$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f34b0a4-fc4e-324c-891e-8639fce7838b.roa File: 5f34b0a4-fc4e-324c-891e-8639fce7838b.roa (raw, json) Hash identifier: DfNPw3Zw9Eoe/GbhjAJaYydfB6S4GW+kaUOQYJEpju8= Subject key identifier: D3:1B:41:4A:A1:59:CE:3E:3D:78:63:71:E7:92:6B:B2:75:5E:59:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852F97426C4B47D8939B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f34b0a4-fc4e-324c-891e-8639fce7838b.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 36183 IP address blocks: 172.224.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2f:97:42:6c:4b:47:d8:93:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d518047d-da1e-4819-821d-af1aa0c1abc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:a2:fd:de:a5:b5:d8:49:9c:27:18:2b:10: 30:78:f4:ea:a5:50:4d:ae:7b:bf:b0:24:89:76:42: 6f:fd:5d:38:8a:a5:38:64:02:31:5e:2d:7a:d0:93: e9:cc:c8:3d:ce:63:15:df:fc:4a:6c:d6:bf:c4:0c: 12:09:b0:37:8b:e9:b2:3d:74:00:25:91:fb:bc:32: 17:2c:24:65:c1:94:db:8b:fc:73:fa:8d:f7:80:8b: 0b:1e:b0:bc:d2:8b:75:32:c8:12:60:e3:e7:e9:4c: b0:45:30:86:01:c8:d5:0f:0d:dc:19:79:c6:28:5c: 19:41:53:73:f4:05:d9:29:18:f9:f7:e8:b9:cf:f9: 53:f3:64:83:e2:7f:cd:49:e1:87:ce:6a:c3:bf:6b: 53:96:a6:69:91:b7:0f:be:66:92:5c:e9:79:8e:30: b9:29:f8:47:f2:d9:8c:74:91:cc:9a:ce:bc:6a:a8: 2f:e8:2e:64:02:cf:74:81:de:8a:e7:12:4b:b1:9d: 84:f7:72:ea:7e:71:14:bb:e9:97:b1:1f:82:b6:47: 15:64:4c:4c:72:73:b0:c4:80:38:6a:e2:8a:bc:f7: 47:ee:80:d9:95:1a:fe:ff:0b:47:be:3f:bb:3b:14: d5:c2:0c:08:4e:6f:41:51:76:78:08:24:5c:1c:b4: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1B:41:4A:A1:59:CE:3E:3D:78:63:71:E7:92:6B:B2:75:5E:59:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f34b0a4-fc4e-324c-891e-8639fce7838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f7:0c:e6:4d:43:d1:9f:d2:9d:00:28:53:24:b0:be:44:ad: 0e:cc:43:04:0a:a9:7a:aa:3f:b6:db:45:46:7f:17:7d:f1:11: 7f:d7:39:b3:7a:b5:41:bf:b1:10:81:d4:78:d8:5c:a3:f2:83: ef:5f:0a:3a:e9:f8:d9:a3:2c:64:cb:ae:2e:f2:3e:2d:2e:79: 78:58:58:be:84:21:c9:c4:b8:51:79:d2:99:b2:27:f8:3b:67: 3d:8b:ed:de:5b:46:f9:9b:0e:af:11:31:41:7d:8d:96:aa:a6: 0e:ec:83:c3:d3:03:44:c0:65:68:63:28:08:12:95:92:1d:8f: d5:41:a7:c9:1e:89:39:d7:fc:93:29:e9:09:ba:b5:26:57:2f: e0:1e:72:5b:b4:b4:80:6f:2f:1e:34:e8:f7:b7:e6:81:66:48: 87:90:55:bb:94:3f:65:79:b4:20:09:02:a2:e0:39:01:13:5d: 32:3c:da:f8:47:ce:c3:e5:97:0b:79:05:0d:0d:b4:cc:ee:05: 6a:59:48:c4:7c:c8:ad:ba:b9:b0:59:2d:3a:9b:a8:ab:b9:f6: 6a:e2:f5:5c:52:e8:6f:9a:8c:9b:bb:82:70:c2:f3:8b:1f:80: 70:90:9a:2e:5b:1e:99:6a:3c:98:5f:0d:a2:c7:5a:e2:ee:86: 1d:1d:dc:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS+XQmxLR9iTm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDUxODA0N2QtZGExZS00ODE5LTgyMWQtYWYxYWEwYzFhYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ2i/d6ltdhJnCcYKxAwePTqpVBNrnu/sCSJ dkJv/V04iqU4ZAIxXi160JPpzMg9zmMV3/xKbNa/xAwSCbA3i+myPXQAJZH7vDIX LCRlwZTbi/xz+o33gIsLHrC80ot1MsgSYOPn6UywRTCGAcjVDw3cGXnGKFwZQVNz 9AXZKRj59+i5z/lT82SD4n/NSeGHzmrDv2tTlqZpkbcPvmaSXOl5jjC5KfhH8tmM dJHMms68aqgv6C5kAs90gd6K5xJLsZ2E93LqfnEUu+mXsR+CtkcVZExMcnOwxIA4 auKKvPdH7oDZlRr+/wtHvj+7OxTVwgwITm9BUXZ4CCRcHLST7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMbQUqhWc4+PXhjceeSa7J1XlkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYzNGIwYTQtZmM0ZS0z MjRjLTg5MWUtODYzOWZjZTc4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX3DOZNQ9Gf0p0AKFMksL5ErQ7MQwQKqXqqP7bbRUZ/F33xEX/XObN6 tUG/sRCB1HjYXKPyg+9fCjrp+NmjLGTLri7yPi0ueXhYWL6EIcnEuFF50pmyJ/g7 Zz2L7d5bRvmbDq8RMUF9jZaqpg7sg8PTA0TAZWhjKAgSlZIdj9VBp8keiTnX/JMp 6Qm6tSZXL+Aeclu0tIBvLx406Pe35oFmSIeQVbuUP2V5tCAJAqLgOQETXTI82vhH zsPllwt5BQ0NtMzuBWpZSMR8yK26ubBZLTqbqKu59mri9VxS6G+ajJu7gnDC84sf gHCQmi5bHplqPJhfDaLHWuLuhh0d3LE= -----END CERTIFICATE-----Generated at Sat Jun 7 14:08:15 2025 by rpki-client