$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa File: c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa (raw, json) Hash identifier: owcdwpT1nup69kt4GcqdSte4oA4zHmO/06Wlzme3gn0= Subject key identifier: BE:08:7A:8B:F3:9E:1D:73:68:F4:EC:93:4A:E8:5F:B7:A3:2D:3A:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85FAFDB4FB3F73D5FE88080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:af:db:4f:b3:f7:3d:5f:e8:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=c503553f-903a-4661-8faa-4734730adde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:84:e2:fe:21:f3:e9:1b:ae:d9:fc:df:05: ad:7b:ff:33:b0:f4:1d:ad:37:27:a6:db:91:c1:9e: 63:14:5f:56:f6:13:39:44:b6:65:81:ae:82:11:88: 60:4d:32:a7:97:2c:08:83:c6:89:72:df:ce:7f:f0: 2e:0a:9d:85:59:db:8d:7c:75:fd:ad:79:74:1a:cb: a8:be:e2:4a:2e:1a:8e:6d:4f:09:8d:dd:db:24:ac: 7b:ca:57:a0:c4:8b:fe:b0:01:b1:b4:9f:68:4d:82: 34:2b:14:c6:f8:0f:9e:91:f7:fd:49:4e:f9:73:28: b7:7a:bc:de:97:a3:77:8a:b9:91:81:97:62:2d:97: 0a:37:fa:b6:a6:0a:91:47:30:11:09:56:81:ac:ff: ff:6e:31:6e:fa:f5:20:e8:38:66:52:a4:c9:34:06: 21:6d:51:32:5d:f0:d9:b1:e2:03:c6:2a:52:99:9f: 06:2e:14:3b:3d:a4:34:a7:23:2c:1f:15:56:22:e6: 59:0d:a5:d8:0c:8e:fe:f6:91:1c:1d:7d:77:e7:43: 21:7f:e0:ec:9a:4f:63:8d:29:ac:81:5c:2a:4c:ae: 7f:77:49:82:fe:b2:ad:51:c1:dc:42:1e:56:b7:f6: 4f:45:74:83:04:82:ca:3b:96:70:4d:de:fb:01:21: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:08:7A:8B:F3:9E:1D:73:68:F4:EC:93:4A:E8:5F:B7:A3:2D:3A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:aa:5e:e3:b3:7c:62:a9:83:17:50:b9:78:85:03:4f:d8:0a: 60:b0:6a:c8:5a:16:9c:ea:4a:1b:07:2e:6d:d5:65:61:d1:37: 92:b8:86:e8:37:01:2b:f9:06:dc:1c:d6:ca:1f:ef:6a:1c:3b: e7:ee:09:dc:de:fe:7c:ab:0c:3a:8c:fc:da:00:0e:98:17:fd: 0b:96:da:dd:41:58:a4:54:e5:9b:b1:ef:8c:7a:c2:1c:13:ca: 28:66:b9:ef:3c:8c:1b:70:9c:c1:2a:a7:b2:3e:ae:79:99:fa: 43:f8:08:d6:16:4f:2c:64:fe:f8:e1:cb:eb:d1:f7:c9:bf:cd: da:87:5b:df:74:3b:40:2f:be:b8:09:38:12:78:e2:f0:a3:02: 11:26:53:e5:2e:f3:b2:fa:22:67:17:71:7c:3f:1b:28:49:79: ad:7c:f7:1d:17:fa:63:4d:18:aa:a7:ca:69:cb:9d:0d:f0:50: 70:92:fd:46:4b:54:e6:78:65:a1:be:b9:11:c2:18:dc:2b:7a: a5:46:64:51:25:33:8e:fe:0d:0f:84:85:45:6a:b8:89:a1:f7: d7:66:b4:a3:74:ff:9d:41:28:e4:5a:99:2d:7b:d9:8a:ea:ea: 46:8a:79:a7:e9:14:2a:08:7c:26:a3:69:9a:98:cb:c3:11:45: 66:72:84:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6/bT7P3PV/ogIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YzUwMzU1M2YtOTAzYS00NjYxLThmYWEtNDczNDczMGFkZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6uE4v4h8+kbrtn83wWte/8zsPQdrTcnptuR wZ5jFF9W9hM5RLZlga6CEYhgTTKnlywIg8aJct/Of/AuCp2FWduNfHX9rXl0Gsuo vuJKLhqObU8Jjd3bJKx7ylegxIv+sAGxtJ9oTYI0KxTG+A+ekff9SU75cyi3erze l6N3irmRgZdiLZcKN/q2pgqRRzARCVaBrP//bjFu+vUg6DhmUqTJNAYhbVEyXfDZ seIDxipSmZ8GLhQ7PaQ0pyMsHxVWIuZZDaXYDI7+9pEcHX1350Mhf+Dsmk9jjSms gVwqTK5/d0mC/rKtUcHcQh5Wt/ZPRXSDBILKO5ZwTd77ASG24QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4Ieovznh1zaPTsk0roX7ejLTrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg4YjU3ZjUtNWNhMy0z Y2QwLTllYzQtYmFmZWYzNWIzM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2qXuOzfGKpgxdQuXiFA0/YCmCwashaFpzqShsHLm3VZWHRN5K4hug3 ASv5Btwc1sof72ocO+fuCdze/nyrDDqM/NoADpgX/QuW2t1BWKRU5Zux74x6whwT yihmue88jBtwnMEqp7I+rnmZ+kP4CNYWTyxk/vjhy+vR98m/zdqHW990O0AvvrgJ OBJ44vCjAhEmU+Uu87L6ImcXcXw/GyhJea189x0X+mNNGKqnymnLnQ3wUHCS/UZL VOZ4ZaG+uRHCGNwreqVGZFElM47+DQ+EhUVquImh99dmtKN0/51BKORamS172Yrq 6kaKeafpFCoIfCajaZqYy8MRRWZyhIk= -----END CERTIFICATE-----Generated at Sat Jun 7 13:49:50 2025 by rpki-client