$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a10c5298-0414-3e67-8988-567019aa7595.roa File: a10c5298-0414-3e67-8988-567019aa7595.roa (raw, json) Hash identifier: z/flQMF+mxVm56cYw+B2XqAFq0KTukM6h7NbVr/jW4o= Subject key identifier: 47:EB:C0:9B:58:D7:56:9B:7C:48:C5:8A:51:97:20:3C:21:87:D0:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F6431D587B5BB3FF26B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a10c5298-0414-3e67-8988-567019aa7595.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f6:43:1d:58:7b:5b:b3:ff:26:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=fcec7840-cb2b-4b04-826c-10adb31e7040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:32:38:a3:99:3b:95:ea:93:89:0e:1e:2b: f7:cf:ab:66:11:fe:0a:c1:94:f1:44:06:a2:cc:b4: 0d:c3:b3:89:21:3a:ae:f1:7b:c1:f9:f6:03:c8:c7: 08:30:7d:7a:94:a2:d8:d0:b9:d3:5a:99:24:c0:33: 8d:6c:8e:3d:e9:c3:aa:8c:6b:cf:d0:8c:39:58:33: 58:05:03:f4:58:2c:d8:a7:10:77:3d:7d:6d:89:76: 47:7d:17:6c:00:06:c6:45:78:ce:c0:da:c7:31:09: 55:69:bf:7c:90:3a:76:d2:15:97:ca:7f:de:7b:d9: b7:df:ef:06:b2:f2:43:4a:34:b5:bc:cc:9c:97:ef: 1f:ce:a5:57:fe:e5:c4:78:0f:41:4c:a5:04:00:7c: 1c:a0:05:5a:a4:b5:1e:11:61:09:62:89:29:38:99: 35:93:db:d3:66:85:6b:03:82:9b:37:b2:8e:a3:d4: 1d:c5:ff:85:72:5b:e6:1f:72:a2:db:b3:6b:90:94: f5:d6:76:86:70:5f:7e:82:fb:0b:1b:65:38:cd:be: 90:ba:7d:f4:ea:5d:6f:00:aa:02:5a:64:46:74:a6: 23:4c:e7:9c:f9:53:77:a2:b0:9c:a7:b6:63:65:bb: 76:87:12:f7:6e:2e:1c:f3:25:9c:91:af:2b:d4:ad: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EB:C0:9B:58:D7:56:9B:7C:48:C5:8A:51:97:20:3C:21:87:D0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a10c5298-0414-3e67-8988-567019aa7595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:58:b6:f2:f8:7f:87:2c:a9:79:7e:ba:cf:db:3d:41:a1:82: fc:b5:61:74:69:83:b5:06:11:87:c6:9b:70:50:6d:60:ed:32: 5f:f0:1d:be:5f:e3:d0:12:e2:6b:f1:02:e2:74:97:dd:14:8b: 07:cf:05:a0:c2:28:7a:46:2f:84:e0:7b:72:d1:7c:69:55:25: 99:40:68:c3:56:66:0f:b3:0c:f1:02:96:9e:1a:10:93:d1:29: 40:85:ae:e5:4e:d4:1e:c6:c0:3c:60:a2:0c:ba:3d:9e:48:e9: 57:8a:d2:77:e2:30:f6:c0:1d:25:19:07:9a:b3:f0:29:b0:66: e6:b1:bb:a3:7e:4a:93:cc:8a:eb:7f:30:7b:6b:e3:76:27:16: 29:97:8e:fc:a7:af:cb:d7:85:0b:d0:6f:8e:be:20:33:9f:9a: 11:7f:22:0c:fe:ef:e6:08:6d:22:5b:f1:dc:98:bf:fa:b9:fe: e3:65:ba:dc:cc:cb:ab:7e:bc:e6:5a:53:5c:05:04:07:43:ec: fd:df:10:f3:48:cc:24:34:fd:a1:51:25:8d:55:8f:bb:d5:8e: 0e:6c:49:93:10:83:4a:c4:27:73:52:69:89:d4:f4:f3:26:5b: 29:50:f2:38:5a:fe:ec:ac:1d:bf:1c:9d:7e:68:61:6f:60:a1: 75:5e:31:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPZDHVh7W7P/JrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmNlYzc4NDAtY2IyYi00YjA0LTgyNmMtMTBhZGIzMWU3MDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcMyOKOZO5Xqk4kOHiv3z6tmEf4KwZTxRAai zLQNw7OJITqu8XvB+fYDyMcIMH16lKLY0LnTWpkkwDONbI496cOqjGvP0Iw5WDNY BQP0WCzYpxB3PX1tiXZHfRdsAAbGRXjOwNrHMQlVab98kDp20hWXyn/ee9m33+8G svJDSjS1vMycl+8fzqVX/uXEeA9BTKUEAHwcoAVapLUeEWEJYokpOJk1k9vTZoVr A4KbN7KOo9Qdxf+FclvmH3Ki27NrkJT11naGcF9+gvsLG2U4zb6Qun306l1vAKoC WmRGdKYjTOec+VN3orCcp7ZjZbt2hxL3bi4c8yWcka8r1K17vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfrwJtY11abfEjFilGXIDwhh9CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTEwYzUyOTgtMDQxNC0z ZTY3LTg5ODgtNTY3MDE5YWE3NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1YtvL4f4csqXl+us/bPUGhgvy1YXRpg7UGEYfGm3BQbWDtMl/wHb5f 49AS4mvxAuJ0l90UiwfPBaDCKHpGL4Tge3LRfGlVJZlAaMNWZg+zDPEClp4aEJPR KUCFruVO1B7GwDxgogy6PZ5I6VeK0nfiMPbAHSUZB5qz8CmwZuaxu6N+SpPMiut/ MHtr43YnFimXjvynr8vXhQvQb46+IDOfmhF/Igz+7+YIbSJb8dyYv/q5/uNlutzM y6t+vOZaU1wFBAdD7P3fEPNIzCQ0/aFRJY1Vj7vVjg5sSZMQg0rEJ3NSaYnU9PMm WylQ8jha/uysHb8cnX5oYW9goXVeMYI= -----END CERTIFICATE-----Generated at Sat Jun 7 23:34:54 2025 by rpki-client