$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa File: d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa (raw, json) Hash identifier: nzgYUrUM5N+c9it6ey2a96mZxyjlGYOQI4+gSnG3i9o= Subject key identifier: 06:B7:E9:C0:81:BF:07:51:AF:67:48:26:23:50:E8:FC:BC:83:73:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D594F8AAF73E8274689AB080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f8:aa:f7:3e:82:74:68:9a:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=5f0c624e-b2ea-4406-8bc4-ce4fc2869738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:92:6a:67:8d:c3:65:b7:79:db:0b:f1:b6: 90:15:54:8d:3b:16:2b:e4:25:15:12:d5:a2:28:20: bc:e8:19:b0:ae:f0:4e:ee:3d:83:f4:48:c6:31:78: a0:f6:33:3a:a6:22:ad:d9:6c:51:8d:29:a8:72:74: 32:62:01:4c:c1:44:9d:a4:b9:4c:76:a1:a3:2b:2e: 2b:09:a6:8c:ad:df:22:66:d0:fd:7f:81:8f:d3:b2: cb:61:fe:27:0c:87:99:cc:ff:bc:c5:27:43:eb:e5: 59:9a:be:fa:2e:47:23:47:c1:07:1d:23:0e:f2:68: 8d:2b:8d:45:f8:6a:cb:57:fe:d1:d0:ad:b8:87:a4: 78:7c:71:d0:37:2d:f0:29:ab:8a:e5:29:e9:ab:c0: 59:ba:45:cc:e4:7c:a5:0f:f2:dd:ae:83:91:d5:28: 03:9b:62:57:ac:84:22:47:99:e4:c6:f5:20:c2:0d: 17:42:06:af:77:c6:33:b4:c4:d9:74:76:1d:5b:c7: 7d:f5:be:83:01:29:0c:fe:0d:8f:f4:5f:f7:99:58: 0f:34:55:19:fc:f7:17:1c:28:06:78:57:52:b0:91: a0:55:3d:ad:93:55:6c:68:94:c8:80:23:bb:9e:6b: e2:ec:f8:20:f8:58:75:6b:6c:63:d3:e8:fc:80:86: 84:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B7:E9:C0:81:BF:07:51:AF:67:48:26:23:50:E8:FC:BC:83:73:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d5:ab:a5:b0:2e:4d:d6:b2:77:e0:7c:b0:61:76:51:b2:36: 5c:8b:9d:52:4f:da:e8:d0:dc:a4:0f:6d:bf:8d:d1:60:cc:bd: 63:2b:e0:6f:22:0a:9a:da:c4:95:17:18:f2:35:8c:aa:85:2b: df:16:6d:4b:47:fc:a8:dc:3c:a8:d7:ca:ae:b5:52:55:c3:d7: 60:00:b4:f7:4a:1f:18:5e:e8:42:30:db:44:e5:12:82:8d:c9: 44:b0:fd:c9:4e:6f:e5:f7:53:77:59:2e:7d:fa:ef:8c:f7:b1: 7c:ff:78:d7:e2:d1:1d:27:b8:cf:5b:50:9d:01:69:a2:16:79: 64:09:b4:bf:cb:3b:38:1d:7f:e2:a8:11:be:7c:13:88:b4:39: bf:c4:d0:a1:48:52:00:09:b5:72:35:87:66:f9:ea:e2:ff:fc: b3:34:8f:ca:bc:17:39:62:1e:a4:98:af:f3:21:98:c9:7c:05: 34:5c:d5:b3:4d:96:54:f6:37:3d:cc:85:25:ef:86:d0:36:ed: 1a:24:18:0e:26:ec:f2:33:75:41:f4:eb:39:69:28:a0:83:7d: bc:ff:f0:ce:88:53:25:30:41:de:22:bd:43:4d:1b:0a:a9:49: fc:87:64:8f:41:d0:06:07:4c:0c:16:33:b9:ef:34:35:d2:40: 84:99:3f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPiq9z6CdGiasIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NWYwYzYyNGUtYjJlYS00NDA2LThiYzQtY2U0ZmMyODY5NzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyraSameNw2W3edsL8baQFVSNOxYr5CUVEtWi KCC86BmwrvBO7j2D9EjGMXig9jM6piKt2WxRjSmocnQyYgFMwUSdpLlMdqGjKy4r CaaMrd8iZtD9f4GP07LLYf4nDIeZzP+8xSdD6+VZmr76LkcjR8EHHSMO8miNK41F +GrLV/7R0K24h6R4fHHQNy3wKauK5Snpq8BZukXM5HylD/LdroOR1SgDm2JXrIQi R5nkxvUgwg0XQgavd8YztMTZdHYdW8d99b6DASkM/g2P9F/3mVgPNFUZ/PcXHCgG eFdSsJGgVT2tk1VsaJTIgCO7nmvi7Pgg+Fh1a2xj0+j8gIaEFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa36cCBvwdRr2dIJiNQ6Py8g3OvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRkOWEyMGYtNjM1YS0z MGM1LWE3NjctYjQ2NmE4YjRlY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfVq6WwLk3WsnfgfLBhdlGyNlyLnVJP2ujQ3KQPbb+N0WDMvWMr4G8i CpraxJUXGPI1jKqFK98WbUtH/KjcPKjXyq61UlXD12AAtPdKHxhe6EIw20TlEoKN yUSw/clOb+X3U3dZLn3674z3sXz/eNfi0R0nuM9bUJ0BaaIWeWQJtL/LOzgdf+Ko Eb58E4i0Ob/E0KFIUgAJtXI1h2b56uL//LM0j8q8FzliHqSYr/MhmMl8BTRc1bNN llT2Nz3MhSXvhtA27RokGA4m7PIzdUH06zlpKKCDfbz/8M6IUyUwQd4ivUNNGwqp SfyHZI9B0AYHTAwWM7nvNDXSQISZP4w= -----END CERTIFICATE-----Generated at Sat Jun 7 14:11:24 2025 by rpki-client