$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb33764-24f8-3df4-aff7-4c2827452ac0.roa File: cfb33764-24f8-3df4-aff7-4c2827452ac0.roa (raw, json) Hash identifier: YG5uO8ryJbU+xR64YuSF2wuwBpM/AK/ut+bwHPaayFQ= Subject key identifier: 5C:24:7E:94:F6:7D:F7:33:76:42:05:93:82:B9:6C:D6:A6:FA:75:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D4312C24FC44C24EC27C5440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb33764-24f8-3df4-aff7-4c2827452ac0.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.224.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:2c:24:fc:44:c2:4e:c2:7c:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=0b103c01-7c8f-41fd-b5f8-b515bda8e652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:fa:2a:16:a6:57:9f:24:15:be:d1:dc:67: c4:ac:c0:26:7c:b9:bc:e5:cf:85:f5:3e:d4:51:3b: 0b:7a:c5:e9:b4:e0:cb:93:66:a1:08:5c:f4:20:13: df:68:1e:ca:43:bc:20:f1:1d:1e:cc:20:98:59:ee: 25:30:79:9b:87:bd:a3:6f:71:f4:eb:c4:a5:73:1a: 5c:f7:9e:b8:6e:93:ce:33:fb:bb:34:ba:1d:7d:68: 3b:fd:ed:b6:db:46:eb:bc:19:0b:3e:1f:54:6a:53: e4:64:10:28:07:74:19:44:39:1f:48:b3:79:2d:0c: 7b:2b:1d:b3:e2:a4:a1:1b:96:9e:c5:d2:a2:fd:c9: 4e:f5:a0:34:05:12:83:d9:b7:48:0c:03:63:d5:80: ae:d2:24:43:88:63:3f:2f:5f:d1:f4:78:19:3a:36: 39:e9:83:c3:c1:f8:12:a9:a3:39:57:06:28:36:7d: b3:56:00:8e:28:0c:fa:da:26:5a:99:93:d8:dd:5a: ea:e0:ef:a8:6d:87:0d:f1:ea:81:53:a0:74:24:44: fd:d6:ea:5b:76:85:4c:3b:92:75:8b:8c:f1:46:5c: 0b:ec:21:7b:52:40:d3:e2:b3:f8:58:9b:6c:1d:0f: ea:ce:e9:4c:a6:80:3b:54:96:f9:f4:ca:78:5d:89: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:24:7E:94:F6:7D:F7:33:76:42:05:93:82:B9:6C:D6:A6:FA:75:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfb33764-24f8-3df4-aff7-4c2827452ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ba:d7:c8:fc:2b:b7:58:73:3f:2d:eb:f1:6c:8d:09:01:d3: ab:39:cb:96:e0:33:c2:52:01:ae:dd:6b:1b:3d:c6:60:03:4f: fc:b9:f3:c3:d0:ea:36:1b:2f:b9:8d:59:5c:26:60:c1:a8:64: 4d:0c:9f:bd:48:df:ae:5f:e5:0b:30:15:fd:07:62:42:44:d5: 42:d6:f5:16:09:00:a0:13:b8:7c:08:6e:2d:49:65:dc:cc:d7: f9:d6:66:e4:2f:53:45:98:8a:0c:3e:2f:51:1f:f4:5f:68:79: a7:15:af:64:8d:de:dd:8f:65:9f:44:44:b8:c1:8a:61:0a:b3: 44:04:83:54:96:87:f0:5c:4a:1e:db:f1:61:ed:cd:bb:37:57: 99:44:3d:4b:6f:f5:1c:95:17:25:bd:90:a8:d3:01:5d:96:15: 53:53:1c:a1:24:23:0f:7d:b9:2c:e0:b3:3f:b9:b2:7a:21:62: cd:bb:ed:f8:59:37:42:df:da:4e:02:b8:60:2f:1e:b7:2b:0b: 61:4d:ba:b3:d4:70:19:c5:58:ec:93:88:99:d1:93:64:bb:6d: 9b:5c:d3:7f:81:5e:a9:5f:1c:70:1b:e9:65:f5:14:b1:36:ec: 9d:e2:28:8d:11:f1:ae:03:b9:07:ec:b5:83:ce:de:01:5c:99: 93:b9:6f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSwk/ETCTsJ8VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGIxMDNjMDEtN2M4Zi00MWZkLWI1ZjgtYjUxNWJkYThlNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu/6KhamV58kFb7R3GfErMAmfLm85c+F9T7U UTsLesXptODLk2ahCFz0IBPfaB7KQ7wg8R0ezCCYWe4lMHmbh72jb3H068Slcxpc 9564bpPOM/u7NLodfWg7/e2220brvBkLPh9UalPkZBAoB3QZRDkfSLN5LQx7Kx2z 4qShG5aexdKi/clO9aA0BRKD2bdIDANj1YCu0iRDiGM/L1/R9HgZOjY56YPDwfgS qaM5VwYoNn2zVgCOKAz62iZamZPY3Vrq4O+obYcN8eqBU6B0JET91upbdoVMO5J1 i4zxRlwL7CF7UkDT4rP4WJtsHQ/qzulMpoA7VJb59Mp4XYkZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwkfpT2ffczdkIFk4K5bNam+nWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZiMzM3NjQtMjRmOC0z ZGY0LWFmZjctNGMyODI3NDUyYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi618j8K7dYcz8t6/FsjQkB06s5y5bgM8JSAa7daxs9xmADT/y588PQ 6jYbL7mNWVwmYMGoZE0Mn71I365f5QswFf0HYkJE1ULW9RYJAKATuHwIbi1JZdzM 1/nWZuQvU0WYigw+L1Ef9F9oeacVr2SN3t2PZZ9ERLjBimEKs0QEg1SWh/BcSh7b 8WHtzbs3V5lEPUtv9RyVFyW9kKjTAV2WFVNTHKEkIw99uSzgsz+5snohYs277fhZ N0Lf2k4CuGAvHrcrC2FNurPUcBnFWOyTiJnRk2S7bZtc03+BXqlfHHAb6WX1FLE2 7J3iKI0R8a4DuQfstYPO3gFcmZO5b4E= -----END CERTIFICATE-----Generated at Sat Jun 7 23:07:57 2025 by rpki-client