$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ca930a-376a-3a46-86a7-480530a4ff01.roa File: 72ca930a-376a-3a46-86a7-480530a4ff01.roa (raw, json) Hash identifier: H07mPvE2YXG4J29XR6BKQJ3xUXjiRJAYmdaEnpZKWtw= Subject key identifier: 4C:4A:C2:8F:A1:D6:9E:EF:B1:23:7E:C4:D9:D9:76:38:D4:21:1A:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852F36C2654190EC8E2A20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ca930a-376a-3a46-86a7-480530a4ff01.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 35994 IP address blocks: 72.247.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2f:36:c2:65:41:90:ec:8e:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=5c655c9c-4e63-4d08-a367-c7eefe50816d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:ad:98:f5:ca:27:d5:98:1a:57:1b:ce:f4: d0:82:88:e6:fb:29:43:6f:50:e3:14:91:91:fa:e3: 79:e4:2a:91:59:61:02:3f:b5:86:85:e2:39:cd:84: 8e:0d:b6:e5:fc:75:1f:15:c0:6e:1a:54:ba:fc:a3: 62:f3:97:d7:23:0f:90:7e:dd:9f:c6:dd:55:fc:46: 43:65:ce:95:ca:b4:b8:a9:d9:dd:6c:41:b5:de:b9: a9:46:51:dc:b2:f4:ea:55:96:1e:a0:e7:20:f8:d0: 03:2c:0a:76:54:2a:d1:c1:6e:72:37:24:bb:ac:4f: b9:16:26:bc:a2:e0:d2:f5:32:99:9a:3d:9c:60:ae: d7:12:1a:0d:1e:34:4a:6b:07:bc:37:69:6c:2c:81: bc:c6:fd:11:04:c0:2b:d2:85:76:d2:82:7f:24:43: 70:d5:96:8f:36:6e:51:ea:64:d6:6e:30:89:68:5b: cb:57:56:8f:ef:fd:bd:9d:a8:04:3c:53:d3:c0:31: c5:33:b5:d4:e6:6f:57:b9:e9:2b:77:d3:b0:03:37: 0a:0c:a5:db:89:72:31:ad:eb:51:88:26:73:d3:ad: 55:bb:95:0c:de:2e:4c:1d:9d:da:10:0f:fa:f6:7f: e4:f2:a2:af:8e:89:96:40:50:2f:a8:ef:5d:8d:ed: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4A:C2:8F:A1:D6:9E:EF:B1:23:7E:C4:D9:D9:76:38:D4:21:1A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ca930a-376a-3a46-86a7-480530a4ff01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c3:7a:3e:67:b7:9d:73:0c:f3:bc:92:f8:6a:01:08:b1:5c: 97:8c:0d:0d:de:46:ee:8a:af:1a:9a:1b:98:40:b4:e0:27:02: 0c:41:f0:eb:ac:73:e7:5a:f2:39:14:af:ee:c6:21:0b:7c:2e: 8e:c3:64:f0:1a:92:50:81:a4:de:44:5c:60:15:66:e2:6e:77: 44:77:c8:5f:28:14:cd:18:7a:cb:66:f8:d9:fb:54:74:38:a8: 37:51:60:10:30:69:17:0d:8b:64:67:11:0e:e5:ca:a1:5d:14: 7a:61:55:06:69:e3:78:aa:a9:be:3d:c1:d0:5b:5a:04:45:ec: 00:a2:b7:31:e8:3b:c8:2e:93:f4:b8:1b:7a:17:c6:61:d7:df: 0f:81:b1:38:fd:ac:78:a0:41:ed:69:71:78:61:85:55:77:6c: 40:39:18:f9:a4:db:3c:73:a8:4c:26:3a:72:e3:30:3a:09:8f: 6a:3b:03:d4:38:f6:c0:33:b6:ce:f8:53:35:22:9c:59:e5:af: 8c:f0:90:6e:c7:cd:6b:b5:bc:30:c9:29:38:96:fc:a8:a9:c3: 2a:54:9c:94:2a:96:8a:aa:03:72:da:41:ce:26:42:ef:83:87: 11:0a:2f:e4:c0:f1:31:83:a5:75:6c:47:df:72:33:f2:cb:b1: fc:e8:c9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS82wmVBkOyOKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NWM2NTVjOWMtNGU2My00ZDA4LWEzNjctYzdlZWZlNTA4MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7OtmPXKJ9WYGlcbzvTQgojm+ylDb1DjFJGR +uN55CqRWWECP7WGheI5zYSODbbl/HUfFcBuGlS6/KNi85fXIw+Qft2fxt1V/EZD Zc6VyrS4qdndbEG13rmpRlHcsvTqVZYeoOcg+NADLAp2VCrRwW5yNyS7rE+5Fia8 ouDS9TKZmj2cYK7XEhoNHjRKawe8N2lsLIG8xv0RBMAr0oV20oJ/JENw1ZaPNm5R 6mTWbjCJaFvLV1aP7/29nagEPFPTwDHFM7XU5m9Xuekrd9OwAzcKDKXbiXIxretR iCZz061Vu5UM3i5MHZ3aEA/69n/k8qKvjomWQFAvqO9dje28kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExKwo+h1p7vsSN+xNnZdjjUIRqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJjYTkzMGEtMzc2YS0z YTQ2LTg2YTctNDgwNTMwYTRmZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzDej5nt51zDPO8kvhqAQixXJeMDQ3eRu6KrxqaG5hAtOAnAgxB8Ous c+da8jkUr+7GIQt8Lo7DZPAaklCBpN5EXGAVZuJud0R3yF8oFM0Yestm+Nn7VHQ4 qDdRYBAwaRcNi2RnEQ7lyqFdFHphVQZp43iqqb49wdBbWgRF7ACitzHoO8guk/S4 G3oXxmHX3w+BsTj9rHigQe1pcXhhhVV3bEA5GPmk2zxzqEwmOnLjMDoJj2o7A9Q4 9sAzts74UzUinFnlr4zwkG7HzWu1vDDJKTiW/KipwypUnJQqloqqA3LaQc4mQu+D hxEKL+TA8TGDpXVsR99yM/LLsfzoycE= -----END CERTIFICATE-----Generated at Sat Jun 7 15:31:19 2025 by rpki-client