$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/235016bc-1e98-3eea-88de-2f0ecf20a455.roa File: 235016bc-1e98-3eea-88de-2f0ecf20a455.roa (raw, json) Hash identifier: J1dyCT4InSY0e4fxC3cw0K+73lD7Wyli7QX/0RlUHEY= Subject key identifier: 8D:D2:12:CF:38:A0:06:B3:80:D2:C4:4F:7C:C0:83:4D:C0:74:03:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A5511A7B62854569D9FE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/235016bc-1e98-3eea-88de-2f0ecf20a455.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 63949 IP address blocks: 172.233.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:51:1a:7b:62:85:45:69:d9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=3f754a30-ced1-46ae-a8dd-f71b68ce483d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:cf:87:ab:f8:b8:87:a7:a0:8d:ea:20:69: 71:4b:cc:22:1f:21:de:58:c6:50:c5:0b:20:d4:80: f8:42:2b:09:1e:44:3e:85:50:1d:1c:f3:04:24:a1: 6a:a7:ef:c0:d2:19:6b:d8:8b:03:a6:98:6f:ba:fd: ac:72:d0:47:9c:12:13:f2:98:0d:19:e9:e5:37:67: 22:22:c2:86:e8:87:0e:eb:08:d8:ed:e3:66:18:6f: ef:6b:32:d2:a3:4c:00:43:ee:0a:44:cf:c8:38:c3: 8a:3a:02:75:11:36:58:1f:fa:da:9b:53:09:61:e9: 6e:69:c5:bf:29:90:4e:8a:20:fa:66:99:61:31:17: 16:98:ad:7b:70:1f:53:88:24:60:6b:48:10:de:db: 57:a8:df:bd:35:47:88:70:c1:42:7a:4d:90:6a:9d: 32:29:02:65:f1:0a:48:8b:e3:23:a8:f6:5d:c0:b5: 36:47:88:8c:a3:a9:63:5a:74:63:b6:a5:20:16:7b: dd:39:cc:65:6f:f5:d4:cc:97:fc:1f:eb:49:ea:db: b8:8e:5b:74:c9:d5:f1:ae:cf:b9:fd:d1:d3:7d:03: f1:32:2c:0b:ba:4a:ed:07:fe:c7:a8:9a:54:1d:ea: 29:de:b7:db:8c:9c:48:af:50:29:24:b8:9c:cc:c8: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D2:12:CF:38:A0:06:B3:80:D2:C4:4F:7C:C0:83:4D:C0:74:03:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/235016bc-1e98-3eea-88de-2f0ecf20a455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:28:73:27:19:d0:38:1b:17:7e:7c:d2:c2:f5:26:85:67:c5: 82:c1:08:cf:fe:43:84:66:74:0c:04:ed:52:42:15:0b:3e:2f: 66:c8:49:41:14:34:79:5d:b5:59:11:f1:17:67:95:4f:f6:fd: 4f:05:6e:ff:32:40:4e:c3:1f:54:59:1d:ef:a6:1e:44:bf:ad: 17:54:20:61:8e:e5:df:b7:64:4f:f5:e8:3a:b3:e5:e3:65:c1: 94:9f:71:a3:a7:10:df:89:d0:f8:8a:a3:6a:82:16:69:a8:55: 18:ad:51:1b:a0:0d:76:99:92:81:ed:80:fd:e2:e4:5e:d0:c7: 7b:8c:c4:ab:bd:bf:01:cd:cd:d7:4c:5d:b2:96:56:a6:7c:3c: a5:5d:18:49:05:9f:cf:ea:5f:fc:a8:d7:ad:e8:42:76:fc:d5: 0f:a0:9d:17:03:8f:c6:f0:44:40:09:3c:f1:2d:3b:d3:8d:f2: e3:25:3a:1a:e9:ff:dd:c3:c1:cb:26:5f:79:13:74:56:bf:07: 9c:06:c9:9b:52:b8:c8:c1:b4:62:45:ee:8c:5a:f3:2e:71:d5: 0d:30:4e:cc:0f:86:20:a1:e2:4f:60:fd:aa:08:ff:f9:94:23: 5d:e0:af:32:b5:79:af:bd:28:3a:04:01:03:b4:ee:9b:cd:45: 1f:a7:2a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVEae2KFRWnZ/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk M2Y3NTRhMzAtY2VkMS00NmFlLWE4ZGQtZjcxYjY4Y2U0ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAribPh6v4uIenoI3qIGlxS8wiHyHeWMZQxQsg 1ID4QisJHkQ+hVAdHPMEJKFqp+/A0hlr2IsDpphvuv2sctBHnBIT8pgNGenlN2ci IsKG6IcO6wjY7eNmGG/vazLSo0wAQ+4KRM/IOMOKOgJ1ETZYH/ram1MJYeluacW/ KZBOiiD6ZplhMRcWmK17cB9TiCRga0gQ3ttXqN+9NUeIcMFCek2Qap0yKQJl8QpI i+MjqPZdwLU2R4iMo6ljWnRjtqUgFnvdOcxlb/XUzJf8H+tJ6tu4jlt0ydXxrs+5 /dHTfQPxMiwLukrtB/7HqJpUHeop3rfbjJxIr1ApJLiczMjKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3SEs84oAazgNLET3zAg03AdANlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM1MDE2YmMtMWU5OC0z ZWVhLTg4ZGUtMmYwZWNmMjBhNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkocycZ0DgbF3580sL1JoVnxYLBCM/+Q4RmdAwE7VJCFQs+L2bISUEU NHldtVkR8RdnlU/2/U8Fbv8yQE7DH1RZHe+mHkS/rRdUIGGO5d+3ZE/16Dqz5eNl wZSfcaOnEN+J0PiKo2qCFmmoVRitURugDXaZkoHtgP3i5F7Qx3uMxKu9vwHNzddM XbKWVqZ8PKVdGEkFn8/qX/yo163oQnb81Q+gnRcDj8bwREAJPPEtO9ON8uMlOhrp /93DwcsmX3kTdFa/B5wGyZtSuMjBtGJF7oxa8y5x1Q0wTswPhiCh4k9g/aoI//mU I13grzK1ea+9KDoEAQO07pvNRR+nKmk= -----END CERTIFICATE-----Generated at Sat Jun 7 23:02:59 2025 by rpki-client