$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9183d6-6f07-3250-a423-e983a72c151e.roa File: af9183d6-6f07-3250-a423-e983a72c151e.roa (raw, json) Hash identifier: QWvMxW415FYaXogHArXw/nL0/SIpi6yKJJ+G6X3tJ6s= Subject key identifier: AD:17:59:E6:44:6A:F7:56:AC:58:CB:C5:B7:9E:86:7D:CD:DD:3F:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A917AA2A6C6F89A39ACC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9183d6-6f07-3250-a423-e983a72c151e.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 173.222.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:91:7a:a2:a6:c6:f8:9a:39:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=3d78eb07-d759-4d16-90ef-250a557adfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:97:dc:0b:2f:25:d2:40:6e:58:cf:17:aa: a5:25:aa:eb:61:a9:3c:0d:14:04:ac:9b:26:61:c7: ac:eb:52:9a:ad:c8:33:bf:7b:4a:fe:7c:8e:74:d8: 7f:76:2a:58:fd:2e:09:0f:a8:e5:cf:d2:d6:3d:ac: ba:ae:c5:f1:25:f9:a8:06:a9:3a:26:14:c2:5e:92: 99:6b:53:92:78:5a:ce:09:5b:6b:36:3b:dc:e2:ea: 32:08:bb:69:d1:a5:9c:7c:8d:10:d9:c5:b2:14:9c: f2:d6:cb:c0:a2:04:4b:3c:e1:19:d4:6b:7b:71:bc: da:17:50:e8:04:dd:88:5d:ae:fb:58:ae:ca:f0:33: 91:04:44:e0:5d:40:ea:4a:fa:5c:e1:79:71:da:b0: 5f:37:ce:b5:d0:9f:9d:29:6c:f9:41:de:94:50:80: 34:a8:d8:d7:10:65:80:20:ff:34:16:39:41:da:ca: 82:18:b0:e0:13:c7:dc:f5:68:38:72:e2:12:f5:97: 3c:7b:1b:cf:84:49:a5:f4:9a:98:da:c9:01:4a:cc: 0d:c4:b4:45:74:b6:ca:5d:76:b3:96:f5:17:51:da: 4c:18:fd:4f:33:79:0c:5a:51:ba:82:91:e7:4d:ca: 47:16:09:31:6d:39:26:e9:90:f0:41:7a:a1:e9:f2: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:59:E6:44:6A:F7:56:AC:58:CB:C5:B7:9E:86:7D:CD:DD:3F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9183d6-6f07-3250-a423-e983a72c151e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2a:ed:b9:5f:1f:8f:b6:8b:e9:95:42:33:d5:33:ad:f1:ef: 4a:a0:f9:d4:5f:cf:5b:65:99:14:40:71:17:39:ec:1b:04:20: 7d:b9:e9:eb:2e:85:09:7d:c2:a9:7c:1c:0f:e3:d3:2c:c9:c8: 64:90:fb:65:d4:ad:24:47:a9:ea:95:13:d7:b5:8a:c6:5d:18: 40:6d:a6:2b:6a:ec:25:21:70:06:a2:85:99:f5:c7:96:9b:fe: 05:7a:de:b0:6b:af:42:8d:2a:02:5f:ad:46:ac:fa:83:bc:17: c6:3b:f4:88:f2:3f:35:6e:61:c6:9a:f8:58:d3:ee:2b:7b:25: 03:b1:55:1c:9c:eb:d2:4a:87:87:2e:45:8b:3d:07:a2:ad:01: 78:6d:8a:59:e2:ff:7e:3d:a6:c7:3a:9f:70:26:8c:57:90:65: a5:74:d5:90:8c:ac:e9:d2:4a:f2:fd:c9:5f:41:43:76:83:bb: 2b:96:99:46:45:12:e0:9b:97:fa:6c:21:90:93:ee:8b:12:41: 7c:1e:37:a7:e3:82:f7:15:3e:3e:52:9c:39:7f:c6:43:da:04: 5a:72:e8:b9:e3:0d:0c:fd:9f:89:a9:10:ca:1c:4d:7c:78:59: 6c:40:8f:9f:38:c1:c7:6f:4d:b1:97:10:76:d1:fc:1d:64:1d: e8:12:26:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpF6oqbG+Jo5rMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk M2Q3OGViMDctZDc1OS00ZDE2LTkwZWYtMjUwYTU1N2FkZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jWX3AsvJdJAbljPF6qlJarrYak8DRQErJsm Yces61Karcgzv3tK/nyOdNh/dipY/S4JD6jlz9LWPay6rsXxJfmoBqk6JhTCXpKZ a1OSeFrOCVtrNjvc4uoyCLtp0aWcfI0Q2cWyFJzy1svAogRLPOEZ1Gt7cbzaF1Do BN2IXa77WK7K8DORBETgXUDqSvpc4Xlx2rBfN8610J+dKWz5Qd6UUIA0qNjXEGWA IP80FjlB2sqCGLDgE8fc9Wg4cuIS9Zc8exvPhEml9JqY2skBSswNxLRFdLbKXXaz lvUXUdpMGP1PM3kMWlG6gpHnTcpHFgkxbTkm6ZDwQXqh6fJd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0XWeZEavdWrFjLxbeehn3N3T9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWY5MTgzZDYtNmYwNy0z MjUwLWE0MjMtZTk4M2E3MmMxNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0q7blfH4+2i+mVQjPVM63x70qg+dRfz1tlmRRAcRc57BsEIH256esu hQl9wql8HA/j0yzJyGSQ+2XUrSRHqeqVE9e1isZdGEBtpitq7CUhcAaihZn1x5ab /gV63rBrr0KNKgJfrUas+oO8F8Y79IjyPzVuYcaa+FjT7it7JQOxVRyc69JKh4cu RYs9B6KtAXhtilni/349psc6n3AmjFeQZaV01ZCMrOnSSvL9yV9BQ3aDuyuWmUZF EuCbl/psIZCT7osSQXweN6fjgvcVPj5SnDl/xkPaBFpy6LnjDQz9n4mpEMocTXx4 WWxAj584wcdvTbGXEHbR/B1kHegSJjk= -----END CERTIFICATE-----Generated at Sat Jun 7 14:08:52 2025 by rpki-client