$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa File: 8c01b867-e0ea-380c-95a8-417bf084bf0e.roa (raw, json) Hash identifier: cuKWvlrkjV4Q//5pjMUMQFL9ULkRqT76OnzxdbX3hDY= Subject key identifier: D7:05:6B:CC:DC:95:C1:39:4E:84:47:E6:F3:86:32:D7:86:16:A8:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA8543AC0017819803455580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 72.247.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:43:ac:00:17:81:98:03:45:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=9aea6b36-8bc8-4408-b3e7-b7e759042fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:d9:42:fd:1e:70:e6:41:12:92:a9:5c:3b: 6c:e3:cc:4b:16:81:2a:cd:a6:24:d0:b5:d0:90:0b: a3:36:c0:93:05:d0:31:be:d3:0d:17:6b:84:69:cb: 32:4f:7c:3c:b5:33:05:8f:0c:59:de:8c:f6:54:41: 48:f5:bb:bd:c1:30:08:a7:79:5b:96:63:41:12:b3: c5:be:24:6a:c2:c7:d8:9e:14:f5:88:5c:42:9a:3c: d8:43:1f:1f:40:6b:d4:9f:73:a1:df:f6:01:e2:33: e8:46:35:9c:51:f0:cd:72:b2:31:f5:14:08:56:5e: 04:87:5c:e3:f5:e4:44:91:5e:84:eb:6b:4b:df:ce: 02:4e:50:8e:67:81:d5:36:ea:1f:fd:90:7a:cc:7a: b9:11:54:b0:52:49:1a:61:33:c7:fb:d4:79:f6:d7: 73:50:b4:f0:f3:0b:7e:f1:e3:c7:11:c0:65:dd:de: c6:8b:c4:93:22:cc:b1:9f:07:22:8c:c3:ec:88:0b: a2:fd:5a:14:16:32:db:16:06:06:03:15:6b:7d:d5: 18:5b:e0:ca:81:08:67:b8:5f:79:f1:13:81:27:5f: f3:96:64:cf:27:44:35:6f:7c:1a:1c:1d:c0:0e:d1: ea:03:b0:39:8a:75:94:dd:74:ed:ee:74:28:c0:bb: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:05:6B:CC:DC:95:C1:39:4E:84:47:E6:F3:86:32:D7:86:16:A8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f2:bd:22:a1:f0:44:a7:ed:56:08:f0:27:5f:d0:e8:8b:57: b4:e5:f2:a5:d9:61:8f:77:8b:64:13:49:bf:1c:93:f0:22:dd: e7:00:be:49:fe:3a:27:a0:61:1b:ef:01:38:4d:d6:4a:13:d9: 21:6d:99:36:a5:cb:a5:62:29:da:c8:66:df:b5:ad:05:e6:ec: 70:9a:a4:2a:f9:0a:b9:47:d8:41:34:3e:33:12:55:41:1b:69: cd:be:c7:01:9a:61:5f:11:d6:5d:c6:7e:36:c7:71:75:67:8d: 13:7e:c6:7a:2a:b4:e6:59:de:80:bb:c2:ed:03:66:5e:ce:5c: ea:48:a1:f0:c7:2c:8d:34:79:b6:9e:97:3c:ff:c4:ef:62:1a: b9:54:1b:ef:f2:5b:49:27:c9:53:68:98:0c:62:2f:53:a7:e2: 44:10:96:02:e3:be:1b:2b:a0:52:c5:09:5a:11:b3:14:ab:25: 97:cc:f4:31:ca:d9:b0:49:20:92:fc:93:13:03:7b:5d:82:a7: 21:62:2d:1d:cb:c9:dc:77:91:fa:df:76:36:4f:5d:9d:7a:82: 1d:c4:b2:76:b9:54:7d:cd:7f:51:45:bc:86:1e:22:5a:e6:b5: 2f:b8:77:03:ee:d2:bd:60:45:42:14:6d:fc:ce:74:0d:1c:80: ce:33:4b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUOsABeBmANFVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OWFlYTZiMzYtOGJjOC00NDA4LWIzZTctYjdlNzU5MDQyZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYDZQv0ecOZBEpKpXDts48xLFoEqzaYk0LXQ kAujNsCTBdAxvtMNF2uEacsyT3w8tTMFjwxZ3oz2VEFI9bu9wTAIp3lblmNBErPF viRqwsfYnhT1iFxCmjzYQx8fQGvUn3Oh3/YB4jPoRjWcUfDNcrIx9RQIVl4Eh1zj 9eREkV6E62tL384CTlCOZ4HVNuof/ZB6zHq5EVSwUkkaYTPH+9R59tdzULTw8wt+ 8ePHEcBl3d7Gi8STIsyxnwcijMPsiAui/VoUFjLbFgYGAxVrfdUYW+DKgQhnuF95 8ROBJ1/zlmTPJ0Q1b3waHB3ADtHqA7A5inWU3XTt7nQowLttSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcFa8zclcE5ToRH5vOGMteGFqgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMwMWI4NjctZTBlYS0z ODBjLTk1YTgtNDE3YmYwODRiZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEryvSKh8ESn7VYI8Cdf0OiLV7Tl8qXZYY93i2QTSb8ck/Ai3ecAvkn+ OiegYRvvAThN1koT2SFtmTaly6ViKdrIZt+1rQXm7HCapCr5CrlH2EE0PjMSVUEb ac2+xwGaYV8R1l3GfjbHcXVnjRN+xnoqtOZZ3oC7wu0DZl7OXOpIofDHLI00ebae lzz/xO9iGrlUG+/yW0knyVNomAxiL1On4kQQlgLjvhsroFLFCVoRsxSrJZfM9DHK 2bBJIJL8kxMDe12CpyFiLR3Lydx3kfrfdjZPXZ16gh3Esna5VH3Nf1FFvIYeIlrm tS+4dwPu0r1gRUIUbfzOdA0cgM4zS3Q= -----END CERTIFICATE-----Generated at Sat Jun 7 23:00:56 2025 by rpki-client