$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa File: 4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa (raw, json) Hash identifier: iynQyPrrPzoThbcEWwXkHlie0sUCKZSq3fiKe8XYNYQ= Subject key identifier: EF:65:39:5E:6A:90:C3:60:9A:EB:59:98:55:BE:E9:6A:D0:38:BB:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A757AE9E2149E0FA51580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.235.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:75:7a:e9:e2:14:9e:0f:a5:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=e7c3b45f-e40a-4114-a83d-facc64da0611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:3b:c7:d0:e1:9e:fd:82:f1:c0:07:84:79: c5:58:14:8b:20:22:71:39:d9:2c:43:53:48:59:21: 29:19:c3:ff:3c:23:fd:1c:8a:c4:80:90:32:85:ef: b8:f2:6b:c7:4e:2a:bb:89:58:39:72:64:9d:40:c2: b2:ff:fe:e1:f8:9a:56:95:7c:5a:b7:74:f6:ae:84: 00:66:10:3c:cd:c5:04:99:26:8c:a4:fb:18:71:c6: ee:d1:51:11:8d:d9:b8:02:4f:ad:1a:3c:b7:ea:bd: ac:ed:33:c2:52:44:d9:ca:59:ab:11:dd:22:24:24: 2b:0c:77:7a:48:8d:c9:a0:e6:cf:97:87:77:4d:ea: e9:bc:53:a7:e4:95:4d:32:5d:bc:79:e3:f9:36:c2: b1:e1:94:84:1a:b0:01:f9:9a:fe:67:82:15:60:03: 35:2f:9a:49:43:e8:eb:f5:39:33:65:7f:a5:24:10: 57:83:63:15:46:ca:5a:8c:bb:9e:d1:a0:c4:f1:b4: 49:e3:f4:ae:c3:4b:94:84:c6:1b:13:2a:43:6e:47: 25:f1:5e:36:88:e1:56:a3:3b:3c:42:6d:f4:53:b5: fd:64:10:11:8a:f6:5a:5f:35:3e:a1:79:9e:96:4c: fc:f7:29:ff:20:70:62:2b:a6:af:17:4d:5e:b6:78: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:65:39:5E:6A:90:C3:60:9A:EB:59:98:55:BE:E9:6A:D0:38:BB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5c:db:32:83:2d:c9:ef:15:69:b2:ea:45:e2:94:8a:27:21: 5c:2a:d3:e5:9e:dd:1d:40:dc:6e:62:03:2c:d8:07:67:96:44: cb:b9:45:8d:6a:a6:42:af:f7:9d:8d:c8:f7:4f:20:27:46:5e: 78:c1:de:ba:79:c4:01:0e:cc:cf:ad:21:83:da:1c:bc:48:df: d6:78:47:11:77:87:db:39:a3:a1:1f:40:22:bb:d0:ff:94:1d: c6:47:72:f8:a6:d5:37:87:ce:12:ed:a7:96:5b:11:95:14:70: d4:7b:1b:ad:10:9e:d5:ec:78:77:e5:4f:a6:9b:09:53:bf:41: d7:3b:6b:1e:e8:7e:6a:e6:47:63:8a:27:8e:b0:3d:f9:75:83: 00:99:2c:50:31:7a:41:b5:c4:da:93:ab:af:5e:3d:23:3e:e5: a2:3c:08:40:94:42:cf:29:81:f1:d7:a1:06:0b:8b:46:cb:75: a0:b3:fd:4f:5f:19:49:75:e6:bc:ef:aa:89:71:03:aa:08:fa: b1:0d:6d:61:35:75:7a:ec:d8:d0:74:2d:43:18:e7:a0:7e:9b: 1c:d7:af:8e:9a:67:eb:d2:a8:fa:ed:32:bf:4a:0a:a4:d5:5a: 76:cf:b1:19:ca:cb:02:24:c8:81:00:ed:71:75:84:08:3a:8f: 63:45:fe:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnV66eIUng+lFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZTdjM2I0NWYtZTQwYS00MTE0LWE4M2QtZmFjYzY0ZGEwNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPw7x9Dhnv2C8cAHhHnFWBSLICJxOdksQ1NI WSEpGcP/PCP9HIrEgJAyhe+48mvHTiq7iVg5cmSdQMKy//7h+JpWlXxat3T2roQA ZhA8zcUEmSaMpPsYccbu0VERjdm4Ak+tGjy36r2s7TPCUkTZylmrEd0iJCQrDHd6 SI3JoObPl4d3TerpvFOn5JVNMl28eeP5NsKx4ZSEGrAB+Zr+Z4IVYAM1L5pJQ+jr 9TkzZX+lJBBXg2MVRspajLue0aDE8bRJ4/Suw0uUhMYbEypDbkcl8V42iOFWozs8 Qm30U7X9ZBARivZaXzU+oXmelkz89yn/IHBiK6avF01etngaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9lOV5qkMNgmutZmFW+6WrQOLtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI1YjJjMDgtOTE3Mi0z ODk2LTk2YzQtNGEyOGJmOTNhZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1c2zKDLcnvFWmy6kXilIonIVwq0+We3R1A3G5iAyzYB2eWRMu5RY1q pkKv952NyPdPICdGXnjB3rp5xAEOzM+tIYPaHLxI39Z4RxF3h9s5o6EfQCK70P+U HcZHcvim1TeHzhLtp5ZbEZUUcNR7G60QntXseHflT6abCVO/Qdc7ax7ofmrmR2OK J46wPfl1gwCZLFAxekG1xNqTq69ePSM+5aI8CECUQs8pgfHXoQYLi0bLdaCz/U9f GUl15rzvqolxA6oI+rENbWE1dXrs2NB0LUMY56B+mxzXr46aZ+vSqPrtMr9KCqTV WnbPsRnKywIkyIEA7XF1hAg6j2NF/i8= -----END CERTIFICATE-----Generated at Sat Jun 7 14:12:59 2025 by rpki-client