$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cb4c280-73a1-33b4-9951-9b4609dc2602.roa File: 4cb4c280-73a1-33b4-9951-9b4609dc2602.roa (raw, json) Hash identifier: yUHMOxKPIns2bNiBUEnYL2IwM9U0YnlBGhbYVc8Zzfg= Subject key identifier: 68:CA:35:CB:FA:1E:64:99:4A:71:79:8D:F9:48:47:2A:45:A5:62:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852D80C346A7FCFC3B4D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cb4c280-73a1-33b4-9951-9b4609dc2602.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 72.246.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2d:80:c3:46:a7:fc:fc:3b:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=20be3bd4-f033-44eb-a0f9-ab7584176be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:ff:2f:7f:f8:f9:cc:f2:f4:fb:70:42:29: 21:6a:4a:8e:fe:3a:49:91:c1:df:cb:68:24:0f:6f: ae:fc:38:78:4d:60:92:e5:7c:fa:5a:fa:05:1f:50: 7d:bc:9a:4e:08:8d:39:ef:af:f6:51:e1:89:05:bf: 52:15:57:d0:58:84:15:94:b7:28:e8:3f:41:67:c4: a1:91:a5:51:ca:d8:15:ac:8a:58:ec:65:55:0f:2c: 63:6a:4b:aa:c9:0d:b1:09:9d:41:ff:ad:69:67:c3: 74:d4:0f:80:c5:81:01:f9:c9:14:d8:11:f5:4e:7d: 90:a6:e6:be:19:07:be:ef:42:7c:a7:0c:2e:17:ff: 44:ba:8a:6f:49:21:75:71:9d:cd:eb:bb:2e:82:3c: cb:fc:8c:60:01:c8:c6:d9:53:b1:70:1d:a1:6c:33: 10:f6:0d:16:58:74:72:2b:8d:44:29:00:ff:9f:d8: 91:e2:88:26:29:c8:f2:b8:49:8f:ec:c9:54:01:39: 90:f3:c7:7c:05:50:3f:b3:94:2d:62:8a:85:5a:64: 9c:0a:c9:70:a6:ab:c0:64:26:7b:05:f8:00:e9:4c: 3e:33:b8:d5:8f:fe:ea:99:8f:bf:52:93:4c:03:9b: 94:f1:74:22:60:69:e1:82:5d:21:64:d2:03:de:82: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CA:35:CB:FA:1E:64:99:4A:71:79:8D:F9:48:47:2A:45:A5:62:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cb4c280-73a1-33b4-9951-9b4609dc2602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:68:e5:b6:a5:d4:d3:91:1c:c8:77:65:39:70:21:f9:23:1a: b6:e9:d0:e3:b7:a1:af:c2:1f:46:94:9a:cc:e3:58:17:ec:8a: 1a:0f:d8:5b:01:e4:07:b9:7f:22:01:18:d9:05:ac:51:89:01: cc:5c:23:18:65:aa:d2:77:e3:3b:4f:d9:c0:12:d4:ba:5a:0b: f6:5d:99:08:07:f4:26:0e:ac:34:92:a6:84:7a:2d:ef:1f:a9: 6d:2c:84:f4:e0:29:5d:f7:0d:13:85:d1:3a:50:15:9d:95:c5: 69:dc:90:8a:9b:d5:04:dd:29:31:af:4d:0d:32:5f:da:62:83: f2:21:69:79:3c:f9:0c:12:1e:99:78:61:98:82:c6:31:53:aa: 9a:1f:6a:8b:9f:09:c2:27:6f:fe:78:01:8c:8f:99:2d:7a:75: 5c:52:28:8a:1c:22:44:b2:52:da:fe:f2:1d:90:af:35:74:5c: 4d:85:ea:29:b9:19:a8:64:80:c3:ce:4e:21:50:3c:16:85:82: 36:f3:58:39:23:2d:0f:71:7d:48:70:1c:5e:e4:ea:96:86:90: b0:1d:56:09:d6:10:e4:01:56:03:52:b6:3f:90:d8:46:a1:9d: f0:d8:01:44:3c:06:5a:f0:09:b8:18:a5:d0:31:12:cb:3f:52: 3c:25:a3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS2Aw0an/Pw7TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MjBiZTNiZDQtZjAzMy00NGViLWEwZjktYWI3NTg0MTc2YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU7/L3/4+czy9PtwQikhakqO/jpJkcHfy2gk D2+u/Dh4TWCS5Xz6WvoFH1B9vJpOCI0576/2UeGJBb9SFVfQWIQVlLco6D9BZ8Sh kaVRytgVrIpY7GVVDyxjakuqyQ2xCZ1B/61pZ8N01A+AxYEB+ckU2BH1Tn2Qpua+ GQe+70J8pwwuF/9EuopvSSF1cZ3N67sugjzL/IxgAcjG2VOxcB2hbDMQ9g0WWHRy K41EKQD/n9iR4ogmKcjyuEmP7MlUATmQ88d8BVA/s5QtYoqFWmScCslwpqvAZCZ7 BfgA6Uw+M7jVj/7qmY+/UpNMA5uU8XQiYGnhgl0hZNID3oI9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjKNcv6HmSZSnF5jflIRypFpWIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNiNGMyODAtNzNhMS0z M2I0LTk5NTEtOWI0NjA5ZGMyNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5o5bal1NORHMh3ZTlwIfkjGrbp0OO3oa/CH0aUmszjWBfsihoP2FsB 5Ae5fyIBGNkFrFGJAcxcIxhlqtJ34ztP2cAS1LpaC/ZdmQgH9CYOrDSSpoR6Le8f qW0shPTgKV33DROF0TpQFZ2VxWnckIqb1QTdKTGvTQ0yX9pig/IhaXk8+QwSHpl4 YZiCxjFTqpofaoufCcInb/54AYyPmS16dVxSKIocIkSyUtr+8h2QrzV0XE2F6im5 GahkgMPOTiFQPBaFgjbzWDkjLQ9xfUhwHF7k6paGkLAdVgnWEOQBVgNStj+Q2Eah nfDYAUQ8BlrwCbgYpdAxEss/Ujwloy0= -----END CERTIFICATE-----Generated at Sat Jun 7 23:32:22 2025 by rpki-client