$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bed431d5-e318-30ac-a137-89150fbcc189.roa File: bed431d5-e318-30ac-a137-89150fbcc189.roa (raw, json) Hash identifier: P4ZFWATZ8HLBcKhCcc4dUuhhTEwZuvNfQo88w872YYY= Subject key identifier: 0D:41:7C:58:F1:7E:0C:EC:D8:97:63:B4:A7:F0:78:72:10:3E:1C:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F5703DA721CC56164400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bed431d5-e318-30ac-a137-89150fbcc189.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f5:70:3d:a7:21:cc:56:16:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=aaeb83e9-7b66-437a-9869-d70ca0210a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:8f:c1:6d:d9:cc:54:7b:c6:c0:3a:3d:be: 99:06:7a:e1:43:90:83:a6:28:d2:2d:b7:91:8e:79: 5d:6c:dc:c3:75:ed:71:6c:da:37:bd:db:db:07:ff: a4:63:61:b0:21:d8:2c:cf:94:bd:b5:69:55:40:ea: c6:da:e6:0e:fa:20:16:f8:76:ab:7d:66:cc:2c:9f: e3:f8:50:8d:34:8e:13:24:ed:7e:1e:2b:e0:1e:ba: 32:3a:b0:76:ce:dd:a4:14:c7:04:ff:2c:67:c9:75: da:97:14:cb:65:00:ae:cd:e9:10:f4:f0:fe:2c:a1: 17:5b:31:b4:bf:7f:b4:05:aa:d6:3e:1c:96:e0:eb: 8f:b4:47:e1:95:ca:15:76:0a:53:02:3d:8b:60:ee: 29:c9:90:af:93:65:1f:f9:90:73:22:20:04:5e:c5: 33:1e:f5:b8:b2:f0:73:3b:c0:44:11:5d:33:bb:e2: fc:fe:a3:92:58:11:5a:94:39:27:fc:99:bc:d3:ad: ab:5b:6b:b0:b7:a1:c1:0e:43:64:a3:32:89:7f:24: 1d:60:e6:17:93:66:38:99:79:e0:53:74:fe:19:f7: e8:74:dd:1c:2d:6e:2d:42:e0:d6:88:c0:f7:96:33: d3:40:5a:13:68:7a:31:0e:f6:a8:6c:de:5b:59:63: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:41:7C:58:F1:7E:0C:EC:D8:97:63:B4:A7:F0:78:72:10:3E:1C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bed431d5-e318-30ac-a137-89150fbcc189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ac:c4:f3:f9:c0:d1:63:1b:dd:6e:ec:5a:a5:92:c0:f7:3f: 6b:bb:46:9c:9f:7f:af:2a:b7:58:b8:77:42:52:f1:ad:42:a0: ef:ef:3c:c7:ce:11:08:a8:5c:70:dd:59:10:44:91:8f:4f:12: 30:fd:86:59:fe:ea:21:6e:3a:11:75:d7:34:5a:e0:19:27:04: c7:4f:18:b4:d0:4e:c2:5c:ae:21:a2:da:51:5c:8d:03:24:5b: b4:bb:d6:4a:67:4b:b8:21:fa:6a:b0:33:3e:31:49:65:91:de: ce:22:d3:e6:2c:ce:bf:c7:c5:e8:54:72:52:6d:15:cd:b8:b3: cb:06:b0:91:c1:27:3b:17:31:5d:90:ee:3b:a5:ce:29:9b:45: 1b:9f:ec:c4:e0:6f:01:c6:19:ec:46:3c:4d:ce:55:0e:4d:74: ee:9f:38:0c:ae:cb:1b:6b:31:8d:46:16:ec:89:55:dc:38:86: 8a:d2:ca:50:46:9d:54:fa:09:b0:12:bc:60:94:c9:6a:87:96: 91:c4:a6:5d:0e:0a:c6:db:01:22:df:74:39:ec:e0:a4:02:df: 5a:85:29:57:1e:41:12:a9:76:60:9f:41:e1:32:38:d6:ef:6d: 13:04:e0:f9:bc:dd:c6:40:3c:7e:dc:71:53:d4:b8:e9:86:82: 0d:ee:08:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPVwPachzFYWRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YWFlYjgzZTktN2I2Ni00MzdhLTk4NjktZDcwY2EwMjEwYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeCPwW3ZzFR7xsA6Pb6ZBnrhQ5CDpijSLbeR jnldbNzDde1xbNo3vdvbB/+kY2GwIdgsz5S9tWlVQOrG2uYO+iAW+HarfWbMLJ/j +FCNNI4TJO1+HivgHroyOrB2zt2kFMcE/yxnyXXalxTLZQCuzekQ9PD+LKEXWzG0 v3+0BarWPhyW4OuPtEfhlcoVdgpTAj2LYO4pyZCvk2Uf+ZBzIiAEXsUzHvW4svBz O8BEEV0zu+L8/qOSWBFalDkn/Jm8062rW2uwt6HBDkNkozKJfyQdYOYXk2Y4mXng U3T+GffodN0cLW4tQuDWiMD3ljPTQFoTaHoxDvaobN5bWWNpzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1BfFjxfgzs2JdjtKfweHIQPhxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVkNDMxZDUtZTMxOC0z MGFjLWExMzctODkxNTBmYmNjMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAusxPP5wNFjG91u7FqlksD3P2u7Rpyff68qt1i4d0JS8a1CoO/vPMfO EQioXHDdWRBEkY9PEjD9hln+6iFuOhF11zRa4BknBMdPGLTQTsJcriGi2lFcjQMk W7S71kpnS7gh+mqwMz4xSWWR3s4i0+Yszr/HxehUclJtFc24s8sGsJHBJzsXMV2Q 7julzimbRRuf7MTgbwHGGexGPE3OVQ5NdO6fOAyuyxtrMY1GFuyJVdw4horSylBG nVT6CbASvGCUyWqHlpHEpl0OCsbbASLfdDns4KQC31qFKVceQRKpdmCfQeEyONbv bRME4Pm83cZAPH7ccVPUuOmGgg3uCCs= -----END CERTIFICATE-----Generated at Sun Jun 8 11:13:01 2025 by rpki-client