$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/defec66a-ae7d-36b6-8158-0728ea833702.roa File: defec66a-ae7d-36b6-8158-0728ea833702.roa (raw, json) Hash identifier: 3HgUoEIXHRn1kO298FQPrTa85bkTDE+oTE6J9KVMCH4= Subject key identifier: CE:08:62:70:BF:85:22:9A:6D:2D:6D:C0:51:E5:FC:80:F7:B4:A2:E7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D5416CCE83AA3CAB1B01C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/defec66a-ae7d-36b6-8158-0728ea833702.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 31984 IP address blocks: 173.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:41:6c:ce:83:aa:3c:ab:1b:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=29529b79-94b4-4150-849f-8d041c192a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:50:6d:34:92:88:ff:ea:21:4f:59:ae:59: 28:9d:5a:be:d3:6f:6d:0c:5c:08:58:22:8b:35:b2: c7:49:8e:53:73:ca:7e:0b:2a:f1:f5:4a:10:cf:e9: fd:a5:95:99:2f:a6:21:6a:33:94:ef:d8:53:a6:cc: 33:1e:38:0d:08:5c:75:e8:ee:8b:6b:25:4e:11:a8: af:95:05:cb:dd:bd:cf:d5:48:c8:be:85:19:c4:ac: 23:84:37:18:6e:ed:53:ba:5f:7c:a3:2c:e0:0b:f3: e7:2b:13:92:69:2e:93:71:14:0f:05:33:ae:21:c0: 71:dd:bf:5a:ca:ae:15:79:61:b1:35:64:0d:f5:e9: 18:c6:35:ef:e3:49:21:51:48:d3:42:35:90:59:35: 07:0f:53:56:07:8e:23:89:0e:30:51:d9:fa:98:da: 76:58:c6:67:f0:4b:22:d2:23:d7:ed:6c:b9:c0:f3: f8:4d:c2:dc:52:20:67:14:29:6f:96:4c:a4:49:43: c9:bd:a4:9e:e4:65:2f:c2:43:ad:59:c0:c4:83:5b: 1d:f7:c6:3f:84:c7:a4:ee:5c:0c:5c:0c:6c:de:00: f1:a2:93:24:32:60:e7:34:16:ad:b9:55:50:88:5e: 7f:7f:d4:5c:e0:5c:29:1d:2e:5c:4d:b2:0b:c7:15: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:08:62:70:BF:85:22:9A:6D:2D:6D:C0:51:E5:FC:80:F7:B4:A2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/defec66a-ae7d-36b6-8158-0728ea833702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ef:b0:05:b6:54:9e:e4:8f:f5:ac:f9:79:f5:cd:f1:81:2e: 58:a7:18:76:bd:17:49:ba:97:9e:84:fc:ef:af:5a:36:96:4b: 67:e1:43:79:51:54:7e:04:2c:c0:4c:ee:56:a0:02:73:26:90: ec:a2:b0:25:94:fd:71:54:db:87:38:03:9f:fc:7e:16:23:0f: 29:1b:b9:03:85:7f:44:8c:cb:7a:29:49:c8:d7:0b:25:3d:39: 25:b3:35:26:56:f4:af:ce:50:66:24:f9:bd:e5:fc:8e:bd:b5: a6:ca:d0:1b:7d:5e:d0:08:51:7b:fb:4c:d0:9f:07:ac:10:ec: 9e:c8:33:6c:a9:09:fa:df:77:b2:37:e2:4d:b0:e1:3e:00:c7: 52:11:cd:49:19:a0:52:80:e6:dc:10:22:fe:d8:6d:5b:9d:34: 75:1b:6c:24:82:11:ef:93:eb:bd:5f:d7:67:11:d4:74:dd:c5: 26:ae:34:a8:e3:d5:27:ac:05:66:0d:1f:df:cb:dc:65:68:86: 71:78:ab:d3:55:e5:cf:1a:44:72:6f:61:27:28:a8:44:b5:5d: d3:d9:1b:60:dc:d1:f6:76:08:6f:7f:9c:b8:3b:72:fc:f2:e1: 9f:b6:04:a2:6c:63:89:23:e5:3a:ea:ec:b9:64:72:78:e9:d6: 72:0e:5e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UFszoOqPKsbAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk Mjk1MjliNzktOTRiNC00MTUwLTg0OWYtOGQwNDFjMTkyYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu69QbTSSiP/qIU9ZrlkonVq+029tDFwIWCKL NbLHSY5Tc8p+Cyrx9UoQz+n9pZWZL6YhajOU79hTpswzHjgNCFx16O6LayVOEaiv lQXL3b3P1UjIvoUZxKwjhDcYbu1Tul98oyzgC/PnKxOSaS6TcRQPBTOuIcBx3b9a yq4VeWGxNWQN9ekYxjXv40khUUjTQjWQWTUHD1NWB44jiQ4wUdn6mNp2WMZn8Esi 0iPX7Wy5wPP4TcLcUiBnFClvlkykSUPJvaSe5GUvwkOtWcDEg1sd98Y/hMek7lwM XAxs3gDxopMkMmDnNBatuVVQiF5/f9Rc4FwpHS5cTbILxxXCfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4IYnC/hSKabS1twFHl/ID3tKLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGVmZWM2NmEtYWU3ZC0z NmI2LTgxNTgtMDcyOGVhODMzNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7vsAW2VJ7kj/Ws+Xn1zfGBLlinGHa9F0m6l56E/O+vWjaWS2fhQ3lR VH4ELMBM7lagAnMmkOyisCWU/XFU24c4A5/8fhYjDykbuQOFf0SMy3opScjXCyU9 OSWzNSZW9K/OUGYk+b3l/I69tabK0Bt9XtAIUXv7TNCfB6wQ7J7IM2ypCfrfd7I3 4k2w4T4Ax1IRzUkZoFKA5twQIv7YbVudNHUbbCSCEe+T671f12cR1HTdxSauNKjj 1SesBWYNH9/L3GVohnF4q9NV5c8aRHJvYScoqES1XdPZG2Dc0fZ2CG9/nLg7cvzy 4Z+2BKJsY4kj5Trq7Llkcnjp1nIOXsA= -----END CERTIFICATE-----Generated at Sat Jun 7 14:48:00 2025 by rpki-client