$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbac86b9-ad52-3f12-946d-2d55637800a8.roa File: cbac86b9-ad52-3f12-946d-2d55637800a8.roa (raw, json) Hash identifier: Ax7tkC9eGcHVMiwDqqoaJgkGwzPeHtA4my0Y5BO4HGQ= Subject key identifier: E6:33:4A:57:15:FF:0A:9F:44:DE:B6:56:D8:2D:17:9A:0F:94:1E:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852E37FF46B9018A647100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbac86b9-ad52-3f12-946d-2d55637800a8.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 72.247.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2e:37:ff:46:b9:01:8a:64:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=1f29231c-31f8-426a-b6c2-f0bdfd022bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:cc:57:a7:f0:c7:8a:15:16:9d:10:9a:3d: 24:2f:fc:46:2b:f2:9e:bb:1c:c3:d6:55:b6:1e:83: a6:c5:66:0b:b0:16:85:f5:c2:c2:18:77:9c:ff:a3: 26:ca:00:cc:30:4b:2d:3a:09:cb:f2:f5:57:99:85: 7b:5f:26:60:32:95:0d:c2:a8:f8:74:55:05:0c:98: 67:f4:28:67:1a:20:36:b1:4b:a4:c8:e1:53:1a:8e: 98:c6:4b:aa:09:7e:f0:e0:52:d5:41:3d:2d:f0:b1: d2:46:cc:d1:5b:b8:8e:a4:09:b2:44:49:34:f8:2f: 98:f3:85:05:c0:dd:12:aa:b1:0a:13:9d:8d:02:75: c6:cf:be:bb:fb:68:e6:9f:d6:40:b0:2f:7b:81:03: 75:84:86:5c:57:2b:69:1d:42:ff:94:43:02:d4:57: 58:b2:da:a3:d6:dc:46:48:4f:7a:4c:4f:8d:4b:7c: 43:e6:89:12:56:7f:f2:05:10:b4:ca:1c:ad:93:08: 88:87:96:b3:f0:de:97:a9:56:4b:1d:1a:c8:86:67: 09:79:1f:a6:44:a5:12:15:85:87:7e:82:c7:20:49: 26:3f:ec:4f:c3:c5:e2:3e:3f:6b:3c:07:91:22:7f: 40:4d:0c:5b:f8:10:d7:16:37:53:ba:a1:a7:f4:f3: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:33:4A:57:15:FF:0A:9F:44:DE:B6:56:D8:2D:17:9A:0F:94:1E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbac86b9-ad52-3f12-946d-2d55637800a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5b:93:fe:f0:00:72:0b:9e:9e:2f:cb:3e:12:69:96:58:45: 15:5c:07:3a:c1:93:e3:18:01:58:ed:f8:b1:8c:78:23:13:56: 94:20:73:00:4b:84:61:a0:bc:ec:dd:5a:bf:da:54:d0:a6:cc: 22:e3:fb:82:21:4b:b5:d5:f4:e2:7f:01:63:32:5c:ed:3d:e2: 6f:18:a3:62:7f:c0:f3:dd:aa:c0:f3:a7:8a:36:79:26:88:19: 64:4f:6c:b4:8b:1b:ae:ca:44:b5:63:b1:4f:6e:19:37:2f:6d: 1b:09:43:e7:80:88:38:35:73:22:89:3d:9d:cc:76:50:96:c1: 10:d5:3d:79:e7:dd:4d:85:ce:ec:d8:79:af:fe:48:81:e6:18: 48:d5:60:54:be:18:cc:a4:09:06:0e:43:ba:04:98:57:e0:b9: a2:54:01:36:8a:86:cb:da:35:e1:30:3b:76:ab:c6:a1:b6:e0: 8a:5c:95:3c:dc:9f:ed:ff:db:e3:87:03:47:d4:41:b0:c4:62: cd:f6:d3:e6:24:fc:70:74:06:78:57:b1:86:cc:48:ac:43:d1: 5d:94:c1:50:9d:0d:7b:8b:80:6d:a7:41:5d:0a:89:80:7a:25: c4:2a:c0:07:32:03:3e:9d:5e:73:cc:ce:e3:90:e8:d3:a3:b9: d0:a4:2f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS43/0a5AYpkcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MWYyOTIzMWMtMzFmOC00MjZhLWI2YzItZjBiZGZkMDIyYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15TMV6fwx4oVFp0Qmj0kL/xGK/KeuxzD1lW2 HoOmxWYLsBaF9cLCGHec/6MmygDMMEstOgnL8vVXmYV7XyZgMpUNwqj4dFUFDJhn 9ChnGiA2sUukyOFTGo6YxkuqCX7w4FLVQT0t8LHSRszRW7iOpAmyREk0+C+Y84UF wN0SqrEKE52NAnXGz767+2jmn9ZAsC97gQN1hIZcVytpHUL/lEMC1FdYstqj1txG SE96TE+NS3xD5okSVn/yBRC0yhytkwiIh5az8N6XqVZLHRrIhmcJeR+mRKUSFYWH foLHIEkmP+xPw8XiPj9rPAeRIn9ATQxb+BDXFjdTuqGn9PNeqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYzSlcV/wqfRN62VtgtF5oPlB5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JhYzg2YjktYWQ1Mi0z ZjEyLTk0NmQtMmQ1NTYzNzgwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPd0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApbk/7wAHILnp4vyz4SaZZYRRVcBzrBk+MYAVjt+LGMeCMTVpQgcwBL hGGgvOzdWr/aVNCmzCLj+4IhS7XV9OJ/AWMyXO094m8Yo2J/wPPdqsDzp4o2eSaI GWRPbLSLG67KRLVjsU9uGTcvbRsJQ+eAiDg1cyKJPZ3MdlCWwRDVPXnn3U2FzuzY ea/+SIHmGEjVYFS+GMykCQYOQ7oEmFfguaJUATaKhsvaNeEwO3arxqG24IpclTzc n+3/2+OHA0fUQbDEYs320+Yk/HB0BnhXsYbMSKxD0V2UwVCdDXuLgG2nQV0KiYB6 JcQqwAcyAz6dXnPMzuOQ6NOjudCkLx0= -----END CERTIFICATE-----Generated at Sat Jun 7 19:07:22 2025 by rpki-client