$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa File: 63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa (raw, json) Hash identifier: VlSt8x2dtUp20jiXaleLsrLQbcfgxRMgin1B8h9HRHA= Subject key identifier: D8:A0:2C:AA:33:31:02:6C:1E:F0:5B:12:DD:9D:8E:45:DB:41:67:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F4BB35A58151712C3700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f4:bb:35:a5:81:51:71:2c:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=f4112e97-7d22-4459-a16a-1d765c6a38c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:d4:88:b8:62:27:ad:3d:6f:a9:3f:bd:9d: f5:8c:64:9b:3a:d3:d4:8e:3c:28:df:21:54:37:2d: 08:30:c8:44:38:5f:86:f7:5c:a4:5d:06:33:3a:fa: ff:49:71:2e:2c:8c:1d:a6:cd:c5:ba:f4:57:b9:4d: d9:7c:e6:32:94:98:2e:ca:bb:63:ac:c0:a4:1a:cd: b3:90:04:f0:9e:93:6b:6f:ee:6f:c8:c5:6e:b7:0f: 04:c1:93:a9:2a:79:33:b5:65:f3:b2:73:1d:76:05: 48:56:ed:40:e1:9c:f8:e3:3d:c1:cf:f2:eb:be:95: c1:59:c6:06:7c:19:53:e8:4e:a1:77:c7:7d:3e:a3: 89:78:17:2a:40:bb:28:d5:da:da:a4:7d:d6:0a:b1: ce:e9:1a:2c:36:52:13:45:fe:a2:da:64:9e:7e:1b: 77:58:99:14:ba:84:c0:a9:15:e7:c9:d3:77:31:83: 04:b6:db:6a:a0:06:dc:c7:1b:50:d3:5b:09:ad:6d: 8f:68:36:6d:ca:ae:a4:e9:cd:a9:cd:c4:85:b8:08: 16:dd:44:fa:b5:96:73:22:99:f3:93:6e:7a:a0:b5: 63:d6:aa:e6:b5:be:49:7e:69:ae:e6:c3:a0:2b:42: 94:8b:6a:8c:63:db:3f:95:08:33:85:7d:55:90:70: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:2C:AA:33:31:02:6C:1E:F0:5B:12:DD:9D:8E:45:DB:41:67:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:87:79:63:bf:f1:d4:6d:b1:ca:8d:86:3b:77:8e:26:ee:62: 1f:91:99:50:b8:78:b0:dc:c0:67:5f:62:34:72:51:52:ac:6b: a9:42:ed:27:15:9f:c8:05:93:26:ba:cd:c9:0b:d4:d5:29:32: a9:a2:86:c1:5e:df:4c:5f:a0:16:54:a7:72:f3:ed:e6:f6:3c: b0:19:aa:6f:b4:81:42:f9:65:87:fb:13:d6:b9:7c:74:2e:99: 19:18:87:e0:58:9c:7b:2a:e2:d1:e9:88:d4:31:32:12:12:51: 50:88:00:80:99:43:b7:9c:21:f4:d9:71:dd:fb:9b:83:1b:e2: e7:2e:b2:f6:52:51:26:1e:d0:27:da:97:83:75:e7:b4:4b:2f: 82:b4:2e:5c:57:4d:27:0d:4d:80:9f:7d:ff:35:d6:c2:3d:b2: c5:d3:87:a7:01:46:58:55:aa:33:9d:ee:9f:39:41:ed:32:e3: ee:06:34:21:22:cd:5c:92:a7:9b:34:cd:d1:f4:4d:c1:5f:ff: dd:f5:a3:b1:3f:ee:aa:b4:bd:4e:b3:61:61:db:ea:7f:67:b7: 14:68:0b:d0:96:5b:ef:37:7c:43:05:65:e5:ae:46:62:ce:f8: 23:b4:7e:f3:fd:a5:20:c4:c8:5f:0b:62:82:43:eb:0d:4b:ce: c2:6d:33:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPS7NaWBUXEsNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjQxMTJlOTctN2QyMi00NDU5LWExNmEtMWQ3NjVjNmEzOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhLUiLhiJ609b6k/vZ31jGSbOtPUjjwo3yFU Ny0IMMhEOF+G91ykXQYzOvr/SXEuLIwdps3FuvRXuU3ZfOYylJguyrtjrMCkGs2z kATwnpNrb+5vyMVutw8EwZOpKnkztWXzsnMddgVIVu1A4Zz44z3Bz/LrvpXBWcYG fBlT6E6hd8d9PqOJeBcqQLso1drapH3WCrHO6RosNlITRf6i2mSefht3WJkUuoTA qRXnydN3MYMEtttqoAbcxxtQ01sJrW2PaDZtyq6k6c2pzcSFuAgW3UT6tZZzIpnz k256oLVj1qrmtb5Jfmmu5sOgK0KUi2qMY9s/lQgzhX1VkHBH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNigLKozMQJsHvBbEt2djkXbQWcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjNhN2E5MmQtZjBjYS0z OTUwLWEwYzEtNjI1ZTg2OWUzOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCHeWO/8dRtscqNhjt3jibuYh+RmVC4eLDcwGdfYjRyUVKsa6lC7ScV n8gFkya6zckL1NUpMqmihsFe30xfoBZUp3Lz7eb2PLAZqm+0gUL5ZYf7E9a5fHQu mRkYh+BYnHsq4tHpiNQxMhISUVCIAICZQ7ecIfTZcd37m4Mb4ucusvZSUSYe0Cfa l4N157RLL4K0LlxXTScNTYCfff811sI9ssXTh6cBRlhVqjOd7p85Qe0y4+4GNCEi zVySp5s0zdH0TcFf/931o7E/7qq0vU6zYWHb6n9ntxRoC9CWW+83fEMFZeWuRmLO +CO0fvP9pSDEyF8LYoJD6w1LzsJtM0o= -----END CERTIFICATE-----Generated at Sat Jun 7 23:10:49 2025 by rpki-client