$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa File: 903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa (raw, json) Hash identifier: gYymEQWH1nLNOT0XLVAV/pna9ssedYnXCMcH/4MYkdE= Subject key identifier: F4:AF:93:7D:F0:21:6B:B5:9E:EB:C8:40:BC:AE:4D:32:64:91:36:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E4EFD076C8BDCB72A5A00100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 16625 IP address blocks: 72.246.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d0:76:c8:bd:cb:72:a5:a0:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=4108bbc2-0497-4e5b-ab02-1f3e2e688b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:9e:e5:02:c1:1d:e4:54:85:ea:bc:12:c6: fe:09:c5:f9:c0:34:9e:b6:f9:0e:63:8a:7a:56:6d: 7b:70:a7:71:f4:e4:2f:b7:91:60:e8:e8:a3:0a:a3: cd:d0:c9:86:b2:26:af:08:48:0a:a4:74:11:38:82: d6:75:81:8f:ec:8f:c2:aa:f7:b9:ac:40:6d:85:07: 53:ce:35:ae:b1:ad:c8:80:68:2a:9a:7d:72:cc:7d: e9:f8:7e:f3:89:b9:bb:c5:08:f9:4a:0b:32:82:83: 16:19:f6:8e:9b:4f:62:12:f5:76:2d:67:e8:55:75: 4a:a9:63:6f:7f:c8:ce:61:7d:c8:22:06:63:e9:79: a4:45:9b:f3:59:b2:4d:22:e6:8f:19:85:f5:17:05: fb:57:71:5d:7f:da:59:c9:f9:2d:f2:e3:75:cf:6f: cc:fd:cb:98:8e:ff:df:f6:6a:40:66:6e:17:e1:71: b6:8c:cf:84:2a:ef:18:64:c7:12:90:c2:25:10:87: 75:8c:41:95:8f:cc:1a:27:1f:8b:34:b0:ca:66:da: b2:42:84:28:8a:7c:a6:97:eb:dc:f8:13:7d:43:18: e7:c2:01:ba:44:9a:48:41:bd:56:f4:11:0e:24:17: 45:b9:9e:86:8f:8f:0b:f0:ae:d0:8c:80:8a:eb:1d: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AF:93:7D:F0:21:6B:B5:9E:EB:C8:40:BC:AE:4D:32:64:91:36:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:e9:0c:3e:d7:75:7a:41:a6:e1:cd:98:22:c5:ef:70:03: b5:6f:62:47:29:43:be:00:cc:35:94:78:47:f8:cf:0e:46:6e: 14:d2:0a:b5:e2:09:4c:b5:58:5f:7b:ba:f9:a2:71:61:f4:46: 3c:15:ac:b7:f0:18:6a:ad:f8:ae:90:15:1e:a6:2b:f8:98:d8: 6a:a8:73:1b:b5:08:27:dd:cf:9b:cc:51:47:d1:33:26:68:d6: 79:55:b9:db:c6:ae:07:63:4e:42:78:da:5b:03:db:fe:68:48: bd:76:35:1b:4b:f4:9e:9d:fe:bf:cd:f2:6a:10:59:92:e3:f8: 5c:dd:5c:56:fb:85:b3:d2:ad:6b:d8:44:36:20:ad:45:7c:d7: e9:6c:85:82:43:09:aa:33:d0:45:4d:c4:ca:8b:01:22:8e:c8: 96:d3:42:7c:63:13:01:eb:07:8a:34:08:49:63:5f:d4:a0:06: 72:9a:45:35:a0:bc:0a:d9:ff:6c:59:f7:b5:a3:72:88:bd:02: 30:82:7e:33:d8:0e:b3:ee:3a:97:e1:38:6b:22:69:b1:de:b7: 18:87:77:5f:63:a2:a8:ab:a3:c3:b0:fc:88:0f:5a:5d:71:23: ab:3f:1a:d5:42:fb:52:8f:e7:cd:34:c7:a2:dc:95:b3:81:19: 25:32:81:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79B2yL3LcqWgAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDEwOGJiYzItMDQ5Ny00ZTViLWFiMDItMWYzZTJlNjg4YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Ge5QLBHeRUheq8Esb+CcX5wDSetvkOY4p6 Vm17cKdx9OQvt5Fg6OijCqPN0MmGsiavCEgKpHQROILWdYGP7I/Cqve5rEBthQdT zjWusa3IgGgqmn1yzH3p+H7zibm7xQj5SgsygoMWGfaOm09iEvV2LWfoVXVKqWNv f8jOYX3IIgZj6XmkRZvzWbJNIuaPGYX1FwX7V3Fdf9pZyfkt8uN1z2/M/cuYjv/f 9mpAZm4X4XG2jM+EKu8YZMcSkMIlEId1jEGVj8waJx+LNLDKZtqyQoQoinyml+vc +BN9QxjnwgG6RJpIQb1W9BEOJBdFuZ6Gj48L8K7QjICK6x1MIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSvk33wIWu1nuvIQLyuTTJkkTYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzOTA2YjItYjQ4My0z Y2VmLThkNGUtYjE1YjliZjFlMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw16Qw+13V6QabhzZgixe9wA7VvYkcpQ74AzDWUeEf4zw5GbhTSCrXi CUy1WF97uvmicWH0RjwVrLfwGGqt+K6QFR6mK/iY2Gqocxu1CCfdz5vMUUfRMyZo 1nlVudvGrgdjTkJ42lsD2/5oSL12NRtL9J6d/r/N8moQWZLj+FzdXFb7hbPSrWvY RDYgrUV81+lshYJDCaoz0EVNxMqLASKOyJbTQnxjEwHrB4o0CEljX9SgBnKaRTWg vArZ/2xZ97Wjcoi9AjCCfjPYDrPuOpfhOGsiabHetxiHd19joqiro8Ow/IgPWl1x I6s/GtVC+1KP5800x6LclbOBGSUygdQ= -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:05 2025 by rpki-client