$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa File: aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa (raw, json) Hash identifier: +tH+a75F/ToOdB+jYoFny26fcSSjcQu0Q8ZX3CGlzBs= Subject key identifier: 9F:2D:26:7F:B7:4A:25:7C:6D:FF:B8:4B:83:0A:1A:CB:19:7A:38:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A7640C3C7FED3936144C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 63949 IP address blocks: 172.235.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:76:40:c3:c7:fe:d3:93:61:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=cf6de45e-d900-4f90-ace8-03d53ca25fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:fc:8c:85:6a:76:cf:6b:0c:ea:c1:aa:a2: ef:3e:bd:8f:54:12:73:16:20:eb:b7:fe:e9:14:0d: 62:09:61:81:a9:ec:3c:a6:80:0d:7f:5e:c7:4b:c0: ef:99:bd:e0:0d:96:d7:39:a0:a4:c7:12:b3:78:59: e8:7d:11:bc:c1:18:32:33:25:67:e1:e0:12:2c:38: 54:fa:03:dd:da:dc:1e:38:09:a2:9f:84:30:d9:63: 04:82:e3:88:62:8c:14:c4:af:6e:49:12:aa:c2:ab: 0d:30:21:d3:55:91:39:63:6d:ee:4d:63:a9:b0:c5: 98:06:d9:19:e1:9f:99:42:eb:db:1b:1c:4c:69:d6: 62:ac:fa:83:54:f7:49:7d:96:26:e5:5e:32:f8:7b: 86:a9:54:f0:b6:0c:ae:79:bc:5c:a4:20:c7:74:19: b8:f4:fc:dd:65:1c:13:7d:69:81:01:40:e5:ec:64: fc:f6:db:ed:01:03:13:26:5d:17:de:7d:7a:b1:18: e4:d5:ae:47:ee:4d:b3:30:0f:d3:d8:53:f4:16:dd: da:73:3a:8d:f3:93:88:9a:a4:4b:3a:9b:3b:69:23: a1:1b:06:8f:00:17:15:f0:89:04:76:a2:ec:c6:f1: ab:a7:72:2d:bf:28:d0:56:f8:75:bd:25:51:3d:90: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2D:26:7F:B7:4A:25:7C:6D:FF:B8:4B:83:0A:1A:CB:19:7A:38:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaad9cc4-26e8-3f10-bfb6-f9c515f35977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fd:28:b1:57:eb:17:22:d4:18:36:00:f2:ab:7a:41:39:97: 7b:fb:d9:66:fe:5e:aa:b5:e4:9e:9f:c6:bd:5d:68:07:e7:24: 9b:0b:65:c6:81:80:11:05:0a:56:e6:0c:26:bf:f0:d9:26:7d: 2e:87:02:b1:f6:a4:73:fc:99:6e:19:ca:d5:36:72:60:5b:23: 14:18:fd:3e:b3:b2:e3:bd:76:92:12:b2:43:ab:83:83:5f:79: 13:c2:80:93:db:8d:89:59:b7:d1:11:42:c9:de:27:94:0d:cf: d8:93:c6:aa:8a:82:be:fd:7b:37:f2:49:4a:d2:0d:db:60:ec: fa:2e:6e:73:a1:d4:57:06:d1:0e:37:01:ad:c3:0b:6c:62:fa: 3a:4c:a5:c8:e0:f8:81:02:bc:32:9a:99:80:02:ed:b4:f6:0f: 34:9e:d4:89:92:96:c8:af:f1:83:b0:29:2f:09:3f:62:8c:58: 5f:b6:f3:7d:ae:67:1c:61:f5:be:6e:f5:44:9d:c0:2c:a1:82: b4:76:bf:4a:89:d6:86:3e:56:84:78:f7:fc:13:ee:c3:10:fe: 9a:68:c8:67:e2:ad:10:9f:0a:a5:a2:82:c4:71:b1:f7:b8:bc: c2:ce:de:a1:b1:4e:c4:3b:2d:a9:4e:98:79:89:bf:69:c7:6f: f8:83:ba:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnZAw8f+05NhRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Y2Y2ZGU0NWUtZDkwMC00ZjkwLWFjZTgtMDNkNTNjYTI1ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+X8jIVqds9rDOrBqqLvPr2PVBJzFiDrt/7p FA1iCWGBqew8poANf17HS8Dvmb3gDZbXOaCkxxKzeFnofRG8wRgyMyVn4eASLDhU +gPd2tweOAmin4Qw2WMEguOIYowUxK9uSRKqwqsNMCHTVZE5Y23uTWOpsMWYBtkZ 4Z+ZQuvbGxxMadZirPqDVPdJfZYm5V4y+HuGqVTwtgyuebxcpCDHdBm49PzdZRwT fWmBAUDl7GT89tvtAQMTJl0X3n16sRjk1a5H7k2zMA/T2FP0Ft3aczqN85OImqRL Ops7aSOhGwaPABcV8IkEdqLsxvGrp3ItvyjQVvh1vSVRPZCmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8tJn+3SiV8bf+4S4MKGssZejhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFhZDljYzQtMjZlOC0z ZjEwLWJmYjYtZjljNTE1ZjM1OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb9KLFX6xci1Bg2APKrekE5l3v72Wb+Xqq15J6fxr1daAfnJJsLZcaB gBEFClbmDCa/8NkmfS6HArH2pHP8mW4ZytU2cmBbIxQY/T6zsuO9dpISskOrg4Nf eRPCgJPbjYlZt9ERQsneJ5QNz9iTxqqKgr79ezfySUrSDdtg7PoubnOh1FcG0Q43 Aa3DC2xi+jpMpcjg+IECvDKamYAC7bT2DzSe1ImSlsiv8YOwKS8JP2KMWF+2832u Zxxh9b5u9USdwCyhgrR2v0qJ1oY+VoR49/wT7sMQ/ppoyGfirRCfCqWigsRxsfe4 vMLO3qGxTsQ7LalOmHmJv2nHb/iDuic= -----END CERTIFICATE-----Generated at Sat Jun 7 13:43:31 2025 by rpki-client