$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6546f19-ee02-37e1-bc01-4dcf9ac71ee0.roa File: d6546f19-ee02-37e1-bc01-4dcf9ac71ee0.roa (raw, json) Hash identifier: 6dduzDENdDOkixjmNBKCFVE+Gb5G3xIFJUcIySRPacw= Subject key identifier: F8:AB:BB:80:46:B6:5B:F4:DB:F0:87:10:73:E8:36:DC:7D:C4:65:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA852E058C73B9B2334BB2D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6546f19-ee02-37e1-bc01-4dcf9ac71ee0.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 72.247.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2e:05:8c:73:b9:b2:33:4b:b2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=706778b1-3ae2-418d-aef2-1823ca998781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:72:24:49:5f:ac:d5:80:ad:51:2b:e3:a6: 97:3d:54:5e:91:f0:50:4a:9c:9b:ef:ce:b1:b8:6e: 4c:65:41:b4:86:05:6f:c6:98:7c:81:d9:c5:e4:81: 45:17:a4:de:4f:17:6b:ca:b4:5b:74:8d:cf:d4:4b: e1:94:d2:b6:95:73:aa:6d:b7:74:a7:44:ec:52:97: 89:6e:6b:7a:69:dc:13:36:ef:b7:96:3e:29:7f:01: d0:90:8f:0e:12:7b:71:65:1f:45:9a:49:56:32:75: 10:e6:4e:22:a5:a1:b3:93:45:e2:74:d9:9a:dc:1e: c0:3e:a7:cc:8b:95:58:15:69:1d:a8:9c:a9:74:52: 60:5c:a4:7e:28:c2:f4:5d:c2:5e:e5:a6:40:46:f3: 39:c2:57:99:87:f4:a0:ae:75:69:06:1e:29:c4:42: ea:41:c6:e5:e0:7a:83:85:9c:c8:ff:21:d7:8b:2d: eb:cc:68:80:6b:9d:c5:9b:c9:29:6b:c4:da:e4:ad: 09:26:3c:3a:e2:6c:8a:4c:33:3b:93:83:6b:0c:15: 40:d4:ab:29:67:9a:bb:9a:e1:aa:5f:9f:08:41:ce: 87:90:6a:5f:52:2b:8a:1e:1b:22:94:57:ad:b7:87: b9:cf:12:43:1f:b8:43:a4:71:5e:70:d6:22:dc:93: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:BB:80:46:B6:5B:F4:DB:F0:87:10:73:E8:36:DC:7D:C4:65:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6546f19-ee02-37e1-bc01-4dcf9ac71ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:84:ba:ff:5a:fa:ff:ac:43:42:e1:cf:c6:a9:ec:5d:7a:5b: af:ce:83:3d:d1:e7:cb:7d:5d:a2:31:d7:a2:8f:91:d0:d1:09: 68:c0:0a:7b:ae:82:a5:e6:f9:61:41:ec:ba:f4:09:56:00:57: 0f:3c:f0:11:4f:db:46:57:29:5e:80:19:8c:c6:af:1a:03:60: df:5f:c6:87:9e:5c:68:2b:57:6b:51:2f:c3:d1:00:5e:58:5d: 62:92:4c:4b:ae:3e:c2:45:ae:d2:cc:3f:65:cc:ee:c1:48:30: ec:7c:4d:83:47:92:cc:bc:79:46:56:1c:ab:7b:96:46:f8:b2: 13:52:12:cc:53:5c:0a:39:27:7d:55:67:5b:a4:1f:49:c9:e3: b6:b6:01:77:2c:4b:7f:e7:42:8d:d0:5e:dd:80:1f:8f:f0:ec: 96:da:3f:b6:84:7a:c7:c6:64:10:94:c2:e9:df:a4:73:40:30: 71:0e:0b:36:05:30:03:d1:f5:c4:f8:be:32:b8:41:44:aa:50: 27:14:8e:68:50:de:a3:0f:49:db:80:2c:8e:3d:62:c5:91:30: a3:61:22:11:80:61:95:57:0e:b0:d7:40:45:b4:55:c3:83:8c: 48:6c:a6:5c:97:b5:bf:6a:73:69:f2:65:74:12:cc:cc:0d:cd: be:b4:67:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS4FjHO5sjNLstAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NzA2Nzc4YjEtM2FlMi00MThkLWFlZjItMTgyM2NhOTk4NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsVyJElfrNWArVEr46aXPVRekfBQSpyb786x uG5MZUG0hgVvxph8gdnF5IFFF6TeTxdryrRbdI3P1EvhlNK2lXOqbbd0p0TsUpeJ bmt6adwTNu+3lj4pfwHQkI8OEntxZR9FmklWMnUQ5k4ipaGzk0XidNma3B7APqfM i5VYFWkdqJypdFJgXKR+KML0XcJe5aZARvM5wleZh/SgrnVpBh4pxELqQcbl4HqD hZzI/yHXiy3rzGiAa53Fm8kpa8Ta5K0JJjw64myKTDM7k4NrDBVA1KspZ5q7muGq X58IQc6HkGpfUiuKHhsilFett4e5zxJDH7hDpHFecNYi3JMzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiru4BGtlv02/CHEHPoNtx9xGU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY1NDZmMTktZWUwMi0z N2UxLWJjMDEtNGRjZjlhYzcxZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOEuv9a+v+sQ0Lhz8ap7F16W6/Ogz3R58t9XaIx16KPkdDRCWjACnuu gqXm+WFB7Lr0CVYAVw888BFP20ZXKV6AGYzGrxoDYN9fxoeeXGgrV2tRL8PRAF5Y XWKSTEuuPsJFrtLMP2XM7sFIMOx8TYNHksy8eUZWHKt7lkb4shNSEsxTXAo5J31V Z1ukH0nJ47a2AXcsS3/nQo3QXt2AH4/w7JbaP7aEesfGZBCUwunfpHNAMHEOCzYF MAPR9cT4vjK4QUSqUCcUjmhQ3qMPSduALI49YsWRMKNhIhGAYZVXDrDXQEW0VcOD jEhsplyXtb9qc2nyZXQSzMwNzb60Z14= -----END CERTIFICATE-----Generated at Sat Jun 7 13:46:25 2025 by rpki-client