$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3d315b-89b7-30ba-8550-0faaeec0282d.roa File: 3c3d315b-89b7-30ba-8550-0faaeec0282d.roa (raw, json) Hash identifier: +DMm7BPNpA+/IGlqcq5F0LkrSufzkCiFqeJUUMHIC1k= Subject key identifier: F8:80:49:AB:F4:D3:6E:FB:D7:37:11:F0:4C:CF:A2:2A:23:F7:B6:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497DA46B136F052B66EEFC6AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3d315b-89b7-30ba-8550-0faaeec0282d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.104.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:6b:13:6f:05:2b:66:ee:fc:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=045f1cc9-54d0-4851-ac78-2273b6c71268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:67:a5:8e:dc:05:ea:ab:e4:46:d4:dc:c8: a3:33:ec:6b:81:9d:db:56:4a:63:a8:37:23:79:0f: 4c:8b:5b:ad:ef:34:14:d2:99:de:34:2c:69:42:2c: e3:3c:7d:90:15:ae:04:32:59:f0:b8:4f:bd:c6:ff: 35:c7:ea:96:1e:7d:46:4c:9a:16:8e:f9:a7:12:bd: 0c:63:6a:cd:06:73:23:ac:7b:5c:30:11:ec:f7:6b: e7:1a:1b:95:3a:85:47:1f:99:4a:f3:80:c7:d6:cf: 3a:d7:57:c3:3d:cb:b8:9f:a6:fd:8e:0c:af:7e:1e: 67:96:4f:84:a1:45:d6:55:77:1c:7a:55:47:1b:ce: 98:56:36:c4:80:5b:df:89:3c:84:20:0c:56:0c:c3: 4a:20:0c:5c:09:70:d3:c2:b4:eb:34:f3:4e:68:8f: f5:ce:5e:a1:25:7d:d5:8d:02:2b:62:2d:66:87:e3: e1:8c:1b:c0:ac:27:6b:a6:91:03:6c:dc:4b:9a:02: 50:c2:c2:98:a7:26:a8:ab:ad:0a:3d:ed:18:e2:42: 82:7a:5f:bd:7d:0e:3b:e5:97:39:d9:ab:39:33:2c: 13:24:20:a4:c5:3b:d9:f7:1f:0e:62:e5:2c:86:57: 14:99:39:7e:6f:0e:9a:23:1b:80:00:24:c7:8f:85: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:80:49:AB:F4:D3:6E:FB:D7:37:11:F0:4C:CF:A2:2A:23:F7:B6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c3d315b-89b7-30ba-8550-0faaeec0282d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.104.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a8:84:ec:02:11:fa:31:6e:f2:25:7c:96:47:e0:c4:57:da: cd:fc:a4:a8:88:71:e4:15:fb:79:ef:5f:2b:09:78:30:84:ac: 57:94:3d:8d:8d:8f:72:f7:1f:91:be:81:16:ba:1d:ae:2a:00: 8a:6a:53:e0:0c:4b:2a:ff:a5:cc:62:92:63:25:cc:bc:1c:43: cb:68:e9:13:61:b8:76:42:fd:0d:a7:c7:ac:84:25:5b:f6:52: 2a:05:75:de:40:e1:3e:c7:f5:57:7b:48:5c:35:0e:c4:fa:11: 91:19:ae:53:1d:e1:ea:cc:59:74:7d:b9:2f:a1:9b:af:53:a9: 73:7d:54:91:84:85:b9:51:81:da:83:50:45:25:7d:81:03:84: 0a:a0:5c:48:6e:8f:c1:7c:f3:49:ec:52:f7:e5:53:0c:2a:46: b8:25:9c:99:75:38:c4:2a:5a:03:30:99:d0:fc:f8:83:40:54: 18:c0:67:10:b4:4d:c0:18:d6:1b:26:74:37:70:07:4d:ab:db: 7d:05:a0:2e:0c:68:79:ac:a6:72:56:87:4c:cb:3b:98:80:f2: c5:d6:1c:43:24:ba:e9:4f:30:89:08:de:d6:bf:15:d6:ac:2c: a5:9c:89:3b:29:a1:52:1c:5f:dc:b8:d8:94:9f:e1:f2:81:0e: aa:ef:09:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pGsTbwUrZu78asAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDQ1ZjFjYzktNTRkMC00ODUxLWFjNzgtMjI3M2I2YzcxMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS9npY7cBeqr5EbU3MijM+xrgZ3bVkpjqDcj eQ9Mi1ut7zQU0pneNCxpQizjPH2QFa4EMlnwuE+9xv81x+qWHn1GTJoWjvmnEr0M Y2rNBnMjrHtcMBHs92vnGhuVOoVHH5lK84DH1s8611fDPcu4n6b9jgyvfh5nlk+E oUXWVXccelVHG86YVjbEgFvfiTyEIAxWDMNKIAxcCXDTwrTrNPNOaI/1zl6hJX3V jQIrYi1mh+PhjBvArCdrppEDbNxLmgJQwsKYpyaoq60KPe0Y4kKCel+9fQ475Zc5 2as5MywTJCCkxTvZ9x8OYuUshlcUmTl+bw6aIxuAACTHj4V57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiASav002771zcR8EzPoioj97YNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MzZDMxNWItODliNy0z MGJhLTg1NTAtMGZhYWVlYzAyODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrGggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOohOwCEfoxbvIlfJZH4MRX2s38pKiIceQV+3nvXysJeDCErFeUPY2N j3L3H5G+gRa6Ha4qAIpqU+AMSyr/pcxikmMlzLwcQ8to6RNhuHZC/Q2nx6yEJVv2 UioFdd5A4T7H9Vd7SFw1DsT6EZEZrlMd4erMWXR9uS+hm69TqXN9VJGEhblRgdqD UEUlfYEDhAqgXEhuj8F880nsUvflUwwqRrglnJl1OMQqWgMwmdD8+INAVBjAZxC0 TcAY1hsmdDdwB02r230FoC4MaHmspnJWh0zLO5iA8sXWHEMkuulPMIkI3ta/Fdas LKWciTspoVIcX9y42JSf4fKBDqrvCWg= -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:31 2025 by rpki-client