$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa File: 3f4fade1-a438-3112-a00d-10ea443d520e.roa (raw, json) Hash identifier: KseT4CjMqmxZplRMcP21TCfQg4WQpMnYOVNFSAZQOLI= Subject key identifier: A4:18:C5:91:6D:84:CC:27:01:76:FD:56:BD:A1:2F:70:28:7B:42:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A837D804EDB9DA6D00600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 173.222.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:83:7d:80:4e:db:9d:a6:d0:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=bf6b4ff3-83eb-4620-919f-ed995e68720e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:67:a4:b0:0e:62:d2:07:db:05:68:ac:7e: 15:0c:20:00:2d:8d:16:3e:41:6e:70:0a:95:f9:39: 52:89:4a:11:25:17:19:64:83:fe:e0:a3:26:4d:d1: 9a:fa:f9:e7:e3:e1:1f:75:b5:96:2a:49:e0:be:ba: 98:00:de:aa:d5:3f:e3:75:12:5a:d1:43:79:37:ad: 3b:11:6e:5a:c4:c9:f0:48:a8:c5:fc:1a:30:80:f2: 0b:e9:8c:8a:99:c3:d9:48:49:7a:64:c4:ba:fa:6d: 5d:80:37:e7:95:a6:1a:1e:3a:89:02:37:80:ba:e7: fa:c7:55:8a:3e:b3:93:22:04:61:fe:44:96:b8:d8: 1d:8a:80:2f:3f:12:b5:6e:7c:db:53:a2:61:89:27: d6:63:4d:67:b0:3f:b3:52:1f:33:b8:34:8e:c8:b1: 77:1a:74:43:f3:82:65:d3:76:ac:67:ef:8f:81:13: f4:09:a2:90:71:bb:0c:a6:75:c2:25:4f:c6:fb:7c: 00:fa:62:5a:89:75:3b:63:30:23:9f:35:ff:3c:38: f3:08:c9:b6:aa:68:bc:3f:5d:15:e3:d8:66:47:63: 3e:18:bb:ad:a3:e3:c4:7b:b6:f0:08:85:e5:b6:b9: 36:9d:bc:88:82:8a:c6:e1:6c:3f:1a:20:8a:06:df: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:18:C5:91:6D:84:CC:27:01:76:FD:56:BD:A1:2F:70:28:7B:42:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4fade1-a438-3112-a00d-10ea443d520e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:82:6e:9c:3f:b3:14:cc:d2:02:ce:12:38:40:89:c3:cb:36: a7:c0:89:9a:dc:3d:0e:98:91:c3:cc:71:df:da:33:08:15:03: 83:bf:e7:0a:0c:57:81:1c:a5:88:a0:9e:4e:46:12:d2:4d:85: dc:f7:ad:c4:c1:47:de:8f:1a:7f:71:b4:54:ed:7f:b3:f1:01: b1:f0:c8:9c:68:6d:ea:d7:00:72:6a:98:8b:fd:5a:dd:13:f4: a3:86:fb:17:ec:c0:6c:e6:fc:17:d9:da:76:45:ee:ac:a7:84: 0e:e0:9c:ca:cc:6b:af:51:e5:c7:c6:5f:af:c6:63:28:de:7f: 10:c3:c0:19:71:aa:9d:53:04:c2:d0:ec:11:45:b2:19:01:f1: 3f:c2:0a:0a:94:7c:0d:02:d9:87:d8:c1:0c:7e:cd:4b:80:a7: d5:92:96:11:18:c1:ac:7d:67:9b:9a:e3:0f:cf:60:00:7f:cf: b3:8b:d6:9b:21:42:7c:d4:31:ec:c0:de:62:c2:e5:c4:a7:3a: 2a:29:57:f6:41:eb:13:7e:89:d9:da:37:6a:34:ac:5d:b2:74: df:93:f6:08:5a:8f:56:b3:a2:29:4f:e1:87:22:dc:ed:14:2e: 88:4b:b1:4a:4a:92:5b:86:79:17:6c:ce:65:04:b2:6a:3a:c3: 7c:89:e9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoN9gE7bnabQBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YmY2YjRmZjMtODNlYi00NjIwLTkxOWYtZWQ5OTVlNjg3MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1hnpLAOYtIH2wVorH4VDCAALY0WPkFucAqV +TlSiUoRJRcZZIP+4KMmTdGa+vnn4+EfdbWWKkngvrqYAN6q1T/jdRJa0UN5N607 EW5axMnwSKjF/BowgPIL6YyKmcPZSEl6ZMS6+m1dgDfnlaYaHjqJAjeAuuf6x1WK PrOTIgRh/kSWuNgdioAvPxK1bnzbU6JhiSfWY01nsD+zUh8zuDSOyLF3GnRD84Jl 03asZ++PgRP0CaKQcbsMpnXCJU/G+3wA+mJaiXU7YzAjnzX/PDjzCMm2qmi8P10V 49hmR2M+GLuto+PEe7bwCIXltrk2nbyIgorG4Ww/GiCKBt+5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQYxZFthMwnAXb9Vr2hL3Aoe0IlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y0ZmFkZTEtYTQzOC0z MTEyLWEwMGQtMTBlYTQ0M2Q1MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOCbpw/sxTM0gLOEjhAicPLNqfAiZrcPQ6YkcPMcd/aMwgVA4O/5woM V4EcpYignk5GEtJNhdz3rcTBR96PGn9xtFTtf7PxAbHwyJxoberXAHJqmIv9Wt0T 9KOG+xfswGzm/BfZ2nZF7qynhA7gnMrMa69R5cfGX6/GYyjefxDDwBlxqp1TBMLQ 7BFFshkB8T/CCgqUfA0C2YfYwQx+zUuAp9WSlhEYwax9Z5ua4w/PYAB/z7OL1psh QnzUMezA3mLC5cSnOiopV/ZB6xN+idnaN2o0rF2ydN+T9ghaj1azoilP4Yci3O0U LohLsUpKkluGeRdszmUEsmo6w3yJ6UQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:59 2025 by rpki-client