$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa File: 603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa (raw, json) Hash identifier: vn1YV0MIV/qodKFJ3QshsI64Qp3neQHoOIMVVv8r75g= Subject key identifier: 62:C2:31:68:33:9C:38:F2:AE:D0:07:E3:B1:07:79:80:C5:0C:FD:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E91FA295AFA5AF4A3E7FD630 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 12222 IP address blocks: 72.246.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a2:95:af:a5:af:4a:3e:7f:d6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=edb6eec1-f2ac-4da9-85eb-1e1aaff29c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:c1:00:17:c4:bd:60:8e:cf:aa:b4:63:cc: dc:10:e2:ca:32:bf:68:06:4c:7a:aa:83:53:3e:53: a9:62:3b:97:85:8a:4e:fb:fa:32:6c:5d:91:78:70: 71:fe:03:9f:e9:e2:a6:58:cf:ca:26:5d:09:8d:7a: 7b:f3:4a:7e:83:6a:90:16:c1:c2:8a:2b:70:6f:6e: 9c:d9:88:82:b2:27:b8:37:42:4e:a3:9e:61:42:a8: 11:1f:a6:d4:50:69:00:ee:bb:43:b9:e9:0c:48:e9: 1c:e8:71:be:18:de:90:01:67:03:15:34:3d:f5:73: 9f:08:91:48:3a:9c:5c:5a:0f:59:92:19:51:21:0c: 4f:e2:41:80:2c:05:a7:3b:9f:80:4b:b2:1d:dd:15: 44:a8:30:ef:c6:a6:cf:c0:53:7c:1e:e6:b9:1e:3e: b1:f6:6f:06:ac:31:e1:df:a5:84:9f:6f:7f:c7:5d: 0d:01:2a:2d:6a:e1:64:c3:02:b8:2d:28:db:b1:30: 91:42:bb:84:a4:95:c0:38:54:a7:15:a0:b7:fa:b1: c3:e2:c5:3e:ab:7c:51:d4:45:d6:a6:ad:64:1a:b0: 4f:63:2e:06:1e:72:c8:96:93:d1:81:a7:b2:3e:69: 43:63:bc:6f:ea:16:9c:e1:92:a2:b5:34:a0:a3:f9: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C2:31:68:33:9C:38:F2:AE:D0:07:E3:B1:07:79:80:C5:0C:FD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:00:07:6d:b5:44:9a:72:db:26:d0:a8:e3:7c:88:c6:ca:0c: 92:1c:cf:56:f7:ec:98:ef:5b:66:78:75:a7:36:1c:7b:1b:14: 54:03:6e:6e:8e:88:77:17:cd:f9:3e:af:1a:fd:b0:d4:33:bf: fc:8c:61:67:a0:bf:d7:10:18:23:6b:79:b2:d5:9d:fc:ea:b4: 61:5b:d1:60:87:03:e5:d0:30:cd:68:45:a1:83:53:44:0a:b7: a6:0b:52:0a:65:a3:13:b3:b9:61:d2:9b:ea:da:b7:4b:94:7d: db:7f:46:6d:91:97:b3:5c:d9:18:52:45:ec:4f:91:0e:a2:e4: 7f:ec:07:7d:8a:91:47:b8:ad:6b:bb:9a:ac:9e:f5:f4:0b:39: 7e:cb:20:28:e7:55:ec:d8:86:30:37:1c:1d:69:fb:7d:2c:4a: a2:f0:4b:e7:8f:d4:09:1f:b9:01:b3:8c:85:d4:53:73:92:c5: 4f:b6:1a:e6:64:bb:2c:1a:c6:6a:35:a0:2b:8d:8b:0c:d8:ba: ec:a3:70:c3:74:7e:a6:51:45:f9:ff:d1:dc:b0:8b:bb:9d:b9: 1c:25:1a:e2:72:41:80:cf:b1:22:69:05:16:ee:57:a7:72:93: 23:3b:e2:ae:d9:b9:d3:84:2b:3a:1c:38:37:4a:3f:0a:86:0a: a6:a2:bd:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6KVr6WvSj5/1jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZWRiNmVlYzEtZjJhYy00ZGE5LTg1ZWItMWUxYWFmZjI5Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli7BABfEvWCOz6q0Y8zcEOLKMr9oBkx6qoNT PlOpYjuXhYpO+/oybF2ReHBx/gOf6eKmWM/KJl0JjXp780p+g2qQFsHCiitwb26c 2YiCsie4N0JOo55hQqgRH6bUUGkA7rtDuekMSOkc6HG+GN6QAWcDFTQ99XOfCJFI OpxcWg9ZkhlRIQxP4kGALAWnO5+AS7Id3RVEqDDvxqbPwFN8Hua5Hj6x9m8GrDHh 36WEn29/x10NASotauFkwwK4LSjbsTCRQruEpJXAOFSnFaC3+rHD4sU+q3xR1EXW pq1kGrBPYy4GHnLIlpPRgaeyPmlDY7xv6hac4ZKitTSgo/lfCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLCMWgznDjyrtAH47EHeYDFDP12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjAzZTZiYjItNTJiNy0z MWEwLWFjYjctZmQ4ZWNkNWQyYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIAB221RJpy2ybQqON8iMbKDJIcz1b37JjvW2Z4dac2HHsbFFQDbm6O iHcXzfk+rxr9sNQzv/yMYWegv9cQGCNrebLVnfzqtGFb0WCHA+XQMM1oRaGDU0QK t6YLUgploxOzuWHSm+rat0uUfdt/Rm2Rl7Nc2RhSRexPkQ6i5H/sB32KkUe4rWu7 mqye9fQLOX7LICjnVezYhjA3HB1p+30sSqLwS+eP1AkfuQGzjIXUU3OSxU+2GuZk uywaxmo1oCuNiwzYuuyjcMN0fqZRRfn/0dywi7uduRwlGuJyQYDPsSJpBRbuV6dy kyM74q7ZudOEKzocODdKPwqGCqaivcM= -----END CERTIFICATE-----Generated at Sat Jun 7 14:00:17 2025 by rpki-client