$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa File: 80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa (raw, json) Hash identifier: ozFEK9EiLfUfaqXmbKwo6hWG9DtZjzjssSj/bbphn/Q= Subject key identifier: FF:2C:E6:BF:14:66:A8:BE:72:02:9C:32:69:1D:B0:E1:5D:EB:E9:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A85B6BC50BC09F0929A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 173.223.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:85:b6:bc:50:bc:09:f0:92:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=59ffb043-eeeb-4acd-9dc3-1a9cd0ac047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:1a:0f:e8:d7:e4:c7:6a:37:db:82:5b:82: 1d:f8:c9:60:9d:9c:b6:d3:4e:28:0c:0b:e7:58:0b: 67:b6:81:81:3f:f6:95:9d:fd:a5:b3:f4:eb:35:1e: 5c:1c:59:5f:15:ba:b9:e6:15:0a:e8:17:39:ba:3d: 03:c3:39:cf:c6:af:c0:2f:1c:02:55:e5:3f:6b:8a: 72:05:fb:b3:89:34:6c:f7:34:45:13:8a:61:3b:39: 85:c9:1a:5b:66:8d:01:05:27:8f:0c:32:54:77:10: 97:17:44:54:51:4d:bd:dd:5c:97:28:72:45:24:9a: eb:a7:5b:af:ff:4a:5b:39:27:1a:30:7d:6b:99:56: f7:80:2d:26:a7:96:a0:ab:1b:25:9d:93:db:ab:d2: bf:ce:71:f7:2b:21:00:43:91:2c:d1:77:89:18:fb: e3:8c:a0:b6:d6:f6:7a:12:69:c8:9b:74:16:2a:89: 22:bd:5f:e6:b3:a1:34:14:8c:46:c1:2d:48:c9:7b: 8d:1c:4b:c5:5e:72:24:2f:19:1e:2f:f4:b7:91:86: 1d:1e:f9:43:dd:de:74:56:e8:2c:27:fe:97:af:92: 43:eb:d8:39:91:07:13:26:a3:26:24:a2:d3:45:23: 3c:25:06:66:0a:79:33:23:61:01:a1:36:17:9b:0a: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:E6:BF:14:66:A8:BE:72:02:9C:32:69:1D:B0:E1:5D:EB:E9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d1cfb5-e6d9-32dd-aa6a-3056e113667a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:94:02:9b:15:22:84:44:72:cd:81:90:85:1d:30:4d:a3:eb: 92:69:09:27:d7:50:ac:ac:54:8f:3c:1d:ab:c0:26:79:7a:20: 39:07:dc:b5:c3:c1:93:09:3f:e7:55:4a:27:ab:8d:a2:e2:5c: 25:3e:6f:6e:3f:4c:03:25:95:cd:08:ad:d3:a4:00:cc:5a:c2: 66:45:7a:40:cc:c1:66:fa:ac:f5:51:ce:1a:1d:bb:d9:8e:12: 01:f9:f7:3c:03:52:a5:fd:67:49:ed:2f:28:cc:77:ef:53:2a: eb:2c:7e:f9:00:eb:71:41:99:db:45:f3:2d:5b:b2:3c:4a:a3: 47:5c:3c:ad:a2:df:02:ea:d1:67:59:b6:07:b7:62:38:87:39: e1:da:5d:d1:f7:59:02:70:44:2c:b8:eb:e6:63:49:87:f9:cf: a2:c3:e7:26:a1:37:cb:bb:6e:bc:a1:85:09:c4:7d:8d:0b:08: 94:40:d1:e0:44:df:ed:01:78:7e:09:9d:31:5a:fb:76:d1:7f: a6:9b:04:c6:2b:46:d2:88:f4:4d:de:a2:2a:12:91:81:86:a1: 13:d1:fa:87:5b:7b:b0:1b:72:d5:33:92:98:3d:78:12:25:6a: b6:e5:16:27:79:c1:64:90:83:90:bb:86:be:8d:f2:80:b1:81: d0:24:f6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoW2vFC8CfCSmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NTlmZmIwNDMtZWVlYi00YWNkLTlkYzMtMWE5Y2QwYWMwNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUsaD+jX5MdqN9uCW4Id+MlgnZy2004oDAvn WAtntoGBP/aVnf2ls/TrNR5cHFlfFbq55hUK6Bc5uj0DwznPxq/ALxwCVeU/a4py BfuziTRs9zRFE4phOzmFyRpbZo0BBSePDDJUdxCXF0RUUU293VyXKHJFJJrrp1uv /0pbOScaMH1rmVb3gC0mp5agqxslnZPbq9K/znH3KyEAQ5Es0XeJGPvjjKC21vZ6 EmnIm3QWKokivV/ms6E0FIxGwS1IyXuNHEvFXnIkLxkeL/S3kYYdHvlD3d50Vugs J/6Xr5JD69g5kQcTJqMmJKLTRSM8JQZmCnkzI2EBoTYXmwooJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8s5r8UZqi+cgKcMmkdsOFd6+mAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBkMWNmYjUtZTZkOS0z MmRkLWFhNmEtMzA1NmUxMTM2NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaUApsVIoREcs2BkIUdME2j65JpCSfXUKysVI88HavAJnl6IDkH3LXD wZMJP+dVSierjaLiXCU+b24/TAMllc0IrdOkAMxawmZFekDMwWb6rPVRzhodu9mO EgH59zwDUqX9Z0ntLyjMd+9TKussfvkA63FBmdtF8y1bsjxKo0dcPK2i3wLq0WdZ tge3YjiHOeHaXdH3WQJwRCy46+ZjSYf5z6LD5yahN8u7bryhhQnEfY0LCJRA0eBE 3+0BeH4JnTFa+3bRf6abBMYrRtKI9E3eoioSkYGGoRPR+odbe7AbctUzkpg9eBIl arblFid5wWSQg5C7hr6N8oCxgdAk9iY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:44 2025 by rpki-client