$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3279f1f2-441b-3f22-8049-482faccb6796.roa File: 3279f1f2-441b-3f22-8049-482faccb6796.roa (raw, json) Hash identifier: WAVl7/tEMXsaVUa3AT71vPths7rGDQCIoceOuskb25A= Subject key identifier: 8E:66:7E:14:F7:2C:B7:CB:84:14:09:20:DB:02:A4:47:0D:57:02:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A75E751A7E2117DDC47E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3279f1f2-441b-3f22-8049-482faccb6796.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.235.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:75:e7:51:a7:e2:11:7d:dc:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=8f5ca30a-13e1-43fe-b528-3437f550c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:22:d8:1b:03:6d:46:d7:a9:6d:08:0a:5d: 1f:d7:b6:5d:e1:ca:e5:37:45:b0:aa:9f:f2:52:17: 5d:25:c9:9b:84:19:00:4b:3c:b7:00:0c:ee:ba:7c: 7b:22:db:47:11:ac:26:6b:15:85:45:f8:1b:a5:d1: 11:be:43:b0:a4:ca:6b:dc:b7:cc:c5:dd:95:aa:99: 60:b0:41:3a:14:1b:36:9e:79:b4:d4:d7:d8:a0:2c: 7c:63:a9:97:a1:34:9a:be:ea:88:e9:06:a9:c3:85: 6b:f9:ef:eb:9e:9f:91:4e:a7:ad:59:53:52:4c:74: 80:c2:6a:8a:41:c4:5a:4c:e8:0f:64:78:61:74:b6: be:ba:83:46:5a:3f:09:5a:1e:b8:2e:3e:26:0f:43: d0:73:b2:85:85:a1:f6:92:3f:54:b0:dd:29:32:e3: 6f:f7:da:b9:59:e7:26:dd:91:c6:ea:08:9e:5b:78: d2:3c:0c:6b:27:7f:7e:b0:cd:3e:11:8e:a7:41:e4: b1:45:d0:e5:ea:af:bc:58:b3:6d:5b:af:4a:f8:de: af:c7:6c:50:66:72:91:58:f1:47:62:30:7d:53:48: f9:d1:50:f6:47:b7:f3:62:3b:c3:a1:4d:24:ea:c5: a2:df:32:94:40:f7:8b:c6:c4:b9:be:52:4b:83:6f: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:7E:14:F7:2C:B7:CB:84:14:09:20:DB:02:A4:47:0D:57:02:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3279f1f2-441b-3f22-8049-482faccb6796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:50:17:cf:23:65:59:6c:e7:3e:9d:85:24:4d:43:23:a0:61: d1:f1:2c:ef:43:17:14:ff:e0:f3:52:5c:0a:cc:52:69:36:b1: 08:01:f9:be:8f:42:7a:df:16:a5:91:05:9c:a2:9e:82:5b:cd: dc:d8:bf:6f:8e:aa:76:6e:a6:43:ca:5c:ef:6f:b9:55:e5:ca: ca:f6:16:9d:dc:fa:f7:41:0e:b6:2a:4c:8f:28:94:3c:0b:c9: c1:59:06:25:9e:0f:71:4f:98:71:aa:ad:33:2c:ed:0f:ba:23: 24:1f:75:c1:20:58:ab:1d:a9:40:c9:a3:de:a8:f9:f0:8b:b6: c5:ba:71:df:fb:e0:51:3a:97:b6:2e:8c:c3:86:5a:35:24:d0: 3c:c0:b7:f5:ec:db:e1:a2:82:2f:ba:3d:10:6b:5e:a8:b0:eb: 0b:b5:04:53:01:fe:81:9e:db:da:cf:d3:58:bd:90:70:9d:f0: b0:8c:d5:fa:a5:e6:d2:7b:e0:9a:92:a5:7f:6c:82:23:35:7a: be:28:a4:30:7f:4a:70:20:d7:57:c2:86:09:88:db:1f:a0:54: b4:ee:8e:75:6b:04:6b:e3:48:2c:cd:08:0d:46:ac:e6:7a:e4: 16:bf:74:f3:25:90:ff:ec:4d:7b:75:4d:34:00:6a:52:bb:70: d4:3f:8d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnXnUafiEX3cR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OGY1Y2EzMGEtMTNlMS00M2ZlLWI1MjgtMzQzN2Y1NTBjNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VAi2BsDbUbXqW0ICl0f17Zd4crlN0Wwqp/y UhddJcmbhBkASzy3AAzuunx7IttHEawmaxWFRfgbpdERvkOwpMpr3LfMxd2Vqplg sEE6FBs2nnm01NfYoCx8Y6mXoTSavuqI6Qapw4Vr+e/rnp+RTqetWVNSTHSAwmqK QcRaTOgPZHhhdLa+uoNGWj8JWh64Lj4mD0PQc7KFhaH2kj9UsN0pMuNv99q5Wecm 3ZHG6gieW3jSPAxrJ39+sM0+EY6nQeSxRdDl6q+8WLNtW69K+N6vx2xQZnKRWPFH YjB9U0j50VD2R7fzYjvDoU0k6sWi3zKUQPeLxsS5vlJLg29EvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5mfhT3LLfLhBQJINsCpEcNVwK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI3OWYxZjItNDQxYi0z ZjIyLTgwNDktNDgyZmFjY2I2Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpQF88jZVls5z6dhSRNQyOgYdHxLO9DFxT/4PNSXArMUmk2sQgB+b6P QnrfFqWRBZyinoJbzdzYv2+OqnZupkPKXO9vuVXlysr2Fp3c+vdBDrYqTI8olDwL ycFZBiWeD3FPmHGqrTMs7Q+6IyQfdcEgWKsdqUDJo96o+fCLtsW6cd/74FE6l7Yu jMOGWjUk0DzAt/Xs2+Gigi+6PRBrXqiw6wu1BFMB/oGe29rP01i9kHCd8LCM1fql 5tJ74JqSpX9sgiM1er4opDB/SnAg11fChgmI2x+gVLTujnVrBGvjSCzNCA1GrOZ6 5Ba/dPMlkP/sTXt1TTQAalK7cNQ/jRo= -----END CERTIFICATE-----Generated at Sun Jun 8 04:19:03 2025 by rpki-client