$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa File: c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa (raw, json) Hash identifier: VqQ7vY2Kv8ANKHXAF10DXzGFd4Tta5QsLmfE02oDRu4= Subject key identifier: 35:0C:1B:97:3D:D7:F1:2F:70:71:15:2E:AC:86:6C:34:24:B2:83:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A093AAD7326E28DF69F263640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 63949 IP address blocks: 172.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:ad:73:26:e2:8d:f6:9f:26:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=8d45dcf4-2fee-4261-9885-fe83537fb770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:82:ef:dd:b4:92:b1:0f:17:5f:64:80:ad: fc:4e:d0:35:3a:50:01:7a:23:0f:a3:65:1a:e0:8d: 69:53:75:7f:3a:0e:2d:f2:11:81:e6:99:8f:c4:48: cc:2b:e3:3f:db:1e:5e:e2:51:00:35:1c:af:d9:ee: 86:a9:80:27:0c:fd:44:ff:d3:00:3c:97:c9:88:23: 3d:90:d7:4a:74:2f:a2:28:45:7f:6a:82:f6:08:4f: f5:33:19:ad:78:a8:d5:25:7e:4d:ab:92:74:fc:50: fa:e1:db:93:8c:d0:86:e6:c3:f8:50:22:24:c1:99: 4a:5f:61:ed:81:72:32:ad:a6:cd:65:c4:34:2b:e5: 97:0d:bd:06:c1:fb:7d:29:94:fe:ef:c8:b0:ee:ff: e5:7c:cc:52:3d:c3:b3:61:bc:ee:88:cc:8c:33:e6: 1c:b3:48:a8:20:cc:8c:20:0a:b1:3b:b3:51:c9:2b: c3:07:a8:1d:6a:3c:dd:3d:e8:5a:b1:e4:97:8a:80: 41:15:5e:68:e4:c7:14:28:ff:dd:48:6b:43:4a:cb: d1:f7:54:59:46:0f:6d:c1:d7:38:ba:93:c2:dc:f2: 00:c4:d9:46:66:48:3f:c4:e8:bc:7e:eb:76:1b:35: 31:af:ab:fe:f1:99:de:77:0c:6c:b9:86:c3:ed:7f: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:1B:97:3D:D7:F1:2F:70:71:15:2E:AC:86:6C:34:24:B2:83:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4f:4f:bb:aa:e3:30:06:c3:e8:a7:f7:28:ea:12:5f:88:81: 7a:b1:cb:07:f1:e9:1e:62:1e:f3:1f:7e:2f:96:5c:5f:10:5b: d7:2a:28:a8:ce:c2:b2:8c:81:4b:5f:d8:b1:63:af:fe:af:b5: 6a:3b:e1:29:1b:3d:d0:88:3b:bd:a4:f5:85:3f:65:5e:6d:f7: b4:06:b8:d3:8e:36:d3:7d:9f:02:22:c2:1b:40:0d:a4:19:4f: 1e:64:9b:0f:be:2c:5e:c5:02:5f:48:7b:79:78:5d:9b:99:77: 0d:15:48:d0:a3:46:38:74:25:80:b6:8b:f8:e5:6b:bb:8e:b4: 3d:5c:fb:c6:18:41:f3:82:e9:06:24:62:e2:ef:01:3f:93:e4: 33:c0:6f:5c:b8:6f:fc:17:42:7f:38:97:96:24:ef:91:69:19: 31:31:cd:12:9c:b9:ff:ee:bf:2a:4f:10:3f:cf:63:a6:e3:fe: 0d:77:3e:ee:01:a6:94:0d:95:22:5d:cb:18:75:65:4e:cc:4e: 02:59:ae:7a:44:57:ff:ed:61:cf:94:1d:e2:68:8c:00:33:4d: 7b:4f:b8:1c:a6:67:6d:12:54:b4:13:90:27:81:96:2c:87:30: 97:02:71:19:c5:fe:8d:15:af:e3:dc:62:16:8c:b0:3a:88:ac: fb:6e:8d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOq1zJuKN9p8mNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk OGQ0NWRjZjQtMmZlZS00MjYxLTk4ODUtZmU4MzUzN2ZiNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMyC7920krEPF19kgK38TtA1OlABeiMPo2Ua 4I1pU3V/Og4t8hGB5pmPxEjMK+M/2x5e4lEANRyv2e6GqYAnDP1E/9MAPJfJiCM9 kNdKdC+iKEV/aoL2CE/1MxmteKjVJX5Nq5J0/FD64duTjNCG5sP4UCIkwZlKX2Ht gXIyrabNZcQ0K+WXDb0Gwft9KZT+78iw7v/lfMxSPcOzYbzuiMyMM+Ycs0ioIMyM IAqxO7NRySvDB6gdajzdPehaseSXioBBFV5o5McUKP/dSGtDSsvR91RZRg9twdc4 upPC3PIAxNlGZkg/xOi8fut2GzUxr6v+8ZnedwxsuYbD7X8+7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUMG5c91/EvcHEVLqyGbDQksoPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMzM2FiYzMtN2ZmMi0z YWZiLTgwZmYtNmY1ZjlmMjU3NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVPT7uq4zAGw+in9yjqEl+IgXqxywfx6R5iHvMffi+WXF8QW9cqKKjO wrKMgUtf2LFjr/6vtWo74SkbPdCIO72k9YU/ZV5t97QGuNOONtN9nwIiwhtADaQZ Tx5kmw++LF7FAl9Ie3l4XZuZdw0VSNCjRjh0JYC2i/jla7uOtD1c+8YYQfOC6QYk YuLvAT+T5DPAb1y4b/wXQn84l5Yk75FpGTExzRKcuf/uvypPED/PY6bj/g13Pu4B ppQNlSJdyxh1ZU7MTgJZrnpEV//tYc+UHeJojAAzTXtPuBymZ20SVLQTkCeBliyH MJcCcRnF/o0Vr+PcYhaMsDqIrPtujWs= -----END CERTIFICATE-----Generated at Sat Jun 7 19:16:25 2025 by rpki-client