$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa File: 2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa (raw, json) Hash identifier: fRhb+jg+bBizzYF2i+ZA2zZDIPLQHPC7DjBke5pagYo= Subject key identifier: E7:93:BA:E1:C6:8C:7E:27:01:E0:3B:47:2F:D0:C6:BA:9B:81:93:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D42FB764967E41FCB5DBBC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b7:64:96:7e:41:fc:b5:db:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b1199edb-d0d1-4e3d-b393-c5ea50d2b8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:5f:ff:94:f4:fb:f6:b9:b3:de:5c:ea:ba: 50:c9:fd:ed:34:6f:37:eb:64:c0:e7:eb:78:f5:6b: 0d:ed:ab:ef:fe:8d:15:89:c9:10:86:05:ff:3a:b9: bd:21:ae:94:77:55:0c:80:22:fb:ed:84:c2:2c:70: 60:11:51:ea:b9:80:ac:79:4d:76:5a:2a:f9:f4:23: ae:ca:d9:cf:86:01:79:f9:54:d2:c6:6b:46:81:5f: 35:2b:6a:17:64:69:da:86:a4:7f:6c:a4:d4:c0:d9: 41:46:9b:0e:1e:1b:85:28:7e:8d:41:8b:4e:99:30: 70:55:03:ad:78:0d:cf:8e:65:28:75:fd:2a:08:d1: 12:25:de:7f:ff:0a:e2:cb:8b:32:d0:0c:ba:b1:cc: fe:8b:ce:22:11:5d:64:7b:7e:1e:e7:42:de:6b:14: e0:1b:fc:a4:36:06:a3:71:78:d0:ef:8f:af:cf:5d: 44:2e:b2:8c:53:af:55:d2:81:a3:75:ce:2f:44:0e: d1:55:5e:8b:53:af:9b:04:7b:6d:bb:dd:91:39:a6: e6:34:56:47:38:6a:d6:ac:dc:fc:1b:90:cc:c1:a6: e5:e7:fa:11:e6:97:86:a8:9f:ae:9d:5a:8c:ba:5c: 2f:c4:e8:01:1b:67:de:ec:61:0b:76:b4:42:44:f1: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:93:BA:E1:C6:8C:7E:27:01:E0:3B:47:2F:D0:C6:BA:9B:81:93:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b3:95:40:7c:01:09:cc:b5:3d:50:12:c0:97:96:27:16:b3: fc:12:93:05:29:4f:e7:b1:5b:3e:25:ff:0e:0a:09:70:48:59: a6:af:26:89:ed:5b:7e:50:05:01:56:e6:26:b3:06:3a:d4:95: 0c:f7:8c:f6:fa:1c:8a:16:f2:4a:bd:3e:3d:62:6d:65:68:88: f8:94:80:62:95:1a:4b:e8:07:e7:90:24:86:6f:b3:7b:cf:ec: cb:39:2a:71:79:b9:f0:7e:56:03:e7:b6:dc:13:20:f7:ad:60: d3:b7:66:79:73:51:34:85:38:2c:b3:cd:b6:5b:52:61:0e:db: c9:fe:10:ac:a0:79:78:d2:41:8b:b3:75:9c:5b:a9:f8:03:de: ad:40:a5:6f:34:a4:1f:cf:22:c1:27:f8:c7:eb:8d:69:59:0a: 49:6a:5f:17:14:6b:25:1e:f5:83:ff:dc:c1:a8:a2:f2:34:d3: 42:1c:9d:52:dd:96:c5:00:10:72:bc:8d:c8:3d:3d:04:aa:53: 01:bf:66:a2:f8:46:4a:43:d3:48:77:2d:b3:e0:8c:c4:0f:95: 08:98:91:47:7c:5e:83:2f:53:19:f4:c6:a5:0d:a4:76:08:f0: 44:e9:2e:86:29:83:fd:8f:3c:85:33:60:96:11:25:bd:ff:c1: e7:ee:d5:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7dkln5B/LXbvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjExOTllZGItZDBkMS00ZTNkLWIzOTMtYzVlYTUwZDJiOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT1f/5T0+/a5s95c6rpQyf3tNG8362TA5+t4 9WsN7avv/o0VickQhgX/Orm9Ia6Ud1UMgCL77YTCLHBgEVHquYCseU12Wir59COu ytnPhgF5+VTSxmtGgV81K2oXZGnahqR/bKTUwNlBRpsOHhuFKH6NQYtOmTBwVQOt eA3PjmUodf0qCNESJd5//wriy4sy0Ay6scz+i84iEV1ke34e50LeaxTgG/ykNgaj cXjQ74+vz11ELrKMU69V0oGjdc4vRA7RVV6LU6+bBHttu92ROabmNFZHOGrWrNz8 G5DMwabl5/oR5peGqJ+unVqMulwvxOgBG2fe7GELdrRCRPEK3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeTuuHGjH4nAeA7Ry/QxrqbgZNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjcwNWE3ZDAtNjQ0My0z ZDRmLTk0Y2ItNTRmMWE1YWVlY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+zlUB8AQnMtT1QEsCXlicWs/wSkwUpT+exWz4l/w4KCXBIWaavJont W35QBQFW5iazBjrUlQz3jPb6HIoW8kq9Pj1ibWVoiPiUgGKVGkvoB+eQJIZvs3vP 7Ms5KnF5ufB+VgPnttwTIPetYNO3ZnlzUTSFOCyzzbZbUmEO28n+EKygeXjSQYuz dZxbqfgD3q1ApW80pB/PIsEn+MfrjWlZCklqXxcUayUe9YP/3MGoovI000IcnVLd lsUAEHK8jcg9PQSqUwG/ZqL4RkpD00h3LbPgjMQPlQiYkUd8XoMvUxn0xqUNpHYI 8ETpLoYpg/2PPIUzYJYRJb3/wefu1Xg= -----END CERTIFICATE-----Generated at Sat Jun 7 14:48:42 2025 by rpki-client