$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa File: 8dca6e30-e5ec-3a17-ab58-0740102380f8.roa (raw, json) Hash identifier: PwP1Ai85uyZykVOI1vHn7X5G3NpEPbMuCHkqmZw26kw= Subject key identifier: 04:EA:7A:29:A1:86:40:67:59:23:60:24:E7:B8:E1:2D:0B:42:EC:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A764F687D7A938EF20440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.235.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:76:4f:68:7d:7a:93:8e:f2:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=066627c9-8dad-42a9-a1ff-6d751cce0afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:c4:6d:b3:b9:96:be:b4:f8:e2:d5:e1:58: 94:e0:61:10:a1:df:a6:2f:16:79:c9:3a:53:4c:5e: 3a:44:1c:91:ed:00:90:e7:b2:c1:58:9f:a9:27:7f: b1:15:39:ad:a7:8c:30:2c:ed:92:04:49:97:10:09: 5c:e0:7b:cb:53:fe:a8:f8:14:dd:a3:d3:6a:56:ee: c0:99:5a:18:92:df:a7:98:b9:85:47:03:15:32:10: ab:46:9e:9f:0a:ac:59:b3:e1:25:08:09:48:fa:bc: 2c:7a:0e:15:5b:c2:50:13:31:73:e9:2b:89:3d:97: 38:c8:4f:9c:e2:24:2d:0b:62:3c:b9:9d:51:06:f1: a3:21:1e:30:1b:51:7a:5a:61:73:1e:d0:58:6f:99: 41:b5:7d:04:d8:60:28:a5:de:6d:35:43:27:12:9e: 87:75:80:81:00:50:ea:6e:ff:a7:c9:c9:66:c2:f1: 4f:66:54:46:1e:0c:04:56:6d:c5:8e:ef:0b:90:b8: dd:5d:0c:a7:70:44:b7:cc:6a:6e:08:cd:8f:61:1d: ad:a2:e7:79:c1:60:86:19:b6:47:2a:b5:1f:ab:51: 0c:34:21:fe:95:15:45:1f:60:c6:51:62:d1:d9:82: fd:d1:08:ee:e5:31:7c:b8:6c:50:22:81:28:90:53: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:7A:29:A1:86:40:67:59:23:60:24:E7:B8:E1:2D:0B:42:EC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:88:05:98:ea:48:66:a3:51:08:8a:50:87:e6:cb:03:1a:c3: 91:a8:39:de:aa:6e:90:5b:eb:45:80:3e:b8:09:4d:6d:2a:44: 15:0e:e6:cd:e2:1b:86:3d:ef:4e:a6:7a:98:09:73:fc:5d:e4: 58:21:21:d2:71:8a:bc:02:11:98:05:33:10:68:47:75:a7:ab: 71:c1:19:32:ff:07:56:73:fc:4f:b3:2c:a9:1c:28:79:e3:e8: b3:c2:3a:9a:55:b4:8e:a1:8a:6b:6c:9f:7c:90:1b:3e:1c:b0: 58:3e:b0:4a:40:b2:9e:8b:5f:90:aa:15:e6:6f:e2:0d:88:e3: 6b:c7:d4:51:8e:2e:c9:1c:8c:1c:2f:95:f7:06:cc:d0:c1:75: 3d:83:be:3d:d9:65:df:c6:97:eb:bc:53:99:9f:45:0c:44:2a: 3e:91:4b:9e:d7:de:8d:c8:6c:a3:96:59:3a:a7:07:32:ef:24: 62:9f:87:fa:10:7a:f9:c0:9b:72:27:44:a9:03:c1:1f:97:33: 1f:e0:a1:c3:19:37:04:a6:bc:7c:99:f7:72:64:8f:ba:19:b9: d7:e1:7e:c4:40:7a:e1:76:9e:e7:a8:b8:5e:20:6f:8d:c4:03: ed:9e:f3:de:0a:9d:bb:01:02:36:44:34:96:a9:d2:5a:7c:37: 05:97:3f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnZPaH16k47yBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MDY2NjI3YzktOGRhZC00MmE5LWExZmYtNmQ3NTFjY2UwYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaXEbbO5lr60+OLV4ViU4GEQod+mLxZ5yTpT TF46RByR7QCQ57LBWJ+pJ3+xFTmtp4wwLO2SBEmXEAlc4HvLU/6o+BTdo9NqVu7A mVoYkt+nmLmFRwMVMhCrRp6fCqxZs+ElCAlI+rwseg4VW8JQEzFz6SuJPZc4yE+c 4iQtC2I8uZ1RBvGjIR4wG1F6WmFzHtBYb5lBtX0E2GAopd5tNUMnEp6HdYCBAFDq bv+nyclmwvFPZlRGHgwEVm3Fju8LkLjdXQyncES3zGpuCM2PYR2toud5wWCGGbZH KrUfq1EMNCH+lRVFH2DGUWLR2YL90Qju5TF8uGxQIoEokFMTGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATqeimhhkBnWSNgJOe44S0LQuzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGRjYTZlMzAtZTVlYy0z YTE3LWFiNTgtMDc0MDEwMjM4MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmIBZjqSGajUQiKUIfmywMaw5GoOd6qbpBb60WAPrgJTW0qRBUO5s3i G4Y9706mepgJc/xd5FghIdJxirwCEZgFMxBoR3Wnq3HBGTL/B1Zz/E+zLKkcKHnj 6LPCOppVtI6himtsn3yQGz4csFg+sEpAsp6LX5CqFeZv4g2I42vH1FGOLskcjBwv lfcGzNDBdT2Dvj3ZZd/Gl+u8U5mfRQxEKj6RS57X3o3IbKOWWTqnBzLvJGKfh/oQ evnAm3InRKkDwR+XMx/gocMZNwSmvHyZ93Jkj7oZudfhfsRAeuF2nueouF4gb43E A+2e894KnbsBAjZENJap0lp8NwWXP+g= -----END CERTIFICATE-----Generated at Sat Jun 7 14:05:37 2025 by rpki-client