$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa File: 5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa (raw, json) Hash identifier: 717T2NWY4h6A+Ff4uGyYhLhZFwLb3H8UxcafNVb9ftA= Subject key identifier: 29:0A:AB:00:BC:07:92:90:29:DD:97:3F:B5:B5:00:FD:AB:C1:C9:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852EAB75359A73C8EF7000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 24319 IP address blocks: 72.247.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2e:ab:75:35:9a:73:c8:ef:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=8b359220-25db-4c4f-a83f-52d583f0ecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:ff:eb:10:50:3f:be:ff:26:84:de:f0:f9: a3:fc:2a:b6:97:f6:72:88:b8:3a:14:97:0f:a2:28: 76:b9:30:31:7b:2d:e3:31:35:0d:a6:d2:38:35:e4: fd:d7:1f:c8:fd:d1:ab:3c:58:1c:d4:53:90:c7:e6: 7e:3a:2b:d9:9e:57:8a:84:91:f7:a1:84:c2:b7:f5: 77:26:cd:2e:26:95:3b:6a:78:93:c2:1a:1c:14:19: 34:17:e3:b6:e9:92:0d:46:b7:6e:ae:c4:15:3f:18: 29:45:9f:79:1b:fa:99:4b:91:17:90:95:51:67:18: f4:d5:62:ae:2e:53:e3:1a:7b:00:19:94:22:fe:40: d6:b8:db:f5:96:b6:c3:16:d8:cf:a1:6e:ec:af:6a: fb:4c:af:c7:0f:07:be:31:b2:c7:20:00:64:4d:0c: f6:9e:8b:1b:c5:df:aa:f0:80:37:cd:89:77:77:24: 59:0d:6b:84:48:29:c3:18:0c:22:9e:a0:12:9d:a7: 38:99:9b:f1:2d:ec:33:be:35:6b:8c:2c:15:8b:ad: 51:80:21:78:6d:10:6a:d0:1b:13:e4:db:99:dd:61: 5f:3f:5d:7e:7a:ce:10:af:0f:35:b5:2a:43:e2:c9: 6d:e7:5a:1e:9a:f8:f3:38:89:7d:c4:0e:80:60:3c: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0A:AB:00:BC:07:92:90:29:DD:97:3F:B5:B5:00:FD:AB:C1:C9:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:19:bd:7d:cf:36:d5:71:71:f9:fa:04:c0:d9:2b:4b:50:cc: ec:b7:7d:56:fe:eb:f7:79:fd:5a:6c:0d:77:3c:6b:69:1f:7a: fd:aa:44:0a:48:a9:61:21:1b:4b:99:1d:8b:cb:bc:81:7c:c6: 85:1d:6c:77:70:ac:ed:9e:c7:3f:41:82:cf:d6:0d:78:04:0d: b8:6c:27:08:c7:52:f4:b6:cb:47:7c:42:5e:cf:60:b9:a5:69: 43:57:75:28:6e:89:ee:a8:2e:8c:96:95:fe:bf:ed:93:f4:36: 44:60:6d:ce:15:6d:3e:47:45:a8:10:7c:2d:00:4a:cd:44:92: fa:4f:53:f1:c7:cc:2f:2c:3e:f8:7f:31:34:52:4a:11:79:b9: 38:c5:ec:15:b6:96:80:96:89:3c:c0:32:67:25:cf:59:7c:6d: be:b2:aa:da:97:ee:2c:e7:3e:2f:d3:d0:48:ef:c0:81:72:49: c3:b1:c6:f5:02:ef:b6:12:0b:97:a0:e8:b9:75:15:8e:6d:0e: 79:e0:85:2c:8e:6a:78:99:c7:72:61:60:76:53:0e:59:fa:48: 12:24:67:da:e3:4c:2e:d4:c1:58:34:53:9c:c9:ae:ee:ad:7c: 83:75:e2:7e:81:c0:2a:d8:da:d4:45:a8:7a:a8:bb:4a:d2:b3: 86:0c:cf:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS6rdTWac8jvcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OGIzNTkyMjAtMjVkYi00YzRmLWE4M2YtNTJkNTgzZjBlY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSX/6xBQP77/JoTe8Pmj/Cq2l/ZyiLg6FJcP oih2uTAxey3jMTUNptI4NeT91x/I/dGrPFgc1FOQx+Z+OivZnleKhJH3oYTCt/V3 Js0uJpU7aniTwhocFBk0F+O26ZINRrdursQVPxgpRZ95G/qZS5EXkJVRZxj01WKu LlPjGnsAGZQi/kDWuNv1lrbDFtjPoW7sr2r7TK/HDwe+MbLHIABkTQz2nosbxd+q 8IA3zYl3dyRZDWuESCnDGAwinqASnac4mZvxLewzvjVrjCwVi61RgCF4bRBq0BsT 5NuZ3WFfP11+es4Qrw81tSpD4slt51oemvjzOIl9xA6AYDwJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkKqwC8B5KQKd2XP7W1AP2rwclNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWU0ZTVlYjItOTJkOC0z M2JkLThlNDUtYzZkNDVlNWM2Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0ZvX3PNtVxcfn6BMDZK0tQzOy3fVb+6/d5/VpsDXc8a2kfev2qRApI qWEhG0uZHYvLvIF8xoUdbHdwrO2exz9Bgs/WDXgEDbhsJwjHUvS2y0d8Ql7PYLml aUNXdShuie6oLoyWlf6/7ZP0NkRgbc4VbT5HRagQfC0ASs1EkvpPU/HHzC8sPvh/ MTRSShF5uTjF7BW2loCWiTzAMmclz1l8bb6yqtqX7iznPi/T0EjvwIFyScOxxvUC 77YSC5eg6Ll1FY5tDnnghSyOaniZx3JhYHZTDln6SBIkZ9rjTC7UwVg0U5zJru6t fIN14n6BwCrY2tRFqHqou0rSs4YMz+E= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:59 2025 by rpki-client