$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7bb4a8c-d55a-3371-988a-5121e11bfee6.roa File: d7bb4a8c-d55a-3371-988a-5121e11bfee6.roa (raw, json) Hash identifier: otp+ed5bxq6AeYAEHwVIIEm5FSQQBiilCCN2XBNdTsc= Subject key identifier: F0:59:B0:BA:51:9E:A8:D4:4C:C1:36:62:62:94:1D:3C:6F:D9:D5:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85FCEB86F2FCCF7D7050900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7bb4a8c-d55a-3371-988a-5121e11bfee6.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 36183 IP address blocks: 172.224.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:ce:b8:6f:2f:cc:f7:d7:05:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=9010437d-8941-4dcd-9b4c-5d85f1f170ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:6d:f9:69:f0:a9:cf:64:c2:4c:46:ba:0b: 7c:8e:67:ec:3e:bc:dc:6c:8d:35:e5:f0:7e:cb:6d: 32:cf:78:de:7c:31:ee:af:fc:7a:e4:9f:0e:56:07: a0:c1:74:10:c6:23:c1:3f:af:b1:31:86:2d:a2:5a: 4f:91:f3:6e:81:20:7a:61:c2:9e:e5:68:bd:56:48: 7c:1c:41:c8:d3:e3:70:4b:cf:7f:d8:cc:f0:40:95: ac:48:5b:01:79:b3:2d:ea:a2:26:6f:f2:4d:d1:80: 86:4f:c1:54:c6:7c:d4:92:af:ee:ee:e8:1c:0e:91: 9d:16:cd:fd:c1:e1:47:c5:0d:b2:79:2f:5f:2e:3c: a6:c1:40:1f:fb:77:27:66:25:a6:f0:96:33:68:7b: dc:2a:c1:fc:87:9a:9f:03:a9:48:7e:b8:4e:d5:e9: 32:e0:e3:e5:1a:8c:39:c6:53:f7:24:66:20:f6:a4: b5:5d:c9:74:e0:57:a4:12:61:03:36:d9:8d:ab:17: 01:56:98:6b:a2:4c:65:53:65:a8:bb:57:e3:ec:74: f6:85:d2:e2:0f:db:67:2d:20:03:e2:d1:09:74:85: 7f:15:e1:d5:fd:fc:38:26:bf:0e:d4:57:49:c1:c9: 76:f0:5d:7f:cb:6e:a7:c3:82:c5:ee:55:1d:30:15: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:59:B0:BA:51:9E:A8:D4:4C:C1:36:62:62:94:1D:3C:6F:D9:D5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7bb4a8c-d55a-3371-988a-5121e11bfee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6c:15:6f:c1:ea:25:d0:f2:c8:33:b7:bf:0a:f7:07:91:5f: d2:44:e2:95:da:26:cf:07:df:3d:a8:42:29:bc:fb:61:79:86: bf:3a:2c:3e:4d:49:9a:1f:ea:74:14:1b:15:ba:d5:f0:8a:10: 5f:68:fc:94:ef:e5:ca:c0:ef:f9:42:6d:dd:54:ef:99:59:f8: 16:f1:0a:63:8b:a5:d0:cf:af:27:7c:9d:6f:f9:82:50:25:77: a9:c4:34:98:c0:fb:25:19:80:6e:24:88:c4:ae:d1:3c:c2:69: a9:34:50:ed:1c:b7:06:99:c9:00:e7:96:85:4b:63:b7:61:63: b5:16:8e:ce:c2:b4:24:a3:5e:cc:fb:9a:e6:c7:ce:4c:0c:19: c9:30:8b:18:e7:e9:f6:33:fe:26:6a:24:30:7d:0b:c5:12:00: d1:29:e0:7b:34:d7:5e:ef:c3:d4:d2:a5:9e:48:7f:98:19:0d: ab:89:06:e7:42:46:70:22:5f:30:8b:dd:c6:8d:4c:6a:cc:8b: cf:d7:11:7c:d7:e6:4e:07:c4:f0:cd:a4:51:f8:b7:d1:a1:af: 5d:ae:c5:33:3e:ef:e0:05:8d:1e:09:64:7e:cc:b5:9d:41:30: 3b:e3:2c:0b:5f:8e:b8:dc:2f:7b:dc:52:06:a3:86:aa:0c:5a: ec:93:46:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX864by/M99cFCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OTAxMDQzN2QtODk0MS00ZGNkLTliNGMtNWQ4NWYxZjE3MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrht+Wnwqc9kwkxGugt8jmfsPrzcbI015fB+ y20yz3jefDHur/x65J8OVgegwXQQxiPBP6+xMYYtolpPkfNugSB6YcKe5Wi9Vkh8 HEHI0+NwS89/2MzwQJWsSFsBebMt6qImb/JN0YCGT8FUxnzUkq/u7ugcDpGdFs39 weFHxQ2yeS9fLjymwUAf+3cnZiWm8JYzaHvcKsH8h5qfA6lIfrhO1eky4OPlGow5 xlP3JGYg9qS1Xcl04FekEmEDNtmNqxcBVphrokxlU2Wou1fj7HT2hdLiD9tnLSAD 4tEJdIV/FeHV/fw4Jr8O1FdJwcl28F1/y26nw4LF7lUdMBUkQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBZsLpRnqjUTME2YmKUHTxv2dWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdiYjRhOGMtZDU1YS0z MzcxLTk4OGEtNTEyMWUxMWJmZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJsFW/B6iXQ8sgzt78K9weRX9JE4pXaJs8H3z2oQim8+2F5hr86LD5N SZof6nQUGxW61fCKEF9o/JTv5crA7/lCbd1U75lZ+BbxCmOLpdDPryd8nW/5glAl d6nENJjA+yUZgG4kiMSu0TzCaak0UO0ctwaZyQDnloVLY7dhY7UWjs7CtCSjXsz7 mubHzkwMGckwixjn6fYz/iZqJDB9C8USANEp4Hs0117vw9TSpZ5If5gZDauJBudC RnAiXzCL3caNTGrMi8/XEXzX5k4HxPDNpFH4t9Ghr12uxTM+7+AFjR4JZH7MtZ1B MDvjLAtfjrjcL3vcUgajhqoMWuyTRjA= -----END CERTIFICATE-----Generated at Sat Jun 7 13:54:53 2025 by rpki-client