$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85d1d9ff-91c5-35d5-abe7-b53bb3a4cc5c.roa File: 85d1d9ff-91c5-35d5-abe7-b53bb3a4cc5c.roa (raw, json) Hash identifier: ZhOg5MrIbouRbKrAJ9yt7XE0urQnnXVIdHTNbVuhsE0= Subject key identifier: 34:E7:A8:99:BC:3A:EB:32:87:56:AB:10:3E:5C:5A:7D:B2:02:EF:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A92948684CC6F35EF8340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85d1d9ff-91c5-35d5-abe7-b53bb3a4cc5c.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 173.223.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:92:94:86:84:cc:6f:35:ef:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=07be062c-b421-40f6-8944-e4ad300e4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:1e:15:bd:55:bb:32:05:32:ba:88:f6:78: bd:33:0f:55:a6:34:5a:e1:78:d1:7f:ad:45:7d:7b: 1d:f5:2a:63:f1:1c:2e:72:2e:49:59:40:17:d1:a6: 47:7a:ad:11:54:b9:87:7c:d6:df:65:51:cd:5b:40: c7:4e:9f:f8:2e:bd:44:70:7f:17:84:57:22:38:48: 9c:d2:15:9e:23:ca:7e:c9:74:ff:7f:bd:0d:df:7a: fd:25:18:9b:6b:23:43:1a:c0:01:f4:ef:aa:1f:aa: 70:64:73:7e:f7:f7:71:01:8f:08:52:3b:41:fd:10: 82:26:e0:6b:a3:49:ca:5b:34:44:1a:0a:78:92:d3: 31:ba:3e:b2:31:33:d7:3b:14:97:90:08:b0:2a:63: 35:c5:7f:41:07:3b:0f:a7:aa:41:05:39:14:83:ab: a1:d5:ab:77:11:fe:a3:86:73:9b:56:f3:5f:34:3a: db:2c:55:c1:a4:3b:47:a0:ee:51:9e:df:88:c7:aa: fa:b5:eb:fb:df:4f:33:b7:50:0f:14:05:90:6e:15: 99:91:54:c9:93:84:63:f8:c4:a9:99:ca:c5:0f:f5: 84:13:44:ff:4f:bb:36:b2:3b:03:fb:ae:d2:12:91: 34:21:02:24:e0:1c:a1:8f:36:c4:00:cd:ac:21:8c: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E7:A8:99:BC:3A:EB:32:87:56:AB:10:3E:5C:5A:7D:B2:02:EF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85d1d9ff-91c5-35d5-abe7-b53bb3a4cc5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e2:2c:09:6d:1b:90:a1:c1:72:79:35:2c:0a:01:05:55:26: 2e:7f:96:ab:fc:a2:1d:69:1e:c3:54:b5:82:c0:87:34:7a:39: 17:13:79:e2:a7:22:2f:53:2a:73:af:4f:6d:4f:28:25:b0:aa: 61:6c:56:44:1b:9d:b5:6d:76:6f:aa:27:af:00:7e:24:db:df: c6:d8:88:57:f7:4e:2b:3c:2a:df:f9:ef:57:9a:db:57:92:32: 66:38:84:f6:84:1d:eb:c1:12:5a:ac:23:ce:7b:f3:1a:31:36: e7:51:c9:51:04:6e:6b:47:b8:93:cb:fa:13:c4:ac:85:56:74: 56:cb:fa:37:32:b5:64:ae:12:55:43:73:63:1b:ab:81:d9:46: f5:cd:46:df:4d:38:ce:55:ca:f8:31:a7:c7:f9:d6:44:75:8b: a4:18:69:c8:e8:46:c7:46:02:0f:3e:f8:2b:65:4f:53:d4:76: a2:69:28:62:b0:cf:5e:c5:b5:19:a7:2a:74:91:41:8e:03:7a: 3d:bb:b5:2d:eb:82:83:ac:cf:f8:e5:b4:34:e7:c2:f5:a2:0b: 85:11:00:ab:cb:41:7f:7b:c5:31:f1:db:78:b9:41:3b:7b:db: e6:ff:7b:4f:02:37:04:13:2e:bd:06:e5:5a:28:6d:19:e9:c6: 3b:6f:21:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpKUhoTMbzXvg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MDdiZTA2MmMtYjQyMS00MGY2LTg5NDQtZTRhZDMwMGU0OTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjgeFb1VuzIFMrqI9ni9Mw9VpjRa4XjRf61F fXsd9Spj8Rwuci5JWUAX0aZHeq0RVLmHfNbfZVHNW0DHTp/4Lr1EcH8XhFciOEic 0hWeI8p+yXT/f70N33r9JRibayNDGsAB9O+qH6pwZHN+9/dxAY8IUjtB/RCCJuBr o0nKWzREGgp4ktMxuj6yMTPXOxSXkAiwKmM1xX9BBzsPp6pBBTkUg6uh1at3Ef6j hnObVvNfNDrbLFXBpDtHoO5Rnt+Ix6r6tev7308zt1APFAWQbhWZkVTJk4Rj+MSp mcrFD/WEE0T/T7s2sjsD+67SEpE0IQIk4ByhjzbEAM2sIYzMywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTnqJm8Ousyh1arED5cWn2yAu/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODVkMWQ5ZmYtOTFjNS0z NWQ1LWFiZTctYjUzYmIzYTRjYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrd+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbiLAltG5ChwXJ5NSwKAQVVJi5/lqv8oh1pHsNUtYLAhzR6ORcTeeKn Ii9TKnOvT21PKCWwqmFsVkQbnbVtdm+qJ68AfiTb38bYiFf3Tis8Kt/571ea21eS MmY4hPaEHevBElqsI8578xoxNudRyVEEbmtHuJPL+hPErIVWdFbL+jcytWSuElVD c2Mbq4HZRvXNRt9NOM5Vyvgxp8f51kR1i6QYacjoRsdGAg8++CtlT1PUdqJpKGKw z17FtRmnKnSRQY4Dej27tS3rgoOsz/jltDTnwvWiC4URAKvLQX97xTHx23i5QTt7 2+b/e08CNwQTLr0G5VoobRnpxjtvIW8= -----END CERTIFICATE-----Generated at Sat Jun 7 14:12:14 2025 by rpki-client