$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d4a109b-a6ec-3c37-83be-84117ac81bfc.roa File: 6d4a109b-a6ec-3c37-83be-84117ac81bfc.roa (raw, json) Hash identifier: GC3gFysXhWpQnslJymrOk74pzSRLPBDwEnOa/+uDGF4= Subject key identifier: D3:33:87:5E:CC:34:49:DE:1E:7B:52:C8:5A:15:43:69:FB:19:95:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F650234065E91F530780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d4a109b-a6ec-3c37-83be-84117ac81bfc.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f6:50:23:40:65:e9:1f:53:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=352b7896-c487-45e8-bc99-0c2bb8fb72fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:eb:23:a9:ef:be:d6:e8:d6:75:70:16:b2: 15:eb:88:0f:64:25:73:ab:de:35:e1:66:ac:71:3f: 40:28:84:74:9e:7f:ea:75:be:78:44:23:b8:f4:c7: 6b:40:c7:c7:c1:52:cf:39:53:d0:bb:48:92:fd:6a: 93:7b:dd:e7:d2:44:2f:ac:4e:14:c7:a2:32:c2:fb: b3:a9:6b:20:b3:55:67:5f:f7:72:ce:11:f8:e1:61: 77:d8:5f:9a:87:5d:14:e9:53:0b:94:5f:8e:bc:9c: c6:11:e0:5a:4b:cc:e0:c5:04:7a:a8:7e:c4:57:81: 18:ee:7b:06:08:ba:0c:eb:ad:2d:12:c9:ab:f9:5b: ec:a9:40:b4:81:f0:fc:75:39:6a:f8:5c:38:09:ad: 0b:ce:97:d4:95:14:9b:28:eb:71:5b:19:09:1e:b0: 81:78:53:9d:7a:a8:88:4c:7e:fd:9c:84:ac:1b:d6: b7:47:d4:73:c6:c3:aa:ad:de:2e:4d:3d:25:be:99: 96:09:5f:27:31:be:c2:f4:45:2a:80:db:3e:fe:49: 2c:76:80:b6:d3:c9:14:35:ff:0e:d3:72:c7:8c:4d: 83:2e:d7:e7:16:28:f3:cf:dc:57:14:87:08:ec:9e: 7c:1c:1f:0b:3c:b3:0f:b4:b6:87:3b:e1:ee:a3:81: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:33:87:5E:CC:34:49:DE:1E:7B:52:C8:5A:15:43:69:FB:19:95:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d4a109b-a6ec-3c37-83be-84117ac81bfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e5:14:c1:c0:81:10:66:67:1e:0f:71:6e:48:e7:16:a2:a4: 54:37:98:b1:52:5f:51:a4:31:ee:85:69:df:3f:0b:90:64:c5: 8d:f8:99:9b:52:0b:cd:24:d4:57:df:97:6e:dd:0b:1a:86:dd: 6e:fb:e8:6a:cd:76:04:b1:c5:b8:3c:e2:a7:4f:fd:91:5f:5e: 96:14:b3:4a:8d:41:b2:da:02:43:61:26:d6:18:93:e5:0b:32: 6f:80:8f:a5:fd:2e:41:fa:29:e7:2f:d6:30:89:4b:48:ed:8e: 73:33:0f:08:89:dc:3b:bc:34:b2:ce:eb:77:97:3b:49:0f:25: 9e:d6:23:d3:31:67:e3:d2:6a:34:18:75:62:49:cd:b0:08:a9: 38:bc:64:12:6e:f7:c2:1f:7f:c2:08:81:71:d4:47:5d:b1:f0: d5:b5:ce:93:d6:45:aa:bb:7f:61:63:a8:43:7e:11:fa:9b:e1: a1:2f:1d:be:9c:d3:9e:16:cb:9d:59:c2:31:d0:6b:76:c6:48: 65:a4:43:76:2f:6a:fa:fe:1e:03:03:d4:42:bc:7a:ec:1d:93: 57:c4:58:70:2d:b4:bc:74:ff:3a:2b:0e:8b:7b:08:c4:2d:2a: 05:75:e8:f0:ad:3e:cf:be:89:92:d4:5c:2b:60:ef:e8:dd:ac: fc:f5:47:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPZQI0Bl6R9TB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MzUyYjc4OTYtYzQ4Ny00NWU4LWJjOTktMGMyYmI4ZmI3MmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu13rI6nvvtbo1nVwFrIV64gPZCVzq9414Was cT9AKIR0nn/qdb54RCO49MdrQMfHwVLPOVPQu0iS/WqTe93n0kQvrE4Ux6Iywvuz qWsgs1VnX/dyzhH44WF32F+ah10U6VMLlF+OvJzGEeBaS8zgxQR6qH7EV4EY7nsG CLoM660tEsmr+VvsqUC0gfD8dTlq+Fw4Ca0LzpfUlRSbKOtxWxkJHrCBeFOdeqiI TH79nISsG9a3R9RzxsOqrd4uTT0lvpmWCV8nMb7C9EUqgNs+/kksdoC208kUNf8O 03LHjE2DLtfnFijzz9xXFIcI7J58HB8LPLMPtLaHO+Huo4GomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMzh17MNEneHntSyFoVQ2n7GZWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmQ0YTEwOWItYTZlYy0z YzM3LTgzYmUtODQxMTdhYzgxYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnlFMHAgRBmZx4PcW5I5xaipFQ3mLFSX1GkMe6Fad8/C5BkxY34mZtS C80k1Fffl27dCxqG3W776GrNdgSxxbg84qdP/ZFfXpYUs0qNQbLaAkNhJtYYk+UL Mm+Aj6X9LkH6Kecv1jCJS0jtjnMzDwiJ3Du8NLLO63eXO0kPJZ7WI9MxZ+PSajQY dWJJzbAIqTi8ZBJu98Iff8IIgXHUR12x8NW1zpPWRaq7f2FjqEN+Efqb4aEvHb6c 054Wy51ZwjHQa3bGSGWkQ3Yvavr+HgMD1EK8euwdk1fEWHAttLx0/zorDot7CMQt KgV16PCtPs++iZLUXCtg7+jdrPz1R1M= -----END CERTIFICATE-----Generated at Sun Jun 8 04:13:39 2025 by rpki-client