$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa File: 4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa (raw, json) Hash identifier: 0Vj6XWmHxcoNXiTIaHWQXky5erNKlR/hdWc1xHjBiRo= Subject key identifier: 9D:3C:AA:51:40:8D:30:68:36:2E:DE:A8:D5:43:77:82:F3:F4:F1:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA85434473D947A0161E8EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 72.247.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:43:44:73:d9:47:a0:16:1e:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=f0b41a1b-81ef-4c5c-85f8-20264eaf2e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:58:d8:27:99:ad:68:38:a8:62:88:26:92: 27:64:cf:0b:00:c3:ac:f6:c5:58:07:d4:2d:d8:15: 52:b7:32:29:a8:e8:36:b4:0d:80:f4:ff:10:88:bc: 9f:5a:13:44:7d:32:91:54:f6:3c:52:a2:fd:66:54: 2a:4d:14:d4:cf:77:e2:91:4b:20:2b:7e:23:97:55: 3f:70:f7:f6:6f:3f:88:b3:fc:93:29:e0:2c:e9:7d: 7d:d1:48:8b:b7:cf:01:1b:a9:55:00:0d:fe:8d:bc: 1a:89:66:97:26:cf:35:5f:79:dc:e6:55:e0:d5:44: 1f:21:90:ad:bb:65:5a:75:b6:fb:3f:57:22:dc:3e: 3b:30:15:96:64:f6:f7:11:ac:7b:30:19:bd:5c:ea: 28:46:ae:9b:4d:2f:d1:81:77:fe:05:6d:1c:1d:8e: 58:ab:96:38:94:1e:34:6e:9a:19:e5:cb:6e:70:31: 8d:30:09:97:1c:14:7f:9a:c5:13:5f:57:d9:83:dd: 3e:c5:3f:ae:16:10:97:1d:96:0d:fd:d5:fb:f9:c7: f5:9c:3e:68:b9:00:05:66:c3:f5:c2:26:3d:ee:d5: a3:4f:da:5d:06:40:45:aa:ac:7e:54:f2:3e:d2:b2: 32:ce:64:bf:fd:00:54:86:d2:88:fa:e0:f6:0c:d3: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3C:AA:51:40:8D:30:68:36:2E:DE:A8:D5:43:77:82:F3:F4:F1:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4bfc57-4cca-30b9-baac-54a6d0c2a755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:34:6d:6e:45:6f:4c:d0:cd:1e:30:6c:b6:96:cf:00:d5:3c: 60:fd:be:b8:d1:7e:15:f8:c1:57:d1:b2:55:f7:f1:99:dc:b1: 91:59:ef:46:8b:41:59:ea:7d:6e:74:1e:ae:c6:d7:bc:dc:42: 50:a1:65:f0:0b:82:4d:ae:e4:b2:e4:30:7a:c0:1a:58:ed:76: df:98:98:58:52:85:27:72:cc:db:f1:b2:ad:99:4a:ba:87:f2: 1d:3a:5d:34:87:af:05:12:fd:bb:66:da:17:38:70:98:c7:43: fe:9a:cf:3d:10:90:1a:97:18:d1:f9:f1:ac:bd:50:f1:b5:db: 5c:6d:6e:b5:ae:00:fc:25:bb:85:58:87:5c:a1:09:6c:47:63: b2:1b:b6:c4:f2:be:bd:11:ad:b2:cd:95:b7:5b:86:de:76:78: 2d:ae:10:4f:08:89:74:fa:c7:a8:7e:a3:8b:14:6f:69:d6:9e: 61:79:ec:ad:b2:ee:2c:77:e1:09:1b:cd:a9:79:15:6b:4c:16: 8d:c2:6c:a3:6d:9b:c2:11:28:9e:3d:5e:9f:11:76:c6:76:a0: 9e:e7:b1:24:35:6a:a2:9f:92:76:78:9d:d9:e4:38:bf:d0:c9: b9:62:b5:d5:a7:89:51:0d:04:d0:fb:c0:32:6d:ae:b0:3d:72: 10:f3:69:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUNEc9lHoBYejsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZjBiNDFhMWItODFlZi00YzVjLTg1ZjgtMjAyNjRlYWYyZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uRY2CeZrWg4qGKIJpInZM8LAMOs9sVYB9Qt 2BVStzIpqOg2tA2A9P8QiLyfWhNEfTKRVPY8UqL9ZlQqTRTUz3fikUsgK34jl1U/ cPf2bz+Is/yTKeAs6X190UiLt88BG6lVAA3+jbwaiWaXJs81X3nc5lXg1UQfIZCt u2Vadbb7P1ci3D47MBWWZPb3Eax7MBm9XOooRq6bTS/RgXf+BW0cHY5Yq5Y4lB40 bpoZ5ctucDGNMAmXHBR/msUTX1fZg90+xT+uFhCXHZYN/dX7+cf1nD5ouQAFZsP1 wiY97tWjT9pdBkBFqqx+VPI+0rIyzmS//QBUhtKI+uD2DNMw7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ08qlFAjTBoNi7eqNVDd4Lz9PG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY0YmZjNTctNGNjYS0z MGI5LWJhYWMtNTRhNmQwYzJhNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM0bW5Fb0zQzR4wbLaWzwDVPGD9vrjRfhX4wVfRslX38ZncsZFZ70aL QVnqfW50Hq7G17zcQlChZfALgk2u5LLkMHrAGljtdt+YmFhShSdyzNvxsq2ZSrqH 8h06XTSHrwUS/btm2hc4cJjHQ/6azz0QkBqXGNH58ay9UPG121xtbrWuAPwlu4VY h1yhCWxHY7IbtsTyvr0RrbLNlbdbht52eC2uEE8IiXT6x6h+o4sUb2nWnmF57K2y 7ix34Qkbzal5FWtMFo3CbKNtm8IRKJ49Xp8RdsZ2oJ7nsSQ1aqKfknZ4ndnkOL/Q yblitdWniVENBND7wDJtrrA9chDzaTk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:43:35 2025 by rpki-client