$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a223eff-47b2-3f45-ba6f-8b604997f388.roa File: 9a223eff-47b2-3f45-ba6f-8b604997f388.roa (raw, json) Hash identifier: QwZxWfH6RBONoZoiMN7zbEdXB74YaW+MUXGk+8/01Ns= Subject key identifier: 78:46:47:50:20:B1:76:37:3F:72:78:3B:16:B5:1E:74:BD:E7:EF:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D530757AFA0DD58E6B1B04 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a223eff-47b2-3f45-ba6f-8b604997f388.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 63949 IP address blocks: 172.233.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:30:75:7a:fa:0d:d5:8e:6b:1b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=8afb4167-44e9-4caf-b1a3-dc286c4606f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:00:69:39:90:29:33:95:1a:6d:34:25:c3: 20:c6:8a:3d:fd:54:42:2c:40:e4:cd:27:ee:76:f4: bc:ac:41:31:32:12:71:c7:92:f1:83:bd:06:c0:1c: d7:20:d6:d8:f3:4f:dc:30:15:b0:0f:86:0d:94:3b: 8f:c0:67:57:1c:26:c1:46:9e:6e:cf:a8:63:16:3b: b5:1d:f0:44:99:1f:e2:d0:d1:75:ec:ff:2c:70:91: 6f:d2:5f:bf:21:11:71:ec:49:66:92:47:2d:d7:c0: 8f:63:bb:62:49:30:ac:09:d1:de:7f:e7:37:ea:a7: 73:0c:16:9e:cb:b5:18:3b:b0:64:8d:52:28:e8:d4: ea:98:ff:04:3a:de:cc:b1:d5:c7:4f:4b:2e:b0:ef: e6:80:57:6e:44:cc:ad:4a:e0:df:bd:b7:1d:93:83: 42:51:16:61:73:4b:2d:e0:c7:94:85:ec:1f:01:ef: f1:38:9c:a0:3b:c2:8b:95:87:d9:79:76:12:7d:22: 07:f6:56:46:c3:8b:2a:11:41:8f:06:de:b8:50:f3: 66:1b:80:02:74:dd:8c:44:e3:57:68:cb:50:34:31: a5:2b:d2:61:0b:6e:5a:c3:1c:e8:00:a4:3f:b3:28: 6e:74:bf:e5:52:fe:44:0a:2e:06:09:f9:8d:aa:c2: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:47:50:20:B1:76:37:3F:72:78:3B:16:B5:1E:74:BD:E7:EF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a223eff-47b2-3f45-ba6f-8b604997f388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d6:3b:83:ac:60:d0:77:e0:b8:7a:16:42:3e:ce:ef:b2:2f: fe:53:8b:66:f5:a8:74:ae:33:2c:9c:75:e6:ce:6f:46:fd:53: 23:4f:c3:02:00:63:3c:fb:fa:d2:c5:ab:a8:70:9e:22:04:96: 08:b7:af:87:b8:4f:d0:19:bf:ab:ce:66:54:5c:02:15:63:dd: d4:18:23:da:77:99:a7:37:4e:e9:2b:db:51:57:70:03:f9:f5: 8a:12:3c:b4:86:c6:7c:f4:20:26:56:be:22:93:47:f6:ce:67: 01:11:dd:f4:61:d7:e9:81:d7:a2:01:f6:09:a6:f2:b7:4a:28: b4:b3:06:85:d1:81:6d:06:eb:04:18:c9:3c:e4:60:ce:b9:0f: c7:62:6c:57:05:86:39:cf:ca:fe:fd:d8:f5:9b:3b:57:8d:c3: a4:c0:0a:e6:28:97:d6:5a:11:0e:df:ea:38:49:58:da:8b:7d: 86:cd:7e:f3:a1:71:d2:3a:ee:38:cf:ea:96:1b:75:6c:ca:b5: d3:a4:09:e7:00:40:d9:ee:53:cb:d7:55:94:b9:5b:4d:ac:3f: e4:63:78:3f:1a:ca:7b:43:06:b7:04:26:2b:11:29:8e:53:47: 53:f2:ef:31:20:65:b4:ee:f0:01:80:13:c1:6a:03:b9:b3:ba: 8d:0c:1b:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TB1evoN1Y5rGwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OGFmYjQxNjctNDRlOS00Y2FmLWIxYTMtZGMyODZjNDYwNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiukAaTmQKTOVGm00JcMgxoo9/VRCLEDkzSfu dvS8rEExMhJxx5Lxg70GwBzXINbY80/cMBWwD4YNlDuPwGdXHCbBRp5uz6hjFju1 HfBEmR/i0NF17P8scJFv0l+/IRFx7Elmkkct18CPY7tiSTCsCdHef+c36qdzDBae y7UYO7BkjVIo6NTqmP8EOt7MsdXHT0susO/mgFduRMytSuDfvbcdk4NCURZhc0st 4MeUhewfAe/xOJygO8KLlYfZeXYSfSIH9lZGw4sqEUGPBt64UPNmG4ACdN2MRONX aMtQNDGlK9JhC25awxzoAKQ/syhudL/lUv5ECi4GCfmNqsJJ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhGR1AgsXY3P3J4Oxa1HnS95+8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWEyMjNlZmYtNDdiMi0z ZjQ1LWJhNmYtOGI2MDQ5OTdmMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/WO4OsYNB34Lh6FkI+zu+yL/5Ti2b1qHSuMyycdebOb0b9UyNPwwIA Yzz7+tLFq6hwniIElgi3r4e4T9AZv6vOZlRcAhVj3dQYI9p3mac3Tukr21FXcAP5 9YoSPLSGxnz0ICZWviKTR/bOZwER3fRh1+mB16IB9gmm8rdKKLSzBoXRgW0G6wQY yTzkYM65D8dibFcFhjnPyv792PWbO1eNw6TACuYol9ZaEQ7f6jhJWNqLfYbNfvOh cdI67jjP6pYbdWzKtdOkCecAQNnuU8vXVZS5W02sP+RjeD8ayntDBrcEJisRKY5T R1Py7zEgZbTu8AGAE8FqA7mzuo0MG7c= -----END CERTIFICATE-----Generated at Sun Jun 8 05:45:19 2025 by rpki-client