$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f908285-8448-3e48-b7d5-c8be655f407d.roa File: 3f908285-8448-3e48-b7d5-c8be655f407d.roa (raw, json) Hash identifier: KDv5T91uHBJCZHXcKLpOXh3SYm1kd5DblYPfPgMZXpc= Subject key identifier: 3C:CF:5F:81:DD:DB:7A:89:8F:01:C3:77:0B:B2:BA:E9:6D:46:08:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F17FBF556B9E2910CB47B9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f908285-8448-3e48-b7d5-c8be655f407d.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 63949 IP address blocks: 172.239.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:bf:55:6b:9e:29:10:cb:47:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=36b09e15-ff3f-4744-b7a7-ecd85e4d59d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:f9:55:08:18:31:19:b4:24:74:98:1a:a5: 85:2a:70:bd:fc:96:8e:7f:e8:37:26:2d:b1:16:c4: 71:38:1e:5e:5c:fc:9f:a5:ff:7f:31:1a:8b:65:1c: de:4b:48:e8:07:4d:c6:26:c0:d5:9c:0d:70:ff:d1: 26:9b:94:2d:6e:5c:7d:7d:61:50:28:51:79:ee:a6: ef:1c:44:34:44:7e:72:2d:4d:fe:99:02:6f:1d:c8: 9b:d6:af:b1:4a:b0:49:93:6e:c6:b3:71:5f:79:95: 19:94:0e:72:11:06:53:fe:27:84:8c:35:e1:92:f2: 78:da:14:1b:2a:b4:11:c8:ee:ff:28:29:db:e4:f5: fe:08:b7:cf:87:ec:2e:89:aa:5c:30:66:f2:12:d7: 62:da:7f:ef:1a:17:bb:b1:94:96:a2:ec:52:03:ef: 90:ca:6c:c3:21:99:02:70:5b:71:3b:51:96:fa:63: a2:bb:43:d8:f2:5a:b2:c2:47:55:15:bc:f8:8a:d4: 36:eb:e4:34:02:22:59:90:aa:ad:e1:d2:af:07:a9: 6c:51:22:91:e6:4c:e7:29:f1:d3:c5:fb:39:fd:9c: 3f:0a:69:9c:78:73:55:38:af:7a:1a:6f:cd:44:f5: 11:8f:35:75:e8:c7:1a:4c:46:7e:74:fa:2e:4e:12: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:5F:81:DD:DB:7A:89:8F:01:C3:77:0B:B2:BA:E9:6D:46:08:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f908285-8448-3e48-b7d5-c8be655f407d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.239.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d5:35:d0:44:c6:c9:50:31:70:c6:f2:be:cd:5b:20:bd:d0: 6b:6d:e5:4a:d7:00:57:b6:40:2b:91:2f:88:1e:27:23:86:6b: 64:41:07:a9:de:6e:d2:e4:97:e3:6b:3c:93:f8:50:db:36:28: ab:e0:f8:49:f9:e9:ff:48:19:2e:80:28:de:04:dc:15:19:cb: 5b:8c:44:d7:24:36:2a:0d:25:5f:19:6b:73:f9:51:00:04:55: 58:f9:d2:02:b7:76:70:dc:5a:a9:46:23:2b:3c:7e:f8:4d:4b: 96:5d:c5:1d:74:57:6c:9c:c2:a8:07:9d:36:e6:b2:7c:c8:b0: 8d:28:13:c5:87:16:5b:7f:0f:d4:ca:46:c8:80:90:56:cf:9c: dc:e8:30:d4:d6:7b:96:41:94:6c:17:fc:56:08:2e:d0:09:99: e0:46:f2:ac:7a:bc:01:af:be:b7:88:39:f8:38:1d:6d:c7:64: a6:d5:52:d2:9b:7a:24:cc:28:f6:15:be:ad:af:cc:46:05:b4: 3c:4b:f8:dc:25:8a:c4:ee:42:61:bb:65:45:90:da:d9:16:0c: 4e:39:74:84:40:8b:03:7f:07:7a:41:a4:38:46:ae:ae:e5:96: eb:82:e4:3e:70:57:ef:96:c8:b9:86:ab:27:12:53:fe:75:dc: c3:bc:4e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf79Va54pEMtHucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MzZiMDllMTUtZmYzZi00NzQ0LWI3YTctZWNkODVlNGQ1OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSz5VQgYMRm0JHSYGqWFKnC9/JaOf+g3Ji2x FsRxOB5eXPyfpf9/MRqLZRzeS0joB03GJsDVnA1w/9Emm5Qtblx9fWFQKFF57qbv HEQ0RH5yLU3+mQJvHcib1q+xSrBJk27Gs3FfeZUZlA5yEQZT/ieEjDXhkvJ42hQb KrQRyO7/KCnb5PX+CLfPh+wuiapcMGbyEtdi2n/vGhe7sZSWouxSA++QymzDIZkC cFtxO1GW+mOiu0PY8lqywkdVFbz4itQ26+Q0AiJZkKqt4dKvB6lsUSKR5kznKfHT xfs5/Zw/CmmceHNVOK96Gm/NRPURjzV16McaTEZ+dPouThLTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzPX4Hd23qJjwHDdwuyuultRgjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y5MDgyODUtODQ0OC0z ZTQ4LWI3ZDUtYzhiZTY1NWY0MDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrO/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADVNdBExslQMXDG8r7NWyC90Gtt5UrXAFe2QCuRL4geJyOGa2RBB6ne btLkl+NrPJP4UNs2KKvg+En56f9IGS6AKN4E3BUZy1uMRNckNioNJV8Za3P5UQAE VVj50gK3dnDcWqlGIys8fvhNS5ZdxR10V2ycwqgHnTbmsnzIsI0oE8WHFlt/D9TK RsiAkFbPnNzoMNTWe5ZBlGwX/FYILtAJmeBG8qx6vAGvvreIOfg4HW3HZKbVUtKb eiTMKPYVvq2vzEYFtDxL+NwlisTuQmG7ZUWQ2tkWDE45dIRAiwN/B3pBpDhGrq7l luuC5D5wV++WyLmGqycSU/513MO8TkQ= -----END CERTIFICATE-----Generated at Sat Jun 7 22:51:42 2025 by rpki-client