$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa File: 31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa (raw, json) Hash identifier: szEKaCL+LapcFpa4dF0CyPQllr3MYS5I2KAQB+TYQdQ= Subject key identifier: 3C:D4:9B:92:11:35:4B:9B:84:66:59:1B:15:80:57:70:3F:68:63:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F7B563CEA21FC329F9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f7:b5:63:ce:a2:1f:c3:29:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=1a88688e-3430-4f8b-b041-f30558cbba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:ab:67:9d:10:fe:4a:0a:1b:b7:8d:84:52: bf:5b:2d:24:28:0d:4d:3f:d1:ce:0c:be:32:40:9a: 70:0c:07:37:f8:7c:02:83:85:49:da:80:94:bd:74: d0:23:f7:24:b8:00:9e:18:80:4f:ca:b9:90:e4:59: 27:b2:9f:ac:f0:94:4e:7a:e4:62:58:33:c9:76:4a: 59:fa:6c:60:e0:ec:cb:8c:25:09:0b:57:c9:28:aa: 48:9c:72:48:c4:8d:70:d5:fe:4c:fe:ed:26:70:f2: 09:1d:a7:b5:4c:1f:f6:41:ad:68:de:d4:84:af:82: ce:09:95:57:5f:56:61:43:74:71:d1:d2:96:82:cf: 26:1f:be:18:da:15:18:45:d1:73:37:b3:01:c5:a2: 88:09:34:0b:cb:52:75:d3:d8:47:c3:ad:2b:93:51: 76:f8:4d:5e:6d:1b:b1:96:11:53:2e:37:1b:2b:84: 48:cb:8b:22:20:14:04:cc:3b:fa:27:ac:3c:ce:2a: 6c:f0:90:0c:e6:18:30:01:e0:1c:c7:15:18:87:f0: 6f:dd:37:aa:5c:56:cb:40:6d:2f:aa:6b:0f:4e:dc: fa:78:63:12:ad:6f:42:14:04:f5:c8:a5:51:f8:72: d8:08:b4:87:0b:ed:3a:34:08:32:91:51:63:25:4e: 4b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:9B:92:11:35:4B:9B:84:66:59:1B:15:80:57:70:3F:68:63:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31e2844b-16cb-3d19-a0b3-e6c39301c26d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:8e:e8:a4:68:33:22:c6:b9:0e:d4:1b:80:9a:c1:9f:41:da: 94:36:1e:3d:dd:1c:8b:7a:82:e4:ca:3e:dc:46:a7:aa:25:88: ac:67:2e:67:ad:90:56:15:6e:bf:c5:44:d3:91:65:c2:05:2f: 80:3c:b0:38:b6:63:93:5f:f2:b9:78:64:c4:90:22:a4:1f:9e: 92:ab:8b:49:74:7e:35:28:31:ef:57:6f:c5:0f:2b:52:85:86: 3a:87:cd:b5:93:42:f9:e1:54:13:c7:8a:6f:19:44:3c:c5:90: bb:ff:24:fe:b9:d8:07:d0:11:cb:4a:d5:c1:e2:53:bf:df:5e: 2e:1d:60:ca:aa:72:bd:5f:da:76:98:ba:01:dd:51:3d:d8:9a: e4:4b:3e:af:b7:6d:b5:7c:e2:16:c7:ff:dd:c5:d7:17:23:c6: ce:b3:f9:0c:eb:f7:1b:bb:7f:b8:c5:4e:d2:6b:1d:bc:e3:49: 27:4c:fc:ad:f1:b3:0a:06:ad:9e:c8:55:22:c3:22:98:7c:ca: 5f:7b:da:38:c7:8f:3c:8a:b4:f7:ea:33:4b:ae:7f:9e:e2:52: 97:9f:44:57:25:af:a8:ae:c3:9d:2d:a1:ba:67:40:21:fa:d6: bd:02:67:59:63:c2:0b:32:ed:fb:c0:9e:ff:53:12:29:a9:3d: bc:85:90:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPe1Y86iH8Mp+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MWE4ODY4OGUtMzQzMC00ZjhiLWIwNDEtZjMwNTU4Y2JiYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjKrZ50Q/koKG7eNhFK/Wy0kKA1NP9HODL4y QJpwDAc3+HwCg4VJ2oCUvXTQI/ckuACeGIBPyrmQ5Fknsp+s8JROeuRiWDPJdkpZ +mxg4OzLjCUJC1fJKKpInHJIxI1w1f5M/u0mcPIJHae1TB/2Qa1o3tSEr4LOCZVX X1ZhQ3Rx0dKWgs8mH74Y2hUYRdFzN7MBxaKICTQLy1J109hHw60rk1F2+E1ebRux lhFTLjcbK4RIy4siIBQEzDv6J6w8zips8JAM5hgwAeAcxxUYh/Bv3TeqXFbLQG0v qmsPTtz6eGMSrW9CFAT1yKVR+HLYCLSHC+06NAgykVFjJU5LAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzUm5IRNUubhGZZGxWAV3A/aGM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFlMjg0NGItMTZjYi0z ZDE5LWEwYjMtZTZjMzkzMDFjMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWO6KRoMyLGuQ7UG4CawZ9B2pQ2Hj3dHIt6guTKPtxGp6oliKxnLmet kFYVbr/FRNORZcIFL4A8sDi2Y5Nf8rl4ZMSQIqQfnpKri0l0fjUoMe9Xb8UPK1KF hjqHzbWTQvnhVBPHim8ZRDzFkLv/JP652AfQEctK1cHiU7/fXi4dYMqqcr1f2naY ugHdUT3YmuRLPq+3bbV84hbH/93F1xcjxs6z+Qzr9xu7f7jFTtJrHbzjSSdM/K3x swoGrZ7IVSLDIph8yl972jjHjzyKtPfqM0uuf57iUpefRFclr6iuw50tobpnQCH6 1r0CZ1ljwgsy7fvAnv9TEimpPbyFkHE= -----END CERTIFICATE-----Generated at Sat Jun 7 13:47:56 2025 by rpki-client