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsHDNU4Kh6I3GrafGuimdlOqb6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI4YThkYTgtMTJmZi0z OTg2LWExMGMtYzk1NWVkMDdhNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9K9vLWfxlI9uU5D7JX3RGIWCnQSl1dTgcFig7ipc26dT64rjj99t1U T+bDbjb+kO7uHPbh82Wk4twPlQtyAVSXrseD27bmihJ2OoZEnGsyqb17Uu1Vn4Us 1eqkCojuRL3u6y6ij2372Ag/s3f9rNVJ35+egMnnibpQgdlaP+OS22X8Mh1DKWQ1 KC2rvNmbzG6p0fniQMv2WE9JgaU5HSxZOFIwVQEK66TzP4Azlj3HWllhiJBZzKqg BlUiGbv4Xch84Rnx4H/9n/pXRkA5u5vVS/fkBdQa1QhqMKmoeAPqO7l48Min0YFM dEJ4olyU7NsRdVJ2otlcfugUzwspKj4= -----END CERTIFICATE-----Generated at Sat Jun 7 13:43:16 2025 by rpki-client